This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133362e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3133362e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          sZeCig6eBbEDNZ0sj46iLLpZS/Kt3A2JDJUmmbVUTg0=
Subject key identifier:   88:27:09:0A:67:5C:CC:FD:AC:11:23:98:D6:F9:19:D8:5B:5D:E0:87
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       0DB97FA679C37069E4A55DDEF0A3BC2927AD2D60
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133362e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 18 Dec 2025 06:55:18 +0000
ROA not before:           Thu 18 Dec 2025 06:50:18 +0000
ROA not after:            Thu 17 Dec 2026 06:55:18 +0000
asID:                     13999
IP address blocks:        200.77.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 19:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b9:7f:a6:79:c3:70:69:e4:a5:5d:de:f0:a3:bc:29:27:ad:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Dec 18 06:50:18 2025 GMT
            Not After : Dec 17 06:55:18 2026 GMT
        Subject: CN=8827090A675CCCFDAC112398D6F919D85B5DE087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:26:a8:9f:63:79:99:c8:ab:6c:bc:45:fa:
                    d9:a4:3d:8c:f4:a0:aa:2a:3f:45:ae:97:dc:66:d3:
                    4d:32:1b:18:65:51:41:ca:74:96:2a:c1:ed:bd:91:
                    ca:ee:43:6d:b9:fa:57:47:d6:51:63:25:0f:a3:31:
                    30:7f:e3:5e:f9:a0:a6:a1:48:1f:a3:da:82:3e:46:
                    e1:b7:0c:1b:6d:0c:d1:b3:6f:64:25:90:e6:6f:bf:
                    5c:3b:c8:ca:c3:a0:f4:6c:52:37:5f:63:f5:0d:18:
                    4b:a6:0e:19:8d:3d:54:5b:fe:07:c6:07:c0:5d:c5:
                    00:b6:34:c0:2f:57:b2:5a:71:9c:1c:3f:19:d8:99:
                    8a:2e:17:95:91:36:ec:14:c8:6a:f5:1b:88:8a:fc:
                    f2:74:45:da:e4:b4:5b:84:42:16:42:16:1d:21:57:
                    d9:2b:0d:4f:f1:45:48:ad:9c:88:83:89:55:c0:0d:
                    71:22:79:ff:61:48:a8:00:48:f0:e8:ff:79:5b:8a:
                    e7:59:21:d1:2b:b5:9b:ab:66:ca:c2:16:7f:81:bf:
                    08:b6:87:e8:db:0a:b6:a5:30:ce:dd:88:72:c0:76:
                    84:f1:c7:4b:c3:e1:1b:c1:86:69:c6:76:87:20:b7:
                    b4:7f:a4:ce:a9:03:52:b0:b0:78:13:13:37:14:bf:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:09:0A:67:5C:CC:FD:AC:11:23:98:D6:F9:19:D8:5B:5D:E0:87
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133362e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:98:1b:e9:da:3b:60:28:1b:7b:57:82:15:2d:4b:b7:16:
         1d:27:48:c5:0b:d9:6a:f8:da:cd:d1:ef:5e:e3:81:a1:fc:f7:
         7a:cf:1a:6a:b9:01:55:8f:ad:b4:05:32:1c:92:95:4d:ae:92:
         77:e0:39:a2:b5:e0:d6:3a:23:17:2a:fb:2b:32:bc:c0:73:66:
         00:fc:01:4b:c8:4d:b6:7a:c5:65:b8:e3:26:86:8b:fd:cc:af:
         4e:fd:5d:da:39:35:c6:ce:c4:5e:a0:48:22:cb:5c:ef:0d:47:
         67:23:12:57:61:48:f8:e6:a2:ea:e9:98:64:75:b8:80:c2:95:
         68:59:36:76:d8:7b:50:44:f1:95:8c:7a:51:8e:9e:de:8b:32:
         86:60:7c:a4:7b:b5:d3:3a:a9:5a:9e:75:48:a2:5b:d0:21:d0:
         43:9f:22:41:9b:81:bd:02:05:b5:5d:05:16:76:a8:0e:c9:21:
         61:4c:4c:ae:41:d6:a2:17:c6:34:b2:06:52:de:2c:28:a4:fd:
         ac:06:e5:f1:e4:3c:41:2c:a6:40:70:0b:4d:36:03:c9:7d:3e:
         39:f8:3a:69:f2:3f:38:53:35:44:d2:dd:1c:2f:53:5b:63:03:
         61:b7:c0:72:09:23:2f:19:31:8d:a4:9a:77:b4:94:d6:b4:4e:
         8f:68:2f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:15:18 2025 by rpki-client