This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3133392e302f32342d3234203d3e203139333733.roa
File:                     3230302e35372e3133392e302f32342d3234203d3e203139333733.roa (raw, json)
Hash identifier:          PkPMi9ukwv3ragPfopuPqWefhC2+ri/a8nnYsRxqePs=
Subject key identifier:   87:F6:0E:B3:33:C3:77:76:BD:40:1F:29:58:55:FE:68:45:46:CD:0E
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       34AA207EC26DC7879B66D722DA51E390DB1F8154
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3133392e302f32342d3234203d3e203139333733.roa
Signing time:             Sun 18 Jan 2026 07:25:47 +0000
ROA not before:           Sun 18 Jan 2026 07:20:47 +0000
ROA not after:            Sun 17 Jan 2027 07:25:47 +0000
asID:                     19373
IP address blocks:        200.57.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:aa:20:7e:c2:6d:c7:87:9b:66:d7:22:da:51:e3:90:db:1f:81:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Jan 18 07:20:47 2026 GMT
            Not After : Jan 17 07:25:47 2027 GMT
        Subject: CN=87F60EB333C37776BD401F295855FE684546CD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:92:16:d1:0c:40:54:18:a2:56:31:fa:40:
                    65:7a:8e:65:95:ff:88:f2:24:60:20:31:c1:fb:16:
                    ad:ab:ad:e0:5c:cc:13:2f:91:92:e9:8a:dc:14:57:
                    5d:85:4c:06:77:f9:f9:2d:16:b9:f9:b8:63:6b:fb:
                    64:d3:27:1b:b9:ee:79:3e:8b:05:d2:59:47:53:96:
                    25:81:6b:50:f4:5e:dc:a1:73:33:e0:2a:e7:f6:ae:
                    0f:ad:eb:e2:3b:65:16:6d:34:d6:3c:fe:51:62:66:
                    9e:40:b4:68:0d:0a:09:26:d3:0d:42:3e:dd:b3:3f:
                    b2:0e:bb:89:6c:e3:c6:b8:59:7c:80:7e:69:aa:2b:
                    76:b8:a3:4f:fd:aa:e4:83:a1:80:ad:87:3d:3c:86:
                    5a:97:d9:f7:43:a2:af:3a:68:83:3b:5e:1b:e7:b3:
                    0d:db:80:1a:24:35:a4:9a:f9:b2:b0:6f:40:14:2d:
                    4f:46:71:f3:63:38:e0:3a:c2:07:49:d2:43:7b:99:
                    1b:3b:1e:e0:3b:bf:44:17:f3:e7:01:8c:9a:d8:2b:
                    df:5a:8f:a3:df:4d:c8:cb:c8:48:a5:f9:fa:3c:a9:
                    b1:32:e7:0b:39:fa:06:07:40:bc:50:a8:5c:7c:68:
                    1e:5a:63:b8:7c:a2:66:95:06:e4:7b:aa:16:bf:94:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:0E:B3:33:C3:77:76:BD:40:1F:29:58:55:FE:68:45:46:CD:0E
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3133392e302f32342d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:9e:36:86:58:12:ec:e3:d5:44:07:66:3b:01:99:01:2b:c1:
         c7:ac:e1:53:ab:a2:46:ff:5b:8a:44:f4:84:64:42:58:61:60:
         f7:2f:a5:55:36:4d:6c:bb:ec:51:cb:b4:37:e7:8a:f0:9e:ea:
         54:94:60:16:6b:30:b5:2d:04:02:ac:ca:0f:22:04:a9:18:1b:
         22:16:12:cb:da:6b:b5:3f:58:cd:1c:59:42:2b:64:fc:76:c7:
         c7:3f:4e:4d:43:e8:0d:7b:57:69:b5:53:a6:8f:5d:77:d7:e9:
         81:af:cf:63:a7:90:eb:ff:e6:40:cd:80:38:3a:7a:fc:ec:f8:
         9c:76:4e:6f:1e:e3:78:70:37:35:04:53:33:c1:56:9e:41:79:
         78:32:c2:ff:1c:c3:0f:96:86:e0:9f:c1:1b:53:af:05:15:76:
         32:12:f7:95:b6:7c:0a:0b:0e:fc:21:56:f8:94:6c:9c:67:08:
         70:4e:73:31:a2:05:ba:f7:5c:1e:5a:4f:c3:7e:00:38:82:72:
         3c:da:ae:2e:3e:aa:74:ba:a9:d0:25:d5:19:79:06:94:6f:49:
         93:a3:62:c7:06:1a:50:bd:f9:40:06:19:7b:54:1c:a3:10:b6:
         c3:7d:3d:8e:bf:5f:45:e7:c9:49:ba:79:13:dd:99:85:94:8e:
         11:3c:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:25 2026 by rpki-client