This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139312e302f32342d3234203d3e2032363338.roa
File:                     3230302e392e3139312e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          THuqidrrPoq5JIbQzmD6/7IJmNo1zAzDl2WfVikcl8k=
Subject key identifier:   66:96:BF:F1:2A:CD:99:C0:C5:6F:CE:B8:64:AF:35:09:6B:38:7C:28
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       0A38D03166C2DD16D738C9DEAF333487CF00EDC6
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139312e302f32342d3234203d3e2032363338.roa
Signing time:             Tue 16 Dec 2025 22:20:02 +0000
ROA not before:           Tue 16 Dec 2025 22:15:02 +0000
ROA not after:            Tue 15 Dec 2026 22:20:02 +0000
asID:                     2638
IP address blocks:        200.9.191.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:38:d0:31:66:c2:dd:16:d7:38:c9:de:af:33:34:87:cf:00:ed:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 16 22:15:02 2025 GMT
            Not After : Dec 15 22:20:02 2026 GMT
        Subject: CN=6696BFF12ACD99C0C56FCEB864AF35096B387C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:93:23:17:a8:81:6e:0a:8b:e7:85:e4:f2:
                    ef:a8:76:9f:f9:24:9e:29:7d:31:f7:f0:b3:fc:3a:
                    50:b8:39:09:15:49:d1:16:24:b9:88:6f:c5:13:ba:
                    2a:b5:a7:f3:1c:86:b6:d7:31:f3:54:04:ec:e4:5e:
                    03:56:e5:14:b2:32:fe:c4:96:d3:26:75:7d:c5:27:
                    b0:29:29:25:32:5c:30:e3:a2:10:45:d8:9b:c5:fe:
                    c7:9f:78:b5:c9:28:7e:ac:ed:c1:d9:f1:e2:4a:bc:
                    37:15:f6:5b:b6:29:10:e8:3d:e0:b3:40:e8:3e:87:
                    16:99:e2:34:82:1f:17:c3:fb:b6:f1:50:63:53:4d:
                    56:7b:5d:a7:15:5e:86:e9:51:b9:41:cf:29:34:95:
                    05:3e:41:ef:18:d2:d0:76:20:50:84:b3:7e:57:c6:
                    2e:c7:b5:39:d8:bc:2f:36:3b:16:67:c2:5e:11:b4:
                    14:4c:ad:c4:d8:ec:ce:3a:44:62:e1:cc:c7:e4:94:
                    33:cd:c6:be:9c:27:85:7b:2c:bc:15:7b:cd:d2:ee:
                    5e:4e:2d:13:8d:90:02:82:5e:6f:51:b0:5b:a7:c1:
                    7e:44:63:84:da:05:b7:1e:31:15:7b:34:6d:e3:ba:
                    84:27:9d:51:60:c2:14:d6:47:08:38:e0:1d:70:2d:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:96:BF:F1:2A:CD:99:C0:C5:6F:CE:B8:64:AF:35:09:6B:38:7C:28
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139312e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:94:7a:b6:1d:9a:ea:90:6e:66:44:8e:01:a3:12:10:7f:d7:
         62:36:52:de:34:89:06:43:d0:e1:c4:08:10:0c:8a:4f:62:85:
         28:47:6a:91:4b:a5:e9:55:42:cd:02:0d:4f:95:bc:06:5f:6d:
         1e:ff:15:70:b0:4b:16:96:38:bc:c8:cc:79:07:ef:bd:d3:ff:
         37:95:fa:bc:29:6a:1d:ae:3e:7b:e6:86:5f:b5:1e:b4:fa:0e:
         86:b5:0e:b0:54:3b:f7:3f:25:17:d6:3f:ad:d0:f7:85:ec:b0:
         dc:d6:33:7f:02:a5:5f:9e:8e:b1:48:17:9e:25:f5:22:9d:93:
         48:03:3e:8e:cc:a8:f7:b3:62:75:58:6f:c7:04:06:d2:85:40:
         13:ff:84:32:7b:2b:9f:0b:8b:83:85:b2:06:3f:ee:40:36:04:
         d3:e5:06:37:54:e9:25:3e:98:db:04:7f:89:31:7d:cc:28:e2:
         71:71:cb:4d:bd:5f:a9:9f:a0:9e:a8:f6:c4:6a:63:e9:fc:33:
         d2:5b:79:3e:c9:8c:af:e5:43:b8:f8:0f:26:f7:55:4c:3f:9f:
         f9:ca:99:6d:60:8d:a2:ac:2f:cf:cc:b7:2f:46:d1:07:32:21:
         13:b6:10:b9:a0:1f:df:13:13:98:31:81:85:0f:78:45:87:bc:
         0f:0d:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----