This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139302e302f32342d3234203d3e2032363338.roa
File:                     3230302e392e3139302e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          RMMfy333Wox1nLL7NqkaDD49HdtsOqmErRyq+2CMAn0=
Subject key identifier:   7A:C4:46:2E:67:6D:FA:AE:23:A6:9A:81:4C:64:3A:91:3E:0B:22:75
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       77C883BEE03C435AB91F679CBE282662D8041EDE
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139302e302f32342d3234203d3e2032363338.roa
Signing time:             Tue 16 Dec 2025 22:20:01 +0000
ROA not before:           Tue 16 Dec 2025 22:15:01 +0000
ROA not after:            Tue 15 Dec 2026 22:20:01 +0000
asID:                     2638
IP address blocks:        200.9.190.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c8:83:be:e0:3c:43:5a:b9:1f:67:9c:be:28:26:62:d8:04:1e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 16 22:15:01 2025 GMT
            Not After : Dec 15 22:20:01 2026 GMT
        Subject: CN=7AC4462E676DFAAE23A69A814C643A913E0B2275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:22:4c:22:78:38:d7:5f:a0:26:c1:77:38:
                    7a:f7:1d:41:33:1f:43:1c:dc:b9:f8:2b:cd:68:f3:
                    b8:2a:c9:48:13:c4:7c:39:9c:ea:81:52:86:46:33:
                    70:a5:25:6e:c5:87:a9:26:52:2c:e6:8e:96:c6:36:
                    13:57:11:88:5c:c9:8f:74:98:fe:31:3d:28:8c:28:
                    e6:17:07:96:3e:72:83:06:10:37:68:db:3a:34:36:
                    d2:10:8e:d1:76:1b:80:b9:7f:9c:f1:7b:9a:a8:eb:
                    91:b8:45:b7:d2:cd:62:a3:8c:e2:7e:c2:0d:c9:3d:
                    67:6c:b0:82:3e:e0:08:67:fe:23:a0:44:4c:99:ec:
                    8b:32:cd:3c:31:3b:ac:0a:02:c7:39:a0:25:3a:ab:
                    0d:52:ba:5c:2b:f9:cf:9d:37:e0:a2:cd:e9:89:e9:
                    76:b4:fd:8c:96:eb:32:ae:2c:96:66:9a:5f:15:b9:
                    eb:27:51:5d:fb:28:32:ec:08:15:83:59:59:48:d6:
                    a8:9c:77:bc:ae:f9:0d:81:3f:12:a5:88:e8:10:aa:
                    91:4a:49:d6:17:09:01:ad:83:8a:09:aa:ba:60:3e:
                    7a:ad:5f:cc:73:f7:cd:ea:2d:a4:1a:a4:b2:f1:21:
                    90:98:98:29:5f:ac:fd:cc:51:1f:60:fa:27:74:ee:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:46:2E:67:6D:FA:AE:23:A6:9A:81:4C:64:3A:91:3E:0B:22:75
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139302e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:15:50:24:43:9a:0f:41:52:5b:00:62:00:c1:a0:c1:32:6e:
         93:c0:a5:61:91:bf:ff:32:84:89:ce:9b:ca:4d:29:9c:b8:9a:
         0e:72:69:6f:e4:49:3f:ac:b5:a5:e5:31:18:89:19:02:d5:1b:
         bf:a3:74:74:e3:03:73:f9:9d:7d:0c:fc:01:a5:5b:f0:f5:a3:
         0a:fe:d8:f5:e1:b9:16:a0:cf:7c:da:83:f5:b6:14:7a:07:ff:
         23:e8:3a:6c:bc:fe:4e:0e:ae:a4:53:06:74:b2:f0:aa:c0:f7:
         f4:df:63:3e:70:15:b9:bb:31:9f:55:f2:41:3a:aa:d8:73:4f:
         d2:bf:bf:72:0e:4e:ad:74:1d:5a:6e:a5:a5:ff:ac:66:05:3a:
         6c:0a:13:e1:f6:6c:ee:d0:c5:0a:ac:a3:32:a0:be:b2:48:f3:
         1a:aa:bc:4b:ec:c0:10:97:0d:cd:db:fe:2b:d6:c5:37:ae:d3:
         85:6f:0b:ce:9b:22:ae:59:cc:b0:40:16:6f:43:7b:0a:94:d7:
         2e:da:36:4b:f9:1d:be:0d:e4:05:c2:c7:34:c3:3c:ad:74:45:
         eb:98:df:a1:16:59:e9:c4:a5:69:b0:8a:ac:bc:1d:71:2d:14:
         f4:5b:68:0a:15:a3:f6:70:32:64:60:e8:4b:52:bb:20:74:f9:
         f7:b1:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----