This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203139353832.roa
File:                     3230302e302e36332e302f32342d3234203d3e203139353832.roa (raw, json)
Hash identifier:          ZQ9FCx5F+CCgOHVAASLevEcpkEP4oyHoGd6ShBTRwXc=
Subject key identifier:   DC:F5:91:62:69:1D:F3:B5:8E:36:FC:BE:B1:FA:84:E2:77:60:D4:B5
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       11C3ABC9CC0745037B6302C3040CF9BA677AFE65
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203139353832.roa
Signing time:             Tue 06 Jan 2026 19:45:58 +0000
ROA not before:           Tue 06 Jan 2026 19:40:58 +0000
ROA not after:            Tue 05 Jan 2027 19:45:58 +0000
asID:                     19582
IP address blocks:        200.0.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c3:ab:c9:cc:07:45:03:7b:63:02:c3:04:0c:f9:ba:67:7a:fe:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Jan  6 19:40:58 2026 GMT
            Not After : Jan  5 19:45:58 2027 GMT
        Subject: CN=DCF59162691DF3B58E36FCBEB1FA84E27760D4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:12:bd:36:86:82:97:98:b5:af:de:7b:24:
                    6a:ff:c9:0b:44:56:ce:aa:24:aa:91:f1:51:9d:4c:
                    95:3e:05:f9:40:4e:c2:9d:a5:39:06:98:e3:c3:3e:
                    58:82:0c:6f:12:8b:15:d4:57:d5:c1:48:1c:9c:1b:
                    18:a9:aa:e5:24:e1:d6:02:ed:4d:5c:fc:40:7d:ad:
                    cd:95:c0:eb:d9:af:61:67:06:e1:ac:5d:96:94:eb:
                    2c:6b:8f:81:7c:75:c8:cf:f8:d6:0a:14:eb:2b:7e:
                    52:37:1d:28:c8:a9:53:b4:02:04:a7:aa:72:ef:fa:
                    4d:84:b5:ec:f3:e3:1b:ad:17:0b:ea:81:c4:27:71:
                    4c:fd:22:2c:84:91:02:a0:b2:5d:50:ba:9c:ef:5e:
                    da:9d:ad:04:2b:73:b6:45:83:7b:2c:24:aa:9b:ff:
                    c1:87:93:62:3f:15:7a:6c:76:4f:51:1c:07:40:1a:
                    d4:ea:ce:f3:31:b7:af:69:39:34:c2:87:38:ba:00:
                    97:aa:5d:ec:36:8b:3a:7b:95:d7:e1:98:4d:76:56:
                    ac:d1:a3:39:7c:7c:b4:6a:ce:43:43:40:45:a0:5f:
                    82:ac:d0:3f:9c:62:d4:ae:13:47:80:11:f2:84:8e:
                    d9:57:d7:de:ce:e3:62:d5:51:c8:45:e3:c3:b8:25:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:91:62:69:1D:F3:B5:8E:36:FC:BE:B1:FA:84:E2:77:60:D4:B5
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:2c:4f:22:21:10:69:52:79:50:8e:83:ee:f1:95:02:ab:73:
         43:38:79:d1:cc:a6:5c:ce:05:1a:e8:21:6a:64:29:c1:92:75:
         08:db:89:1e:62:b0:91:04:53:92:9a:75:a0:e3:63:b9:54:48:
         31:98:a8:19:6a:15:73:54:36:ba:2f:82:f9:5a:c0:0e:80:cf:
         05:c2:fa:e8:fa:7c:f0:8f:af:69:15:a9:87:4d:29:28:11:6e:
         89:3a:dd:ef:11:fa:f7:cf:00:6a:b4:da:0c:2c:19:2d:07:12:
         0b:b9:85:f8:3d:76:eb:fd:35:8a:13:a2:95:8a:5e:11:d8:ee:
         1c:4a:96:d8:d5:94:61:a0:51:06:d4:f0:bc:ec:2a:8a:67:60:
         7f:8c:d8:85:f1:2f:be:7d:61:85:bb:d5:d0:32:db:e2:8f:21:
         bf:50:e4:09:5d:86:5f:f4:99:02:4b:82:92:98:bc:e2:f2:ef:
         7f:87:02:33:80:a1:50:30:0d:22:07:d8:d8:f7:44:47:d3:d9:
         79:01:f3:5d:31:e3:b0:10:5b:b9:2e:6d:79:0a:88:53:59:c3:
         96:c4:d9:c8:88:8f:80:28:4d:a5:97:9e:b4:b7:78:16:ac:7f:
         87:eb:29:c3:f7:fa:36:8b:ae:ac:45:03:37:6e:be:8e:e4:d0:
         74:ae:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:23 2026 by rpki-client