This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135322e302f32342d3234203d3e20323733383337.roa
File:                     3230302e33362e3135322e302f32342d3234203d3e20323733383337.roa (raw, json)
Hash identifier:          23ZsR2kXIiSU/y9BEbRnVBBfPmxDLPr+FdMjIdMNNuw=
Subject key identifier:   5B:F7:58:4F:19:8D:26:BE:A2:13:17:22:03:E7:80:63:A2:4E:56:13
Certificate issuer:       /CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
Certificate serial:       63A2175461E6BC4DB31DE79D1360D48B6D0C5A37
Authority key identifier: F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135322e302f32342d3234203d3e20323733383337.roa
Signing time:             Tue 02 Dec 2025 19:45:00 +0000
ROA not before:           Tue 02 Dec 2025 19:40:00 +0000
ROA not after:            Tue 01 Dec 2026 19:45:00 +0000
asID:                     273837
IP address blocks:        200.36.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a2:17:54:61:e6:bc:4d:b3:1d:e7:9d:13:60:d4:8b:6d:0c:5a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
        Validity
            Not Before: Dec  2 19:40:00 2025 GMT
            Not After : Dec  1 19:45:00 2026 GMT
        Subject: CN=5BF7584F198D26BEA213172203E78063A24E5613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:03:e8:bf:40:20:2c:22:97:5f:07:8f:a5:
                    b6:a1:0f:1c:88:b7:6f:0f:65:15:c2:d3:10:4e:0e:
                    7c:1a:0e:03:31:af:7f:13:cc:f2:52:dd:f4:52:af:
                    98:f0:32:0a:b3:c7:67:a2:81:db:91:63:87:9d:2e:
                    e2:84:a9:22:49:01:5b:2f:80:b4:14:3f:b6:87:0c:
                    44:a7:60:c9:3f:81:fd:c9:83:ee:42:52:0d:30:d4:
                    33:be:c7:16:ed:88:a7:26:3a:b7:aa:43:7a:81:0b:
                    35:33:f3:f6:3c:df:d3:13:1d:ab:b4:df:1d:79:0e:
                    31:6d:93:b5:ce:e2:87:34:55:3b:1a:65:23:99:30:
                    8d:43:77:bf:1f:ee:c7:50:50:15:98:a2:8f:34:a7:
                    c8:c8:2c:d1:ac:49:02:fa:46:6b:cd:3e:ac:ef:4c:
                    67:2e:33:a8:0c:66:c1:6c:23:ae:db:06:90:01:59:
                    7f:5e:72:0b:5e:64:88:69:42:ce:ba:5d:fb:28:fd:
                    88:7d:18:cb:bf:d0:de:4c:38:24:6f:f7:12:38:89:
                    7a:cd:22:a9:4d:ce:ba:61:05:73:59:0d:3b:86:bc:
                    cd:0c:58:6c:04:98:de:90:86:b9:36:8c:48:79:b7:
                    64:1e:0e:9d:a0:a8:6c:45:43:d1:e4:e6:35:d1:d5:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F7:58:4F:19:8D:26:BE:A2:13:17:22:03:E7:80:63:A2:4E:56:13
            X509v3 Authority Key Identifier:
                keyid:F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135322e302f32342d3234203d3e20323733383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:85:7b:af:4d:42:9f:db:c0:ba:72:b0:fd:c0:f4:6a:bd:32:
         63:f8:7f:68:88:e9:6f:88:e9:26:f4:d3:69:f1:f1:c5:22:89:
         4c:af:17:6b:56:53:b5:d2:fa:09:dc:4e:60:9f:d2:b7:df:82:
         13:e9:64:5d:12:e8:c9:ba:56:b0:20:fa:93:f7:0f:2a:ee:6a:
         98:f4:e2:a2:81:b8:32:5f:97:fc:a9:19:49:42:6f:5b:f2:fa:
         88:79:fb:1d:3f:b0:7d:8a:b0:34:14:4b:5d:ea:2a:e4:5d:48:
         d7:ef:9a:36:96:f1:66:12:3c:18:b9:6f:00:c6:01:ff:f8:8f:
         9a:8a:a2:4b:9a:35:b3:6a:24:0b:7b:94:85:c8:c8:6e:2d:2a:
         b9:94:64:fc:df:af:9c:bb:8d:58:47:93:36:70:fe:ce:ab:cd:
         83:93:f7:2b:25:3f:cb:2d:9d:7c:4b:6e:52:59:9f:9b:8e:b8:
         d7:23:bb:e0:e2:ab:83:93:d7:bd:8f:41:7c:ae:a2:d0:5e:13:
         34:95:91:20:64:af:aa:3c:c2:41:bb:5e:4b:c6:1f:bb:18:dd:
         86:86:57:30:b3:10:9d:57:98:4c:c7:ef:96:8b:4a:a8:7d:a7:
         86:b8:a1:98:43:f8:a6:fc:79:f8:9c:61:46:1b:50:7b:d4:04:
         38:dd:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 19:48:18 2025 by rpki-client