This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133362e302f32322d3234203d3e2038303438.roa
File:                     3230302e33352e3133362e302f32322d3234203d3e2038303438.roa (raw, json)
Hash identifier:          v5qnUd7SLxtm/e2AdQ357oxMkRiYwHIxmpIQ8CxH0fQ=
Subject key identifier:   46:DF:CE:3E:1F:55:BB:CA:F2:80:16:AE:C2:39:58:75:BC:51:71:C7
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       19C229CD4E9E982C5E0DB4C19BD0EA1F68F12851
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133362e302f32322d3234203d3e2038303438.roa
Signing time:             Tue 06 Jan 2026 19:37:41 +0000
ROA not before:           Tue 06 Jan 2026 19:32:41 +0000
ROA not after:            Tue 05 Jan 2027 19:37:41 +0000
asID:                     8048
IP address blocks:        200.35.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c2:29:cd:4e:9e:98:2c:5e:0d:b4:c1:9b:d0:ea:1f:68:f1:28:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Jan  6 19:32:41 2026 GMT
            Not After : Jan  5 19:37:41 2027 GMT
        Subject: CN=46DFCE3E1F55BBCAF28016AEC2395875BC5171C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:d0:e9:e2:08:05:6a:19:a9:63:49:1d:9d:
                    5b:f0:ac:04:e1:e2:90:55:c6:8d:0c:e9:22:0c:c3:
                    a5:16:91:18:a0:80:22:43:44:1d:1d:bc:10:b9:86:
                    f7:94:4a:f8:53:38:0a:c6:25:3a:3f:1e:76:b0:8d:
                    3c:e7:cb:31:27:3b:f8:96:0c:f6:5f:48:ca:31:60:
                    a7:72:3c:6e:73:2c:b3:15:79:6c:63:e8:a2:f0:6b:
                    50:b9:b8:c4:89:49:c9:16:25:80:6a:91:99:9e:9e:
                    51:92:bd:80:cb:f5:c0:6a:97:3e:32:b7:56:be:3b:
                    eb:99:ac:b9:d6:b6:03:4a:49:53:93:92:14:2e:ff:
                    0f:12:90:a9:ea:9a:59:29:4a:25:10:89:7e:e9:96:
                    7d:b5:81:76:1d:46:47:25:2f:68:39:3d:d8:a7:d4:
                    9d:5f:56:21:1f:d4:9f:f7:ac:31:a0:b2:fc:62:4b:
                    cf:2a:77:6d:f9:fc:76:f6:c4:ff:92:fe:37:b0:f8:
                    03:d9:aa:be:a2:d5:cf:04:d3:6d:52:86:aa:27:3c:
                    e6:c2:c7:0d:3b:5c:17:58:64:e8:dc:d1:49:2e:47:
                    bd:81:1e:87:73:57:53:e9:17:36:d8:7d:ef:94:5a:
                    ca:76:2b:42:b7:93:73:2c:61:8d:20:69:cf:d7:8e:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:CE:3E:1F:55:BB:CA:F2:80:16:AE:C2:39:58:75:BC:51:71:C7
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133362e302f32322d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:4f:53:f6:d8:60:c7:ea:8c:be:cb:7f:41:5c:8c:a2:a1:35:
         85:74:89:20:de:73:18:66:d9:4e:87:62:1e:de:ff:90:d8:c0:
         cb:e6:00:c5:17:a6:e7:4e:73:bd:86:15:c7:5a:51:d8:e9:f5:
         44:e6:57:7c:85:f7:99:6f:4b:7e:11:a7:75:fc:50:5b:7a:15:
         fc:c7:2c:a2:ce:fb:b5:cc:08:60:ba:e1:6b:35:5b:2a:0e:3b:
         7d:bf:a0:48:93:35:0b:ad:45:12:10:3b:9d:58:8f:1c:3e:02:
         06:da:23:ab:cf:90:57:e7:4e:48:17:61:9a:bb:9e:cc:f4:44:
         b1:35:aa:be:03:e2:d9:d7:e0:8c:0f:1b:28:58:d3:0b:39:a0:
         ef:62:47:62:11:18:ae:d0:de:9f:3b:a1:31:dc:36:b8:89:30:
         a7:3d:0d:a6:dd:17:0c:8d:9c:0f:a7:5b:2e:d7:d3:3c:d9:c8:
         e7:83:63:7b:76:30:e5:0a:b0:12:41:cb:e1:45:bb:9c:e6:9c:
         27:3f:e7:83:48:eb:08:05:78:b9:e5:29:91:e1:2a:89:1a:79:
         b1:6f:90:a7:05:25:6e:99:a9:2c:78:e3:35:db:7c:a4:fb:f7:
         eb:16:80:03:c2:40:b4:d9:78:00:ef:d7:0a:05:e2:8d:ae:31:
         f0:d2:0e:b6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUGcIpzU6emCxeDbTBm9DqH2jxKFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5Q0E3QkI0MzgyQTY0ODMzMkZEMzc3Njg5RTA0MDE2
NkM1MDVCNTAeFw0yNjAxMDYxOTMyNDFaFw0yNzAxMDUxOTM3NDFaMDMxMTAvBgNV
BAMTKDQ2REZDRTNFMUY1NUJCQ0FGMjgwMTZBRUMyMzk1ODc1QkM1MTcxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHdDp4ggFahmpY0kdnVvwrATh
4pBVxo0M6SIMw6UWkRiggCJDRB0dvBC5hveUSvhTOArGJTo/HnawjTznyzEnO/iW
DPZfSMoxYKdyPG5zLLMVeWxj6KLwa1C5uMSJSckWJYBqkZmenlGSvYDL9cBqlz4y
t1a+O+uZrLnWtgNKSVOTkhQu/w8SkKnqmlkpSiUQiX7pln21gXYdRkclL2g5Pdin
1J1fViEf1J/3rDGgsvxiS88qd235/Hb2xP+S/jew+APZqr6i1c8E021ShqonPObC
xw07XBdYZOjc0UkuR72BHodzV1PpFzbYfe+UWsp2K0K3k3MsYY0gac/Xjo5HAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQURt/OPh9Vu8rygBauwjlYdbxRcccwHwYDVR0j
BBgwFoAUgpynu0OCpkgzL9N3aJ4EAWbFBbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTIwMjlGNjM3NDUwNjc4NUYzOTExMTFGMTA0RTY1NjA3
MDFBOUE0RDI3QkQzNkZDRkZGODE2QzBGRTYyNkQ4LzAvODI5Q0E3QkI0MzgyQTY0
ODMzMkZEMzc3Njg5RTA0MDE2NkM1MDVCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjlDQTdCQjQzODJBNjQ4MzMy
RkQzNzc2ODlFMDQwMTY2QzUwNUI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDEyMDI5RjYzNzQ1MDY3ODVGMzkxMTExRjEwNEU2NTYwNzAxQTlBNEQy
N0JEMzZGQ0ZGRjgxNkMwRkU2MjZEOC8wLzMyMzAzMDJlMzMzNTJlMzEzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzgzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALII4gwDQYJ
KoZIhvcNAQELBQADggEBAKNPU/bYYMfqjL7Lf0FcjKKhNYV0iSDecxhm2U6HYh7e
/5DYwMvmAMUXpudOc72GFcdaUdjp9UTmV3yF95lvS34Rp3X8UFt6FfzHLKLO+7XM
CGC64Ws1WyoOO32/oEiTNQutRRIQO51Yjxw+AgbaI6vPkFfnTkgXYZq7nsz0RLE1
qr4D4tnX4IwPGyhY0ws5oO9iR2IRGK7Q3p87oTHcNriJMKc9DabdFwyNnA+nWy7X
0zzZyOeDY3t2MOUKsBJBy+FFu5zmnCc/54NI6wgFeLnlKZHhKokaebFvkKcFJW6Z
qSx44zXbfKT79+sWgAPCQLTZeADv1woF4o2uMfDSDrY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:19 2026 by rpki-client