This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135372e302f32342d3234203d3e203532323730.roa
File:                     3230302e38352e3135372e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          OtBz0Yw+HLLadqPzaXHod7+cngImp8JSV/c/D0YT5YY=
Subject key identifier:   05:9B:D0:95:40:16:F7:EB:DA:D2:63:1E:FB:DF:10:D0:7E:AD:AC:15
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       7A929C60474DAACB3913C704C7946654BD65C3AE
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135372e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:07 +0000
ROA not before:           Wed 12 Nov 2025 19:45:07 +0000
ROA not after:            Wed 11 Nov 2026 19:50:07 +0000
asID:                     52270
IP address blocks:        200.85.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:92:9c:60:47:4d:aa:cb:39:13:c7:04:c7:94:66:54:bd:65:c3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:07 2025 GMT
            Not After : Nov 11 19:50:07 2026 GMT
        Subject: CN=059BD0954016F7EBDAD2631EFBDF10D07EADAC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:b2:98:88:42:f0:e7:06:6d:79:c1:63:d6:
                    95:d7:3f:5c:2d:31:f1:c0:1b:74:55:cf:62:dc:90:
                    49:37:a7:03:d6:31:ec:a8:8b:d5:b7:11:6e:51:a0:
                    75:45:c6:47:51:5c:39:48:57:21:a5:12:f1:95:74:
                    fb:c9:cf:78:06:c9:85:f4:6c:a2:8c:55:8f:ef:bb:
                    51:33:9b:a3:f0:7c:37:03:ad:a9:51:55:9b:5d:a3:
                    a6:19:b4:a8:cc:2b:a6:ae:51:4b:c8:55:03:21:b3:
                    95:80:96:88:42:85:6a:9e:2d:e0:4b:f4:70:78:fe:
                    e6:91:41:4a:bc:a5:1f:20:f6:9c:54:db:ba:06:f3:
                    95:ee:1f:4c:c7:08:b2:c2:24:25:00:65:a2:6b:79:
                    a1:4b:55:a7:ce:30:da:dc:32:a6:f2:cf:96:fb:7d:
                    f2:28:21:f5:85:fd:6d:aa:21:85:38:aa:3e:a5:ff:
                    23:64:64:88:fb:8a:40:2f:ad:85:be:3e:4e:32:db:
                    49:7d:68:5b:46:fb:a1:f8:11:15:d5:bc:78:22:c8:
                    7f:ff:f9:c1:a8:81:9e:b7:22:35:9a:2c:18:0e:42:
                    a1:c5:23:36:ae:b3:28:a4:46:c2:88:14:af:76:49:
                    70:2e:19:c4:16:7e:a5:9b:c3:88:d2:45:d0:dc:09:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9B:D0:95:40:16:F7:EB:DA:D2:63:1E:FB:DF:10:D0:7E:AD:AC:15
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135372e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:e9:8e:91:2b:3f:7c:62:e1:05:be:19:af:ab:9f:ec:40:
         32:68:6f:82:fe:6e:f4:b7:ba:18:75:6f:d9:17:a7:12:65:f2:
         6c:c2:88:d7:77:50:5a:1b:9b:d3:76:f0:1e:b8:58:a8:1b:5d:
         cf:f5:a8:49:ba:5e:ba:68:bd:d4:d4:17:91:44:30:bf:fe:4d:
         4b:83:99:37:aa:38:2e:53:7e:6f:ec:fa:60:ac:23:3f:00:b4:
         c9:3c:3b:e2:ad:26:00:4f:a7:14:40:54:68:c0:14:b3:36:49:
         e4:f7:6c:8e:30:85:4f:87:0c:95:e8:84:f9:7a:52:c8:a2:7d:
         2c:3d:ad:90:5d:1a:e0:71:56:02:a2:72:16:2f:06:64:fc:f8:
         c2:05:c7:63:1b:42:ee:19:60:42:02:98:f7:38:6f:bc:ab:fd:
         61:9a:82:7b:34:79:9d:ed:3f:87:bd:3d:c1:35:c3:be:aa:cd:
         e2:ef:8b:2e:5d:00:f2:9a:39:98:e8:0f:a4:ec:af:58:7e:2e:
         2d:9f:ec:7f:68:93:70:c6:49:53:b7:73:3a:13:9b:7a:93:7e:
         d1:f6:89:8c:b3:1d:1b:f4:00:96:82:ff:01:c9:83:09:92:f9:
         4f:7d:93:0c:ee:c9:74:ec:b8:92:10:35:d4:58:8b:6b:9a:26:
         7a:f4:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:11 2025 by rpki-client