This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136302e302f32312d3234203d3e203139333733.roa
File:                     3230302e35372e3136302e302f32312d3234203d3e203139333733.roa (raw, json)
Hash identifier:          UwHIbDtCYKyv6VQTUtfZsIX4kS2qnl7YR772H5GKuMA=
Subject key identifier:   9A:C8:B3:52:31:73:B9:5A:1D:A9:FB:66:4C:8F:C3:E8:B3:C2:13:72
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       3A4EBFC97C7545E35D6BEA28D7BA4A83B67B77C8
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136302e302f32312d3234203d3e203139333733.roa
Signing time:             Sun 18 Jan 2026 07:25:54 +0000
ROA not before:           Sun 18 Jan 2026 07:20:54 +0000
ROA not after:            Sun 17 Jan 2027 07:25:54 +0000
asID:                     19373
IP address blocks:        200.57.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4e:bf:c9:7c:75:45:e3:5d:6b:ea:28:d7:ba:4a:83:b6:7b:77:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Jan 18 07:20:54 2026 GMT
            Not After : Jan 17 07:25:54 2027 GMT
        Subject: CN=9AC8B3523173B95A1DA9FB664C8FC3E8B3C21372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:a3:68:1a:a9:16:7b:72:1a:d9:c5:80:57:
                    ab:9e:50:11:5a:ea:2c:ee:bc:fa:d2:ba:77:ec:ba:
                    f0:7b:f9:a9:51:4c:b9:bd:59:f3:1b:42:1a:ba:2c:
                    5c:fb:f3:1d:ac:32:91:6e:ca:4a:eb:c8:b6:a3:29:
                    46:a8:58:e5:4e:c6:9b:6a:56:fe:65:b0:51:f7:f9:
                    78:e6:c4:bf:5c:e2:10:06:ac:1a:3e:42:2a:5a:55:
                    99:d9:31:23:ff:b8:78:51:54:4a:38:37:48:11:ad:
                    39:9a:43:b0:a2:fa:66:98:8f:13:40:df:82:ef:09:
                    15:5e:69:69:11:ee:de:4a:a4:22:ba:35:c4:67:dc:
                    b9:a5:a6:49:dc:5f:6b:12:e7:8d:80:5c:6c:af:74:
                    8c:71:d5:bb:da:07:ec:f7:f4:83:54:a6:40:f2:33:
                    ad:b6:9e:96:41:ce:00:00:cd:d0:a4:4f:d0:b8:90:
                    3e:c4:c1:76:f6:27:36:7b:2f:f7:79:16:6f:8b:0a:
                    16:cc:b8:67:68:c8:3f:f0:ea:2e:d5:0e:0a:e1:27:
                    2f:6a:ac:1f:00:35:de:c2:ee:c3:3e:8d:a3:76:d0:
                    2d:b0:66:1e:f0:b7:1a:2d:2e:51:68:16:2c:51:14:
                    a9:5f:1d:b9:f0:8e:67:ea:1b:b4:0d:63:f8:30:6b:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C8:B3:52:31:73:B9:5A:1D:A9:FB:66:4C:8F:C3:E8:B3:C2:13:72
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136302e302f32312d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:5d:64:93:3f:09:25:55:91:01:b4:00:ee:92:8a:5d:05:
         bc:c0:2d:47:69:fe:7c:e2:e3:30:72:8c:a3:c0:0a:8d:a6:26:
         46:7f:b9:5c:0d:2d:a8:21:1a:16:b2:1e:31:33:97:ef:08:3c:
         df:df:38:90:65:5f:29:cd:b4:f1:35:95:5d:99:e8:0d:ce:63:
         bc:6b:d2:27:0e:f9:b6:f2:71:6c:fd:06:6b:49:05:2f:fd:02:
         b4:20:b5:3f:28:b2:8a:a2:02:de:36:d0:7b:c6:07:e7:fc:e1:
         ae:af:35:aa:e1:72:43:29:8a:49:35:d9:b9:c8:2e:df:33:b4:
         fd:3a:c0:9b:28:c9:90:4b:b0:b5:b9:a1:17:15:9d:7c:ff:04:
         a6:f6:a7:64:fc:a3:9a:52:da:a2:10:b6:8e:2d:0b:ff:3a:49:
         cf:e9:b1:65:07:04:f1:9f:35:65:f8:b5:af:c1:33:3b:ca:29:
         8d:fe:1c:6f:ed:3e:74:bd:41:e3:5c:8a:21:2f:d6:6b:19:82:
         37:29:b5:90:08:e1:ed:16:cd:ed:a0:f3:f0:4f:40:5d:f7:98:
         bc:3e:1d:eb:de:e1:3d:86:2c:53:0b:9f:9d:04:bb:2b:35:36:
         32:6f:2f:0a:28:02:b6:ba:69:16:02:66:32:77:c1:62:17:47:
         a6:de:89:af
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOk6/yXx1ReNda+oo17pKg7Z7d8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNjAxMTgwNzIwNTRaFw0yNzAxMTcwNzI1NTRaMDMxMTAvBgNV
BAMTKDlBQzhCMzUyMzE3M0I5NUExREE5RkI2NjRDOEZDM0U4QjNDMjEzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHAaNoGqkWe3Ia2cWAV6ueUBFa
6izuvPrSunfsuvB7+alRTLm9WfMbQhq6LFz78x2sMpFuykrryLajKUaoWOVOxptq
Vv5lsFH3+XjmxL9c4hAGrBo+QipaVZnZMSP/uHhRVEo4N0gRrTmaQ7Ci+maYjxNA
34LvCRVeaWkR7t5KpCK6NcRn3LmlpkncX2sS542AXGyvdIxx1bvaB+z39INUpkDy
M622npZBzgAAzdCkT9C4kD7EwXb2JzZ7L/d5Fm+LChbMuGdoyD/w6i7VDgrhJy9q
rB8ANd7C7sM+jaN20C2wZh7wtxotLlFoFixRFKlfHbnwjmfqG7QNY/gwawvDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmsizUjFzuVodqftmTI/D6LPCE3IwHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMyMzAzMDJlMzUzNzJlMzEzNjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8g5oDAN
BgkqhkiG9w0BAQsFAAOCAQEAjLNdZJM/CSVVkQG0AO6Sil0FvMAtR2n+fOLjMHKM
o8AKjaYmRn+5XA0tqCEaFrIeMTOX7wg83984kGVfKc208TWVXZnoDc5jvGvSJw75
tvJxbP0Ga0kFL/0CtCC1PyiyiqIC3jbQe8YH5/zhrq81quFyQymKSTXZucgu3zO0
/TrAmyjJkEuwtbmhFxWdfP8EpvanZPyjmlLaohC2ji0L/zpJz+mxZQcE8Z81Zfi1
r8EzO8opjf4cb+0+dL1B41yKIS/WaxmCNym1kAjh7RbN7aDz8E9AXfeYvD4d697h
PYYsUwufnQS7KzU2Mm8vCigCtrppFgJmMnfBYhdHpt6Jrw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:43 2026 by rpki-client