This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32322d3232203d3e20323733303731.roa
File:                     3230302e3135302e3234382e302f32322d3232203d3e20323733303731.roa (raw, json)
Hash identifier:          Wr/csLmGCaR62SrzmxitgJeGeTNRtB+fyesq9O2LI6c=
Subject key identifier:   27:FD:E1:01:F7:A5:2B:3C:31:72:9B:4B:6C:9B:F5:B5:5D:41:BF:6B
Certificate issuer:       /CN=8A9CF86C98160BC5CA0F1A72DB45826172C4A739
Certificate serial:       4B5C0EDE582A4C93778DE652D5A969772E176814
Authority key identifier: 8A:9C:F8:6C:98:16:0B:C5:CA:0F:1A:72:DB:45:82:61:72:C4:A7:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32322d3232203d3e20323733303731.roa
Signing time:             Fri 02 Jan 2026 16:15:00 +0000
ROA not before:           Fri 02 Jan 2026 16:10:00 +0000
ROA not after:            Fri 01 Jan 2027 16:15:00 +0000
asID:                     273071
IP address blocks:        200.150.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5c:0e:de:58:2a:4c:93:77:8d:e6:52:d5:a9:69:77:2e:17:68:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9CF86C98160BC5CA0F1A72DB45826172C4A739
        Validity
            Not Before: Jan  2 16:10:00 2026 GMT
            Not After : Jan  1 16:15:00 2027 GMT
        Subject: CN=27FDE101F7A52B3C31729B4B6C9BF5B55D41BF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:b8:8d:a6:8e:f4:15:8f:65:66:b0:ce:19:
                    cb:31:ed:83:82:fe:af:d7:34:7b:11:65:52:68:8b:
                    57:f4:38:2c:bc:57:2b:87:39:32:5b:b0:2e:09:4c:
                    e7:38:71:2f:71:f5:62:36:c8:ac:ca:96:94:63:4c:
                    e4:df:8c:55:bd:bc:b4:14:ca:d1:7c:8d:82:9b:a7:
                    24:96:76:80:22:d1:12:12:fa:17:67:2f:19:8c:ef:
                    a8:af:85:f4:c4:d9:5e:8b:cd:73:27:32:40:8c:9b:
                    96:b1:c5:d7:c2:bb:e4:30:a3:8e:28:7a:27:5c:1b:
                    0d:67:69:17:07:ae:a0:87:81:a1:48:44:73:c7:3d:
                    e7:a0:3a:0b:77:eb:d5:24:35:18:cf:4d:cc:c9:88:
                    8f:87:61:d6:90:1d:25:ce:40:79:a8:6c:3b:89:57:
                    d7:af:09:66:ba:9f:66:47:5e:ed:e4:cf:39:22:f1:
                    f7:dd:6b:d0:7e:a2:46:18:5d:be:b1:2a:7a:65:4d:
                    77:96:dc:d0:70:51:c6:63:ff:73:77:8c:ed:47:75:
                    2b:6a:c0:01:16:73:97:f0:f6:50:67:ef:18:7f:f1:
                    52:c0:11:1a:d4:09:5d:dd:5e:4e:66:db:fb:e5:3a:
                    3b:70:68:9a:33:90:53:b3:3a:4c:c5:bc:0d:4f:81:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:E1:01:F7:A5:2B:3C:31:72:9B:4B:6C:9B:F5:B5:5D:41:BF:6B
            X509v3 Authority Key Identifier:
                keyid:8A:9C:F8:6C:98:16:0B:C5:CA:0F:1A:72:DB:45:82:61:72:C4:A7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A9CF86C98160BC5CA0F1A72DB45826172C4A739.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A5FB43E5E0F3CA3A08B5609D96EDEB9514DE4DAEABFCA69EC257AF1C47DD1E3/0/3230302e3135302e3234382e302f32322d3232203d3e20323733303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:80:80:f5:09:38:1a:e1:11:2f:d1:79:f2:9b:15:8e:9a:77:
         68:9a:06:90:2f:1b:fa:6f:4e:ba:66:ba:c5:23:1e:e4:a2:c7:
         56:56:28:74:eb:38:b7:81:6f:b7:8c:07:22:86:e2:99:32:d8:
         26:8f:a2:a2:aa:34:88:7d:82:51:ad:65:a3:ca:33:a5:1d:79:
         97:e7:e5:32:ee:09:00:6f:84:d0:11:48:02:be:62:92:fe:ba:
         a7:3a:4a:24:4f:28:f4:e9:80:67:bf:bf:1e:c5:b7:3f:af:2d:
         ab:c3:8f:49:b4:11:de:d0:e0:a4:ea:f2:ba:d7:ef:15:33:43:
         2b:a0:6e:f1:6a:1a:37:71:ad:ed:0b:48:32:7c:2a:be:07:56:
         3b:14:17:01:09:47:7b:d4:02:bb:14:eb:e6:21:fc:cf:5c:c7:
         a3:5a:f1:bd:6e:22:e9:b7:0c:e3:95:e0:3a:81:ab:81:71:9a:
         62:b3:12:85:ba:07:54:d7:24:d5:70:ac:85:bf:e0:39:22:a0:
         2a:b4:11:9a:5d:57:4d:24:a2:cc:a9:b2:cd:9c:99:de:fb:98:
         1b:43:85:fd:4c:7b:a9:c5:71:31:05:29:77:b1:c2:da:04:05:
         ee:26:31:49:79:a6:5e:ff:2d:0f:38:dd:8b:c5:33:e7:cf:f1:
         d3:a0:15:8b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUS1wO3lgqTJN3jeZS1alpdy4XaBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5Q0Y4NkM5ODE2MEJDNUNBMEYxQTcyREI0NTgyNjE3
MkM0QTczOTAeFw0yNjAxMDIxNjEwMDBaFw0yNzAxMDExNjE1MDBaMDMxMTAvBgNV
BAMTKDI3RkRFMTAxRjdBNTJCM0MzMTcyOUI0QjZDOUJGNUI1NUQ0MUJGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTYLiNpo70FY9lZrDOGcsx7YOC
/q/XNHsRZVJoi1f0OCy8VyuHOTJbsC4JTOc4cS9x9WI2yKzKlpRjTOTfjFW9vLQU
ytF8jYKbpySWdoAi0RIS+hdnLxmM76ivhfTE2V6LzXMnMkCMm5axxdfCu+Qwo44o
eidcGw1naRcHrqCHgaFIRHPHPeegOgt369UkNRjPTczJiI+HYdaQHSXOQHmobDuJ
V9evCWa6n2ZHXu3kzzki8ffda9B+okYYXb6xKnplTXeW3NBwUcZj/3N3jO1HdStq
wAEWc5fw9lBn7xh/8VLAERrUCV3dXk5m2/vlOjtwaJozkFOzOkzFvA1PgQN3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUJ/3hAfelKzwxcptLbJv1tV1Bv2swHwYDVR0j
BBgwFoAUipz4bJgWC8XKDxpy20WCYXLEpzkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTVGQjQzRTVFMEYzQ0EzQTA4QjU2MDlEOTZFREVCOTUx
NERFNERBRUFCRkNBNjlFQzI1N0FGMUM0N0REMUUzLzAvOEE5Q0Y4NkM5ODE2MEJD
NUNBMEYxQTcyREI0NTgyNjE3MkM0QTczOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTlDRjg2Qzk4MTYwQkM1Q0Ew
RjFBNzJEQjQ1ODI2MTcyQzRBNzM5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEE1RkI0M0U1RTBGM0NBM0EwOEI1NjA5RDk2RURFQjk1MTRERTREQUVB
QkZDQTY5RUMyNTdBRjFDNDdERDFFMy8wLzMyMzAzMDJlMzEzNTMwMmUzMjM0Mzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzMzMDM3MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
lvgwDQYJKoZIhvcNAQELBQADggEBADmAgPUJOBrhES/RefKbFY6ad2iaBpAvG/pv
TrpmusUjHuSix1ZWKHTrOLeBb7eMByKG4pky2CaPoqKqNIh9glGtZaPKM6UdeZfn
5TLuCQBvhNARSAK+YpL+uqc6SiRPKPTpgGe/vx7Ftz+vLavDj0m0Ed7Q4KTq8rrX
7xUzQyugbvFqGjdxre0LSDJ8Kr4HVjsUFwEJR3vUArsU6+Yh/M9cx6Na8b1uIum3
DOOV4DqBq4FxmmKzEoW6B1TXJNVwrIW/4DkioCq0EZpdV00kosypss2cmd77mBtD
hf1Me6nFcTEFKXexwtoEBe4mMUl5pl7/LQ843YvFM+fP8dOgFYs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:07 2026 by rpki-client