This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232352e302f32342d3234203d3e203532343638.roa
File:                     3230302e3131322e3232352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          b4h+Hmve8YL51A/dRU+Yzvt0UnXUe0owU7f7gpCbF9c=
Subject key identifier:   B7:24:A2:61:30:43:3B:01:FB:22:75:02:72:9C:84:DB:FD:3F:72:01
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       1A5729D92A90F228E8EF21EE595479FE3AAAFF96
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232352e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 27 Nov 2025 21:15:01 +0000
ROA not before:           Thu 27 Nov 2025 21:10:01 +0000
ROA not after:            Thu 26 Nov 2026 21:15:01 +0000
asID:                     52468
IP address blocks:        200.112.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:57:29:d9:2a:90:f2:28:e8:ef:21:ee:59:54:79:fe:3a:aa:ff:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Nov 27 21:10:01 2025 GMT
            Not After : Nov 26 21:15:01 2026 GMT
        Subject: CN=B724A26130433B01FB227502729C84DBFD3F7201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:40:19:58:96:23:2e:6d:3f:ee:ff:27:b5:
                    53:e1:99:c5:8c:47:a3:d5:50:dc:a6:a1:e6:f4:a4:
                    36:a3:ad:3d:59:6e:c5:13:83:b9:60:b8:d6:14:f4:
                    63:43:16:0e:78:d1:b9:f6:36:5b:b0:f2:51:4f:dc:
                    ca:4b:97:15:36:b5:46:c9:de:58:ae:6e:ac:8e:5c:
                    1d:60:c5:47:8d:8d:5a:fa:2c:67:9f:30:d1:c1:d6:
                    d7:66:e5:e4:aa:a3:fe:5d:35:db:e3:0d:7a:7b:6b:
                    9c:c9:42:56:30:03:e0:1a:f3:8d:25:b7:05:c2:1a:
                    1e:9f:f4:b8:d7:50:b9:d0:43:a5:8c:f3:77:be:a1:
                    f3:f5:57:0f:37:af:04:44:c0:a9:16:87:3f:da:3e:
                    c1:87:cb:2a:d8:41:95:09:ec:48:a4:92:ee:3a:24:
                    54:6b:84:35:25:ae:bc:a2:c4:e5:29:9b:da:bc:f5:
                    de:b3:6e:61:4b:7b:1b:79:4b:52:72:06:29:57:0a:
                    89:64:0a:52:13:e8:94:9e:69:0b:2d:51:2f:08:77:
                    6a:d8:06:5a:19:b4:28:e4:4a:06:12:d9:b4:52:0b:
                    b4:ab:4d:f3:e7:02:b0:aa:41:4b:93:51:63:df:02:
                    ad:9e:f1:f8:20:c6:94:1c:70:63:b2:53:9f:a8:bb:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:24:A2:61:30:43:3B:01:FB:22:75:02:72:9C:84:DB:FD:3F:72:01
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a8:40:5a:ec:cc:df:8f:17:ce:97:d2:af:20:aa:03:2c:ad:
         3e:1c:90:5e:6f:a0:cc:a1:c3:b3:6b:9f:8b:26:d8:1f:34:e6:
         4e:ca:6a:05:62:0d:c5:75:4b:71:cd:f2:e0:8c:7a:f5:12:7a:
         60:09:ec:b8:9e:36:4b:eb:49:e8:35:a6:7f:b0:49:1f:5e:64:
         78:44:e1:07:c8:72:c1:43:b0:6d:22:49:6a:aa:20:91:4c:6c:
         ea:9c:75:91:23:cb:dd:2f:da:dd:59:05:9a:fa:53:72:6b:da:
         55:ab:cb:ce:5d:b7:21:6d:7a:b3:9a:46:73:79:e7:05:55:a3:
         c0:bc:6b:66:eb:eb:41:21:c6:95:d6:f8:78:41:b6:db:7a:c4:
         3a:48:92:33:6b:ed:be:7a:0e:9e:8a:d6:1e:97:1d:30:8f:a9:
         f2:84:e2:83:29:2a:b8:db:2f:67:a7:72:e2:69:f1:87:be:02:
         b5:07:bd:5c:0e:7c:c5:0f:8a:53:ce:d5:91:58:f6:38:fa:49:
         b4:4b:d7:b3:d7:e1:39:e4:f8:34:a4:e5:cd:32:18:a4:31:95:
         c6:aa:f1:2d:a0:8a:c2:e3:08:b1:3a:89:e4:b1:d4:75:82:e8:
         bf:27:8d:ff:ec:71:76:e4:d3:99:28:d8:89:02:19:d1:18:81:
         bd:b3:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 08:31:06 2025 by rpki-client