This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa
File:                     3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa (raw, json)
Hash identifier:          qhWPgsHcshLB580vZLQv42V/rpMvdGivvCn86EsdIw8=
Subject key identifier:   D2:23:DC:FF:C6:CC:6F:36:2E:B2:94:07:02:2D:F1:30:C7:08:91:1C
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       1AA1D86CE3F74B210B10C001273CF8890B1BA759
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa
Signing time:             Tue 06 Jan 2026 19:05:16 +0000
ROA not before:           Tue 06 Jan 2026 19:00:16 +0000
ROA not after:            Tue 05 Jan 2027 19:05:16 +0000
asID:                     28114
IP address blocks:        200.114.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 16:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a1:d8:6c:e3:f7:4b:21:0b:10:c0:01:27:3c:f8:89:0b:1b:a7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Jan  6 19:00:16 2026 GMT
            Not After : Jan  5 19:05:16 2027 GMT
        Subject: CN=D223DCFFC6CC6F362EB29407022DF130C708911C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:20:96:0c:71:43:20:4c:20:5b:0d:d5:a3:
                    2c:fb:96:fe:0a:01:20:1c:64:16:3d:d4:5b:4c:f9:
                    fe:70:b9:fc:a9:be:64:5a:6d:d9:da:95:a7:e7:db:
                    70:d7:fb:13:bb:94:d2:26:bf:72:45:e8:c6:28:4c:
                    ef:8d:a2:3b:56:9b:34:68:61:bb:5e:87:8d:c5:0b:
                    fd:6a:b5:7e:d2:54:8f:49:b4:77:0d:27:39:1f:28:
                    5e:11:a6:0e:8f:f9:45:9c:1a:c9:9d:74:42:26:68:
                    e9:cc:ad:42:cb:a6:7d:04:a2:9b:bf:b4:03:3b:d4:
                    80:0f:2e:a4:99:39:58:e3:46:82:8a:b7:89:b6:6c:
                    22:c5:71:62:ed:d6:dd:e4:17:09:cf:7b:e7:3e:75:
                    ad:bd:69:4b:db:51:5b:c9:c7:0d:29:c8:33:e0:d1:
                    79:1a:20:31:15:5e:5a:27:6e:74:52:06:f1:0f:1b:
                    d1:85:67:66:da:6b:46:93:08:81:6c:40:06:40:ab:
                    bd:53:eb:97:73:c9:6e:36:b3:9c:0d:94:58:34:6d:
                    c3:48:26:67:06:c4:80:0b:7a:1f:f4:bc:83:75:06:
                    f7:4e:5c:8f:37:3b:02:ed:ab:e0:9c:0d:22:b9:91:
                    5a:98:5c:e2:d3:aa:68:48:25:fa:b9:3f:9f:59:3c:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:23:DC:FF:C6:CC:6F:36:2E:B2:94:07:02:2D:F1:30:C7:08:91:1C
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3231203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:8a:fa:1e:71:75:da:8e:29:89:90:c6:15:a8:af:88:4d:af:
         97:40:6f:d2:de:05:35:65:39:f0:4d:10:e0:1f:ee:e7:91:6d:
         b8:7b:29:61:c2:6d:08:56:e7:d9:ed:62:a9:28:24:0a:af:4c:
         e8:91:d6:3e:9f:cc:29:d1:ae:ff:65:32:e5:29:67:5d:c2:07:
         ef:6d:df:e5:15:d6:48:3d:a2:4d:3e:75:46:44:41:ca:b4:eb:
         57:c0:76:23:2a:62:95:0f:0d:42:e8:0e:df:3d:25:9c:f1:6c:
         05:f0:a0:1b:f2:4f:17:13:90:82:f7:eb:55:09:60:9b:2d:7b:
         eb:48:f0:ec:28:ee:6a:67:7a:20:0d:85:99:d5:cb:73:68:2f:
         6a:b3:f0:36:ce:cf:ee:11:96:a8:93:9d:97:ed:4e:e2:5a:5c:
         30:53:c2:a2:2a:f0:6a:f0:72:31:b3:ec:93:7f:4f:80:1f:97:
         c9:e3:c1:43:7a:5e:94:a8:36:3b:8e:b5:b4:a7:b4:20:80:a2:
         57:1d:9d:2a:9a:df:2f:d6:af:c2:df:7d:24:e3:99:e9:a8:b3:
         27:40:ab:ac:27:11:e5:0a:0e:4d:37:d6:b2:85:b9:44:b1:32:
         f3:81:c4:4c:a8:8d:2f:dc:27:24:03:8e:3e:02:3f:3e:46:f7:
         05:bc:6b:62
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGqHYbOP3SyELEMABJzz4iQsbp1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNjAxMDYxOTAwMTZaFw0yNzAxMDUxOTA1MTZaMDMxMTAvBgNV
BAMTKEQyMjNEQ0ZGQzZDQzZGMzYyRUIyOTQwNzAyMkRGMTMwQzcwODkxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8iCWDHFDIEwgWw3Voyz7lv4K
ASAcZBY91FtM+f5wufypvmRabdnalafn23DX+xO7lNImv3JF6MYoTO+NojtWmzRo
Ybteh43FC/1qtX7SVI9JtHcNJzkfKF4Rpg6P+UWcGsmddEImaOnMrULLpn0Eopu/
tAM71IAPLqSZOVjjRoKKt4m2bCLFcWLt1t3kFwnPe+c+da29aUvbUVvJxw0pyDPg
0XkaIDEVXlonbnRSBvEPG9GFZ2baa0aTCIFsQAZAq71T65dzyW42s5wNlFg0bcNI
JmcGxIALeh/0vIN1BvdOXI83OwLtq+CcDSK5kVqYXOLTqmhIJfq5P59ZPMKXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0iPc/8bMbzYuspQHAi3xMMcIkRwwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMyMzAzMDJlMzEzMTM0MmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyHJ4
MA0GCSqGSIb3DQEBCwUAA4IBAQCLivoecXXajimJkMYVqK+ITa+XQG/S3gU1ZTnw
TRDgH+7nkW24eylhwm0IVufZ7WKpKCQKr0zokdY+n8wp0a7/ZTLlKWddwgfvbd/l
FdZIPaJNPnVGREHKtOtXwHYjKmKVDw1C6A7fPSWc8WwF8KAb8k8XE5CC9+tVCWCb
LXvrSPDsKO5qZ3ogDYWZ1ctzaC9qs/A2zs/uEZaok52X7U7iWlwwU8KiKvBq8HIx
s+yTf0+AH5fJ48FDel6UqDY7jrW0p7QggKJXHZ0qmt8v1q/C330k45npqLMnQKus
JxHlCg5NN9ayhblEsTLzgcRMqI0v3CckA44+Aj8+RvcFvGti
-----END CERTIFICATE-----
Generated at Fri Jan 9 23:48:31 2026 by rpki-client