This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138392e302f32342d3234203d3e2032363338.roa
File:                     3230302e392e3138392e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          krTUO7i98rC+6lC48097Lom5T9VyXp9r6ky0dXcXa6o=
Subject key identifier:   68:E0:A5:82:40:26:C4:7F:A6:21:0F:58:C7:DC:4A:CA:5C:12:FD:40
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       7823BC3BCCBD61D55089AB18C3C7A310023390C3
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138392e302f32342d3234203d3e2032363338.roa
Signing time:             Tue 16 Dec 2025 22:20:01 +0000
ROA not before:           Tue 16 Dec 2025 22:15:01 +0000
ROA not after:            Tue 15 Dec 2026 22:20:01 +0000
asID:                     2638
IP address blocks:        200.9.189.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:23:bc:3b:cc:bd:61:d5:50:89:ab:18:c3:c7:a3:10:02:33:90:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 16 22:15:01 2025 GMT
            Not After : Dec 15 22:20:01 2026 GMT
        Subject: CN=68E0A5824026C47FA6210F58C7DC4ACA5C12FD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:17:84:99:bf:53:1b:f9:5d:9b:61:ef:3c:
                    3c:28:3c:60:c0:16:09:5f:e9:40:4b:59:5a:cc:a0:
                    e6:f3:f9:98:f5:31:78:12:f3:65:ed:a3:e2:98:56:
                    57:c5:c1:e6:47:28:a0:7d:c3:3e:6c:c8:c8:b4:68:
                    48:b3:c6:1e:a8:84:29:30:82:ab:3f:57:3e:d1:2f:
                    7f:ab:88:81:0a:0e:36:11:24:73:d4:aa:7f:bb:d6:
                    27:80:bc:cd:06:62:4b:41:6f:d9:ff:4b:96:9e:ac:
                    44:7f:d1:68:dc:29:d5:6a:e9:c5:a4:90:88:cc:9e:
                    97:84:a4:00:1c:66:e5:c8:37:13:22:4a:92:bd:5f:
                    80:2c:36:f2:a2:51:ff:74:9b:a4:07:22:6e:4c:0a:
                    99:fc:80:c7:b8:b9:7c:eb:22:eb:15:75:80:e3:59:
                    f1:10:5a:d9:93:cc:b7:50:84:8c:b2:32:b9:b9:46:
                    9d:a9:7e:63:26:ef:1d:a0:00:fe:a2:17:a4:aa:67:
                    d6:50:dc:83:ef:62:22:e3:f9:dc:cf:9f:db:b4:5e:
                    86:74:2e:e1:87:3d:48:bf:33:f7:15:91:de:da:96:
                    44:24:cc:92:86:3f:8b:87:d1:b5:82:18:4c:e5:d3:
                    34:86:0c:bc:89:5c:df:b3:d9:38:c1:e4:7e:c4:29:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E0:A5:82:40:26:C4:7F:A6:21:0F:58:C7:DC:4A:CA:5C:12:FD:40
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138392e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:62:5d:b3:ff:c9:e4:c9:33:72:38:ea:d0:ca:f2:a4:78:88:
         cd:93:c4:26:d0:29:7f:0f:7d:bb:49:5d:49:09:4e:7b:09:81:
         4a:5c:a9:3e:45:9d:72:2a:21:15:8a:92:3d:d0:60:cc:83:34:
         02:63:dd:07:25:b5:44:4f:8d:58:aa:4e:79:81:2e:7b:80:9e:
         aa:9c:88:04:00:63:14:3e:b5:ff:48:46:f1:4c:ca:b7:10:e1:
         72:d2:0e:47:2d:3e:86:76:a7:43:bf:0b:1e:5c:f9:04:d5:88:
         01:e4:41:71:aa:69:41:8d:03:d9:d9:b5:8b:81:6d:0f:13:5d:
         93:3b:77:00:9e:53:44:9c:16:f6:0f:02:87:2c:06:3c:c0:14:
         1a:fe:f7:f3:c5:1c:6b:49:92:93:4b:18:58:83:6d:6e:56:2b:
         23:f3:78:17:76:cf:75:08:50:1e:8b:50:0a:d9:9d:54:8f:13:
         3b:b9:33:54:30:48:70:75:43:e8:01:2e:3b:74:a3:b3:08:1e:
         c1:9b:10:22:0b:70:73:c8:04:16:7b:bb:95:0f:33:9d:07:16:
         ea:bf:09:21:68:ae:bb:b1:a9:f2:e4:a5:18:80:63:01:07:87:
         36:89:20:0c:8b:c0:6c:fd:4a:c3:e8:54:a6:e8:c7:bd:41:7b:
         70:c2:82:ca
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUeCO8O8y9YdVQiasYw8ejEAIzkMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTEyMTYyMjE1MDFaFw0yNjEyMTUyMjIwMDFaMDMxMTAvBgNV
BAMTKDY4RTBBNTgyNDAyNkM0N0ZBNjIxMEY1OEM3REM0QUNBNUMxMkZENDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QxeEmb9TG/ldm2HvPDwoPGDA
Fglf6UBLWVrMoObz+Zj1MXgS82Xto+KYVlfFweZHKKB9wz5syMi0aEizxh6ohCkw
gqs/Vz7RL3+riIEKDjYRJHPUqn+71ieAvM0GYktBb9n/S5aerER/0WjcKdVq6cWk
kIjMnpeEpAAcZuXINxMiSpK9X4AsNvKiUf90m6QHIm5MCpn8gMe4uXzrIusVdYDj
WfEQWtmTzLdQhIyyMrm5Rp2pfmMm7x2gAP6iF6SqZ9ZQ3IPvYiLj+dzPn9u0XoZ0
LuGHPUi/M/cVkd7alkQkzJKGP4uH0bWCGEzl0zSGDLyJXN+z2TjB5H7EKQHZAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUaOClgkAmxH+mIQ9Yx9xKylwS/UAwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMyMzAzMDJlMzkyZTMxMzgzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAm9MA0GCSqG
SIb3DQEBCwUAA4IBAQAGYl2z/8nkyTNyOOrQyvKkeIjNk8Qm0Cl/D327SV1JCU57
CYFKXKk+RZ1yKiEVipI90GDMgzQCY90HJbVET41Yqk55gS57gJ6qnIgEAGMUPrX/
SEbxTMq3EOFy0g5HLT6GdqdDvwseXPkE1YgB5EFxqmlBjQPZ2bWLgW0PE12TO3cA
nlNEnBb2DwKHLAY8wBQa/vfzxRxrSZKTSxhYg21uVisj83gXds91CFAei1AK2Z1U
jxM7uTNUMEhwdUPoAS47dKOzCB7BmxAiC3BzyAQWe7uVDzOdBxbqvwkhaK67sany
5KUYgGMBB4c2iSAMi8Bs/UrD6FSm6Me9QXtwwoLK
-----END CERTIFICATE-----