This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139322e302f31392d3139203d3e203431333437.roa
File:                     3230302e31332e3139322e302f31392d3139203d3e203431333437.roa (raw, json)
Hash identifier:          moNjKdrQwyJSsTQ1f1SIc1Vig39a+E3SqbACqERrxeE=
Subject key identifier:   70:37:D8:CC:01:58:EA:28:9A:5B:C3:EE:47:B0:33:95:73:17:80:5F
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       62AA6477B7D04FA8E2CAA5BC661D2FCD26E20A0D
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139322e302f31392d3139203d3e203431333437.roa
Signing time:             Tue 23 Dec 2025 10:25:00 +0000
ROA not before:           Tue 23 Dec 2025 10:20:00 +0000
ROA not after:            Tue 22 Dec 2026 10:25:00 +0000
asID:                     41347
IP address blocks:        200.13.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:aa:64:77:b7:d0:4f:a8:e2:ca:a5:bc:66:1d:2f:cd:26:e2:0a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Dec 23 10:20:00 2025 GMT
            Not After : Dec 22 10:25:00 2026 GMT
        Subject: CN=7037D8CC0158EA289A5BC3EE47B033957317805F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:51:df:a6:04:45:b2:45:5f:0c:6e:a8:9c:
                    ad:99:80:c5:7a:95:c8:d8:2f:48:e0:76:e0:75:3e:
                    46:ae:b6:ce:13:ab:bf:93:82:d8:8d:72:58:aa:bd:
                    66:c8:63:94:28:91:04:35:b6:f7:6a:1e:28:00:b5:
                    8e:24:d6:d5:8c:9d:d7:18:74:21:52:dc:29:7f:84:
                    0c:e3:96:19:e7:3c:ff:4d:20:d0:0c:7b:0d:1d:a9:
                    ee:f5:84:26:71:f3:63:48:11:8b:05:4d:f9:15:8a:
                    c6:40:50:69:f2:a2:92:d0:d3:2d:72:d2:fd:c4:0e:
                    4e:a5:0b:4a:54:0f:ac:a6:23:fb:a4:d9:48:45:a6:
                    34:95:12:3b:c3:ce:49:dc:f8:06:a1:fc:71:75:41:
                    f6:11:d6:8a:10:75:d0:2c:ff:81:1a:30:55:a2:6f:
                    45:1d:81:59:2b:92:bd:00:88:21:ed:18:0f:ff:1a:
                    58:18:61:0c:0c:0c:77:5a:f0:2d:b5:2d:7a:50:df:
                    eb:9e:70:08:39:f1:81:ee:e6:24:51:da:24:38:ab:
                    26:03:bd:40:93:e4:43:23:d8:f7:b3:65:6d:01:d9:
                    9f:da:f1:ac:5a:c1:55:33:a3:9e:ba:db:6f:38:ea:
                    9c:4e:d4:f7:b6:a5:c9:2c:cc:f0:c6:b3:ac:de:43:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:37:D8:CC:01:58:EA:28:9A:5B:C3:EE:47:B0:33:95:73:17:80:5F
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139322e302f31392d3139203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:57:7d:4c:d5:b5:5e:1f:be:9c:6e:b0:bc:dc:3d:2d:d7:87:
         3d:57:3f:65:1a:f5:f1:7a:f6:69:80:2c:34:74:dd:24:2e:fe:
         28:90:4f:4d:d8:64:d7:66:c9:7b:d2:d9:51:0d:11:bf:49:e0:
         a1:dd:03:28:28:fc:77:0e:9c:1a:78:66:42:e5:87:b5:65:d9:
         fc:e9:c1:40:df:2d:56:70:07:ba:c7:1d:ff:42:e6:5d:90:fe:
         1e:96:a8:4e:2e:32:06:8c:39:cb:8e:e4:9f:97:80:cf:f2:44:
         bd:85:ce:bd:1c:3d:2e:a6:48:b9:65:27:98:d8:12:5a:75:00:
         16:2a:c3:1a:03:06:5a:64:4f:41:83:0b:2a:7f:54:6c:fb:8a:
         e2:d3:12:1d:aa:2a:de:e7:14:59:ea:ce:d9:94:8f:60:b4:a8:
         30:c4:63:81:b7:64:18:e6:9b:2c:3b:28:12:89:eb:1a:97:84:
         8e:8a:40:25:62:55:7c:66:95:46:d0:d7:dd:27:3e:54:7a:cd:
         09:d3:c7:67:db:c9:e2:bf:be:aa:31:49:9d:5c:05:21:eb:e2:
         98:91:4b:f0:4f:4c:d2:0f:6d:67:cd:ea:64:f6:e3:0e:e6:02:
         a3:a1:4a:a1:e4:a5:d9:f3:f1:1e:f7:eb:35:30:db:76:86:03:
         72:7e:bb:10
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYqpkd7fQT6jiyqW8Zh0vzSbiCg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYwQjJBODY0NkFD
OUYyMEFGNTAeFw0yNTEyMjMxMDIwMDBaFw0yNjEyMjIxMDI1MDBaMDMxMTAvBgNV
BAMTKDcwMzdEOENDMDE1OEVBMjg5QTVCQzNFRTQ3QjAzMzk1NzMxNzgwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVC1HfpgRFskVfDG6onK2ZgMV6
lcjYL0jgduB1Pkauts4Tq7+TgtiNcliqvWbIY5QokQQ1tvdqHigAtY4k1tWMndcY
dCFS3Cl/hAzjlhnnPP9NINAMew0dqe71hCZx82NIEYsFTfkVisZAUGnyopLQ0y1y
0v3EDk6lC0pUD6ymI/uk2UhFpjSVEjvDzknc+Aah/HF1QfYR1ooQddAs/4EaMFWi
b0UdgVkrkr0AiCHtGA//GlgYYQwMDHda8C21LXpQ3+uecAg58YHu5iRR2iQ4qyYD
vUCT5EMj2PezZW0B2Z/a8axawVUzo56622846pxO1Pe2pckszPDGs6zeQxhXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcDfYzAFY6iiaW8PuR7AzlXMXgF8wHwYDVR0j
BBgwFoAUNuGeLU7o8+rQwUZgsqhkasnyCvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5
MUJGMUUzMjM4NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNF
QUQwQzE0NjYwQjJBODY0NkFDOUYyMEFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkUxOUUyRDRFRThGM0VBRDBD
MTQ2NjBCMkE4NjQ2QUM5RjIwQUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4MTFCQURCQTI0OTFCRjFFMzIz
ODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzMyMzAzMDJlMzEzMzJlMzEzOTMyMmUz
MDJmMzEzOTJkMzEzOTIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcgNwDAN
BgkqhkiG9w0BAQsFAAOCAQEAJFd9TNW1Xh++nG6wvNw9LdeHPVc/ZRr18Xr2aYAs
NHTdJC7+KJBPTdhk12bJe9LZUQ0Rv0ngod0DKCj8dw6cGnhmQuWHtWXZ/OnBQN8t
VnAHuscd/0LmXZD+HpaoTi4yBow5y47kn5eAz/JEvYXOvRw9LqZIuWUnmNgSWnUA
FirDGgMGWmRPQYMLKn9UbPuK4tMSHaoq3ucUWerO2ZSPYLSoMMRjgbdkGOabLDso
EonrGpeEjopAJWJVfGaVRtDX3Sc+VHrNCdPHZ9vJ4r++qjFJnVwFIevimJFL8E9M
0g9tZ83qZPbjDuYCo6FKoeSl2fPxHvfrNTDbdoYDcn67EA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:16 2026 by rpki-client