This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa
File:                     3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          9e1WBleSpDwUUmp7J+D/Tl63fyXsG7NdjwpQOp+Lue4=
Subject key identifier:   95:22:BE:97:38:BF:E9:55:D2:07:40:16:7B:E3:BC:2D:46:44:F0:0D
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       383A1ADAB2D22EB34FF8ED9B288867C017C0E62A
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:24 +0000
ROA not before:           Tue 06 Jan 2026 19:42:24 +0000
ROA not after:            Tue 05 Jan 2027 19:47:24 +0000
asID:                     14754
IP address blocks:        200.119.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3a:1a:da:b2:d2:2e:b3:4f:f8:ed:9b:28:88:67:c0:17:c0:e6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:24 2026 GMT
            Not After : Jan  5 19:47:24 2027 GMT
        Subject: CN=9522BE9738BFE955D20740167BE3BC2D4644F00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:15:90:73:09:d3:bf:31:de:d4:92:6c:51:
                    33:01:ad:e6:6c:0d:4c:c0:9b:59:11:aa:55:e9:64:
                    04:fb:8e:ff:cf:3f:fb:2b:84:f0:e2:b4:72:4a:46:
                    2a:d9:73:f1:59:8a:d2:6e:4d:8f:51:46:7d:f9:6d:
                    ee:73:df:b0:44:03:bc:a0:4a:45:62:9c:61:35:06:
                    9b:1e:7b:cf:f1:f8:10:03:f3:41:c4:32:40:37:af:
                    74:67:07:be:ed:24:62:c6:b5:94:74:de:80:d0:6b:
                    c2:08:c8:91:76:b1:cb:86:75:2c:10:fb:1d:75:c6:
                    f5:1d:85:de:98:3b:6e:88:ef:01:5e:7f:57:93:1b:
                    77:ec:92:36:7a:bb:fc:a5:25:8f:44:0d:5d:4e:6b:
                    04:8a:61:c3:ea:73:e0:20:3c:ee:4e:eb:dd:3a:70:
                    16:80:a8:56:39:5b:0b:98:4c:6d:ad:9b:fa:00:e6:
                    0f:d5:75:2a:fb:60:e5:b0:37:de:01:e3:92:79:db:
                    e2:6e:06:b7:a3:93:be:a8:09:34:c1:61:cb:df:9f:
                    95:0c:07:09:6e:09:8f:cf:92:1d:8b:82:fa:e1:19:
                    67:12:c8:50:18:c1:00:ab:88:93:95:34:11:9b:29:
                    5a:33:e7:e8:56:d6:5d:34:1c:47:8e:25:e8:82:ad:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:BE:97:38:BF:E9:55:D2:07:40:16:7B:E3:BC:2D:46:44:F0:0D
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:d0:e8:ce:3b:f3:09:e1:8a:6a:1a:26:f9:76:fe:85:69:82:
         3b:a1:3b:84:c6:3e:50:0a:37:25:e2:11:37:1a:96:62:66:12:
         b2:69:7d:ec:27:38:51:b4:44:2f:12:79:98:f0:41:f0:c5:b1:
         3a:d8:d1:71:81:a1:b5:e5:b9:7b:75:89:26:1f:b8:53:76:f9:
         6e:e7:d7:fd:8b:b2:20:95:08:2b:d5:dc:76:bf:28:f7:a0:f8:
         db:6a:97:fc:b7:ee:cf:aa:b6:0f:9f:e2:da:79:60:d3:2a:a1:
         07:59:46:f6:3f:ad:3d:ac:5f:9e:57:d2:5b:fb:0d:5c:75:3c:
         da:9a:29:24:46:1a:25:10:bf:57:bb:48:ce:ff:dd:e1:82:99:
         90:9a:2f:bc:5b:0c:c6:ec:53:fa:52:b5:34:14:3a:2d:1f:51:
         ce:73:74:2f:4d:ff:4e:85:45:17:aa:2f:45:aa:98:cb:eb:70:
         73:fc:73:ba:a7:aa:23:cc:51:d3:e5:32:b6:e3:3c:62:05:b6:
         a4:0e:f4:39:a4:8d:3e:c3:f1:e7:06:41:95:b5:cb:ac:42:c5:
         63:62:32:92:2d:63:63:c3:4a:b2:ce:06:ca:52:3e:b1:ee:65:
         07:49:66:ef:de:52:9a:87:42:de:9b:c9:9d:7b:0b:16:22:3c:
         c6:de:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:04 2026 by rpki-client