This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e33372e302f32342d3234203d3e203532333332.roa
File:                     3230302e31342e33372e302f32342d3234203d3e203532333332.roa (raw, json)
Hash identifier:          cmCKkIsRphmxmftyjblhX6UF8HO7IaYVd+KBeVWvvlw=
Subject key identifier:   DC:8C:14:A0:E4:8F:67:35:3C:01:B1:FD:5B:F3:3E:EF:EE:33:DC:3C
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5BF2AB463592234B51C0F5385E5E0BF49D7036F2
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e33372e302f32342d3234203d3e203532333332.roa
Signing time:             Tue 06 Jan 2026 19:29:26 +0000
ROA not before:           Tue 06 Jan 2026 19:24:26 +0000
ROA not after:            Tue 05 Jan 2027 19:29:26 +0000
asID:                     52332
IP address blocks:        200.14.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f2:ab:46:35:92:23:4b:51:c0:f5:38:5e:5e:0b:f4:9d:70:36:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:26 2026 GMT
            Not After : Jan  5 19:29:26 2027 GMT
        Subject: CN=DC8C14A0E48F67353C01B1FD5BF33EEFEE33DC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:27:f7:80:7d:37:b2:95:f4:46:3a:cf:a7:
                    b7:d7:63:e5:94:8f:89:c3:a5:78:a5:87:22:a7:95:
                    86:f8:fd:38:07:69:0b:da:f8:94:0a:97:4a:b8:27:
                    39:37:62:3e:a9:ff:94:73:2f:71:e7:3f:45:65:d4:
                    03:4d:5c:d3:3f:58:81:1f:97:43:79:2a:0a:a2:2f:
                    a1:41:e6:50:75:ec:a4:1f:5b:16:61:40:24:9f:d8:
                    40:d7:b9:fb:1b:38:14:a6:94:c6:4e:e6:c9:56:15:
                    3d:82:80:f9:1e:4e:ca:0c:88:b3:13:b5:93:5b:90:
                    aa:d2:67:24:5b:24:0e:91:5b:8f:22:35:da:ab:01:
                    92:bf:f0:87:10:64:97:fa:40:36:93:69:f6:42:60:
                    c6:cb:e4:49:24:1a:99:d6:3a:b7:39:7f:d3:2b:c9:
                    21:96:92:3a:2f:4e:ff:cb:7d:e2:41:74:5d:27:7d:
                    10:24:f1:46:7b:3f:02:0b:4e:da:f8:43:dc:ff:b4:
                    fd:7d:9a:d4:31:19:af:b7:97:5b:46:d9:24:54:2c:
                    4d:06:67:e9:c0:a4:a9:a9:1e:74:43:87:22:a5:d9:
                    ff:c2:f7:6a:3a:a5:6d:3b:42:bf:1e:be:f9:0b:92:
                    22:f8:76:df:f7:29:01:27:78:31:04:e2:80:6a:18:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8C:14:A0:E4:8F:67:35:3C:01:B1:FD:5B:F3:3E:EF:EE:33:DC:3C
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e33372e302f32342d3234203d3e203532333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:9c:3d:3d:dd:24:bd:c1:6d:d4:61:fb:62:e7:1e:c9:78:
         a6:44:6d:1d:c3:ac:b2:9a:33:e3:a4:1e:06:df:ef:25:96:81:
         c2:86:57:cc:6e:20:7c:db:cf:d8:01:9e:49:24:13:5f:d7:e2:
         ec:a3:2d:ce:21:6e:b2:1e:45:cf:d1:da:a5:68:0d:52:f7:a6:
         5b:13:4d:ae:8b:43:0f:37:23:18:7c:23:15:56:f7:c0:f3:db:
         c1:0c:cf:ee:87:f1:e1:35:8b:73:6e:c2:7e:b8:04:68:e2:62:
         a2:d5:af:77:db:1d:02:94:1e:d9:23:ae:d8:8a:9e:39:6a:e6:
         7a:18:1a:6d:ff:7b:f0:7a:30:59:c1:5c:3c:ce:1b:9c:e9:55:
         08:17:10:bb:da:fe:91:8f:be:96:89:72:69:e7:6d:0b:ca:80:
         24:0b:8a:6e:43:5a:40:47:04:15:5a:31:2d:36:bf:ec:e9:db:
         ce:31:e0:d7:40:f0:15:b4:f8:f7:88:77:cc:37:47:56:0d:b4:
         47:fd:86:62:cf:8b:e5:5e:12:fd:f9:61:db:29:fd:46:9c:67:
         f4:66:6c:a6:a2:c9:2e:44:a9:a0:41:55:14:74:17:ea:27:26:
         bc:39:a9:9b:98:dd:d5:36:51:e9:f3:57:46:57:1f:19:c1:98:
         f6:7f:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 06:59:43 2026 by rpki-client