This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3137312e302f32342d3234203d3e203139333733.roa
File:                     3230302e35372e3137312e302f32342d3234203d3e203139333733.roa (raw, json)
Hash identifier:          IxN+hBsdd6ErLasMUwQS578jQsdnTt9jJ/qvVtGdpQc=
Subject key identifier:   C7:4E:17:6B:52:9C:B1:3C:15:BB:AF:9A:7A:ED:5A:BD:A6:57:1E:0C
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       3BBC2D717BD0FBE01E857DD19DABFC31A187DF3A
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3137312e302f32342d3234203d3e203139333733.roa
Signing time:             Sun 18 Jan 2026 07:25:49 +0000
ROA not before:           Sun 18 Jan 2026 07:20:49 +0000
ROA not after:            Sun 17 Jan 2027 07:25:49 +0000
asID:                     19373
IP address blocks:        200.57.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bc:2d:71:7b:d0:fb:e0:1e:85:7d:d1:9d:ab:fc:31:a1:87:df:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Jan 18 07:20:49 2026 GMT
            Not After : Jan 17 07:25:49 2027 GMT
        Subject: CN=C74E176B529CB13C15BBAF9A7AED5ABDA6571E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:fa:34:70:40:08:98:07:d1:12:f4:8d:a4:
                    81:0c:a3:5f:70:0c:9e:b7:3f:cd:7e:7a:4b:9f:f3:
                    53:bc:3b:09:a6:c6:80:83:d8:09:cc:68:0f:01:c8:
                    d9:d8:d8:ff:93:0b:69:8c:ad:d0:a4:12:ec:38:a0:
                    b8:6a:76:fc:4c:32:22:e3:c2:b1:18:33:ca:7d:38:
                    c0:b3:17:3b:b5:b5:60:a0:88:d9:eb:66:aa:63:54:
                    8e:5d:6b:48:76:98:5c:ac:7a:d2:d3:a4:b6:c7:b2:
                    36:a8:88:74:92:de:72:61:63:35:36:a2:fc:fa:39:
                    3d:b1:55:f1:93:06:8f:90:a4:a1:67:70:0d:c8:3c:
                    43:8d:5b:95:41:a3:f8:b8:17:c5:75:4a:4b:40:77:
                    35:48:50:d5:fc:de:00:1c:60:87:1f:59:51:ba:1b:
                    28:5b:ee:f7:04:97:87:94:41:91:35:0a:4a:4a:bd:
                    05:6c:9d:bf:f9:e6:12:01:4b:b0:ad:a7:40:b5:02:
                    83:ff:bc:2d:f4:1d:12:37:ca:56:98:9a:3d:de:ef:
                    be:31:0c:ff:a9:0e:59:1a:12:8f:6f:7e:4a:44:d2:
                    b4:23:96:40:05:24:bf:8b:e6:d1:31:c6:05:4f:dc:
                    f1:ec:3d:83:02:ef:db:29:cc:1a:c7:9f:79:25:4c:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4E:17:6B:52:9C:B1:3C:15:BB:AF:9A:7A:ED:5A:BD:A6:57:1E:0C
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3137312e302f32342d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:40:6b:15:48:de:7c:d5:85:d5:3d:de:a7:b8:ab:be:27:ca:
         13:c8:c9:bc:0b:a9:14:4d:53:ff:d0:4a:03:3f:eb:e6:c9:b8:
         95:86:7b:94:24:e1:7d:c0:57:20:e9:a4:d0:60:9e:3f:ca:ea:
         4b:ad:aa:2f:b1:db:b2:20:e2:3e:60:f4:8e:50:17:8e:b5:df:
         69:e6:e6:55:fc:e9:73:50:c7:60:ec:09:4d:6d:cf:77:9d:ff:
         8e:e3:4c:e1:16:70:9a:f7:4a:01:a2:18:73:89:61:66:91:a9:
         69:78:3c:c3:e1:10:bc:8a:30:b1:09:a0:2e:9f:ee:35:86:e5:
         96:07:70:ba:dd:3b:c4:4a:70:6a:7d:4e:56:af:40:64:0c:e2:
         e4:33:79:26:7b:02:94:c2:b8:be:a3:d6:b1:ed:27:17:70:67:
         d1:0e:93:ad:18:eb:eb:38:09:19:52:5d:0a:28:cc:dd:ff:12:
         8b:87:2c:a6:55:87:f5:8c:05:f5:1e:6f:26:3c:d4:93:ee:00:
         9f:be:5c:72:b9:a3:3f:22:8c:b2:b1:01:ab:fb:d2:f3:a7:20:
         8c:61:5f:ab:07:2b:8f:a1:42:02:30:31:dd:01:f0:df:c4:3c:
         6e:86:5d:7b:e3:d6:e6:6f:ea:32:5b:45:d9:b9:22:7b:6c:11:
         36:da:9b:49
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO7wtcXvQ++AehX3Rnav8MaGH3zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNjAxMTgwNzIwNDlaFw0yNzAxMTcwNzI1NDlaMDMxMTAvBgNV
BAMTKEM3NEUxNzZCNTI5Q0IxM0MxNUJCQUY5QTdBRUQ1QUJEQTY1NzFFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWvo0cEAImAfREvSNpIEMo19w
DJ63P81+ekuf81O8OwmmxoCD2AnMaA8ByNnY2P+TC2mMrdCkEuw4oLhqdvxMMiLj
wrEYM8p9OMCzFzu1tWCgiNnrZqpjVI5da0h2mFysetLTpLbHsjaoiHSS3nJhYzU2
ovz6OT2xVfGTBo+QpKFncA3IPEONW5VBo/i4F8V1SktAdzVIUNX83gAcYIcfWVG6
Gyhb7vcEl4eUQZE1CkpKvQVsnb/55hIBS7Ctp0C1AoP/vC30HRI3ylaYmj3e774x
DP+pDlkaEo9vfkpE0rQjlkAFJL+L5tExxgVP3PHsPYMC79spzBrHn3klTJJdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUx04Xa1KcsTwVu6+aeu1avaZXHgwwHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMyMzAzMDJlMzUzNzJlMzEzNzMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg5qzAN
BgkqhkiG9w0BAQsFAAOCAQEAfEBrFUjefNWF1T3ep7irvifKE8jJvAupFE1T/9BK
Az/r5sm4lYZ7lCThfcBXIOmk0GCeP8rqS62qL7HbsiDiPmD0jlAXjrXfaebmVfzp
c1DHYOwJTW3Pd53/juNM4RZwmvdKAaIYc4lhZpGpaXg8w+EQvIowsQmgLp/uNYbl
lgdwut07xEpwan1OVq9AZAzi5DN5JnsClMK4vqPWse0nF3Bn0Q6TrRjr6zgJGVJd
CijM3f8Si4csplWH9YwF9R5vJjzUk+4An75ccrmjPyKMsrEBq/vS86cgjGFfqwcr
j6FCAjAx3QHw38Q8boZde+PW5m/qMltF2bkie2wRNtqbSQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:31 2026 by rpki-client