{ "groupContentId": 4984, "translations": [ { "contentId": 4984, "topTitle": "", "description": "", "typeKeyName": "innova.text", "language": "EN", "publishedDate": "20201022114926", "title": "RPKI Trust Anchors - TAL", "slug": "rpki-trust-anchors-tal", "body": [ "

In the context of RPKI architecture, the Trust Anchor Locator (TAL) is a file that contains information needed for an RPKI validator to access the repository location and begin the validation process.

\n

The Trust Anchor Locator contains several elements:

\n\n

LACNIC's RPKI TAL:

\n
https://rrdp.lacnic.net/ta/rta-lacnic-rpki.cer\nrsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer\n\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZEzhYK0+PtDOPfub/KRc3MeWx3ne
Xx4/wbnJWGbNAtbYqXg3uU5J4HFzPgk/VIppgSKAhlO0H60DRP48by9gr5/yDHu2KXhOmnMg4
6sYsUIpfgtBS9+VtrqWziJfb+pkGtuOWeTnj6zBmBNZKK+5AlMCW1WPhrylIcB+XSZx8tk9GS
/3SMQ+YfMVwwAyYjsex14Uzto4GjONALE5oh1M3+glRQduD6vzSwOD+WahMbc9vCOTED+2McL
HRKgNaQf0YJ9a1jG9oJIvDkKXEqdfqDRktwyoD74cV57bW3tBAexB7GglITbInyQAsmdngtfg
2LUMrcROHHP86QPZINjDQIDAQAB\n\n
\n

The implementation of LACNIC policy LAC-2019-12 (RPKI ROAs with Origin ASN 0), requires downloading a specific TAL and installing it in your validator.

\n

The TAL file used for the implementation of “RPKI ROAs with Origin ASN 0” is the following:

\n
https://rrdp.lacnic.net/ta/rta-lacnic-rpki-as0.cer\nrsync://repository.lacnic.net/rpkias0/lacnic/rta-lacnic-rpki-as0.cer\n\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW5FgZ9Foda5ZpboK99IzhnBG4Gu9t0M \nbzaqUI7rEH70RKbxpYtBguktrwVX3CaK7BiDtxOEtQv6iikt2DyfLZ14tpwoh/1NBqPilb+PfvNC \nN75LU9WYv5Fy651bC+N9kO7tAZeWY1NhZCYi3FjFjBRvv7IbUuWx5Us+xoV0g1jVVI5PI69Cbp/j \n1a3CutCe92yJ5z9VTJQYXPw32ti0gAAERCepr21y4sO4rJiJtdDGk2+ezFzSgvgitX+/aqaoTpsD \nHCcSu0ScdsuY+XIQuq0f/Pcg/ClwSmRX2M+7nsbiOHv0GP4VubEW14u9lvu+XdpaPcZVBRldaP9h \n5I1f2QIDAQAB\n\n
\n

While most validation tools already include the necessary TAL files, in certain cases it may be useful to keep the TAL file separate.

\n

This file can be downloaded from the following links:

\n

https://www.lacnic.net/rpki/lacnic.tal

\n

https://www.lacnic.net/rpki/lacnic-as0.tal

\n

The TAL file format is specified in documents prepared by the Internet Engineering Task Force (IETF), RFC 8630 (previously RFCs 6490 and 7730).

" ], "attachedUrls": [], "sidebar": [{"contentId":4987,"title":"menu-rpki-en","typeKeyName":"HTM","language":"EN","body":[""]}], "url": "/4984/1/lacnic/rpki-trust-anchors---tal", "site": 1, "channel": "lacnic" }, { "contentId": 4985, "topTitle": "", "description": "", "typeKeyName": "innova.text", "language": "PT", "publishedDate": "20201022115853", "title": "Âncoras de confiança do RPKI - TAL", "slug": "ancoras-de-confianca-do-rpki-tal", "body": [ "

No âmbito da arquitetura do RPKI, o \"TAL\" (Trust Anchor Locator) é um arquivo que contém as informações necessárias para que uma ferramenta de validação do RPKI possa acessar à localização do repositório e iniciar o processo de validação.
O TAL contém vários elementos:

\n
    \n
  1. As URL que apontam para o repositório do RPKI do LACNIC
    2. \n
  2. A chave pública do LACNIC codificada adequadamente
    3. \n
\n

O TAL do LACNIC é o seguinte:

\n
https://rrdp.lacnic.net/ta/rta-lacnic-rpki.cer\nrsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer\n\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZEzhYK0+PtDOPfub/KRc3MeWx3ne
Xx4/wbnJWGbNAtbYqXg3uU5J4HFzPgk/VIppgSKAhlO0H60DRP48by9gr5/yDHu2KXhOmnMg4
6sYsUIpfgtBS9+VtrqWziJfb+pkGtuOWeTnj6zBmBNZKK+5AlMCW1WPhrylIcB+XSZx8tk9GS
/3SMQ+YfMVwwAyYjsex14Uzto4GjONALE5oh1M3+glRQduD6vzSwOD+WahMbc9vCOTED+2McL
HRKgNaQf0YJ9a1jG9oJIvDkKXEqdfqDRktwyoD74cV57bW3tBAexB7GglITbInyQAsmdngtfg
2LUMrcROHHP86QPZINjDQIDAQAB\n\n
\n

Para poder aproveitar a implementação da política LAC-2019-12 (RPKI ASN 0 ROA), é preciso baixar um TAL específico e instalá-lo em sua ferramenta de validação.

\n

O TAL da implementação do “RPKI ASN 0 ROA” é o seguinte:

\n
https://rrdp.lacnic.net/ta/rta-lacnic-rpki-as0.cer\nrsync://repository.lacnic.net/rpkias0/lacnic/rta-lacnic-rpki-as0.cer\n\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW5FgZ9Foda5ZpboK99IzhnBG4Gu9t0M \nbzaqUI7rEH70RKbxpYtBguktrwVX3CaK7BiDtxOEtQv6iikt2DyfLZ14tpwoh/1NBqPilb+PfvNC \nN75LU9WYv5Fy651bC+N9kO7tAZeWY1NhZCYi3FjFjBRvv7IbUuWx5Us+xoV0g1jVVI5PI69Cbp/j \n1a3CutCe92yJ5z9VTJQYXPw32ti0gAAERCepr21y4sO4rJiJtdDGk2+ezFzSgvgitX+/aqaoTpsD \nHCcSu0ScdsuY+XIQuq0f/Pcg/ClwSmRX2M+7nsbiOHv0GP4VubEW14u9lvu+XdpaPcZVBRldaP9h \n5I1f2QIDAQAB\n\n
\n

Embora a maioria das ferramentas de validação já inclua os arquivos TAL necessários, em alguns casos, pode ser útil ter o arquivo TAL separadamente.

\n

Ele pode ser baixado clicando no link:

\n

https://www.lacnic.net/rpki/lacnic.tal
https://www.lacnic.net/rpki/lacnic-as0.tal

\n

O formato dos arquivos TAL é especificado por documentos da Internet Engineering Task Force (IETF) na RFC 8630 (antes nas 6490 e 7730)

" ], "attachedUrls": [], "sidebar": [{"contentId":4988,"title":"menu-rpki-pt","typeKeyName":"HTM","language":"PT","body":[""]}], "url": "/4985/1/lacnic/âncoras-de-confianca-do-rpki---tal", "site": 1, "channel": "lacnic" }, { "contentId": 4983, "topTitle": "", "description": "", "typeKeyName": "innova.text", "language": "ES", "publishedDate": "20201022114128", "title": "Ancla de confianza de RPKI - TAL", "slug": "ancla-de-confianza-de-rpki-tal", "body": [ "

En el contexto de la arquitectura de RPKI, el \"TAL\" (Trust Anchor Locator) es un archivo que contiene la información necesaria para que una herramienta de validación de RPKI pueda acceder a la localización del repositorio y comenzar el proceso de validación.

\n

El TAL contiene varios elementos:

\n\n

El TAL de LACNIC es el siguiente:

\n
https://rrdp.lacnic.net/ta/rta-lacnic-rpki.cer\nrsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer\n\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZEzhYK0+PtDOPfub/KRc3MeWx3ne
Xx4/wbnJWGbNAtbYqXg3uU5J4HFzPgk/VIppgSKAhlO0H60DRP48by9gr5/yDHu2KXhOmnMg4
6sYsUIpfgtBS9+VtrqWziJfb+pkGtuOWeTnj6zBmBNZKK+5AlMCW1WPhrylIcB+XSZx8tk9GS
/3SMQ+YfMVwwAyYjsex14Uzto4GjONALE5oh1M3+glRQduD6vzSwOD+WahMbc9vCOTED+2McL
HRKgNaQf0YJ9a1jG9oJIvDkKXEqdfqDRktwyoD74cV57bW3tBAexB7GglITbInyQAsmdngtfg
2LUMrcROHHP86QPZINjDQIDAQAB\n\n
\n

Para poder aprovechar la implementación de la política LAC-2019-12 (RPKI ASN 0 ROA) es necesario descargar un TAL específico e instalarlo en su herramienta de validación.

\n

El TAL de la implementación de “RPKI ASN 0 ROA” es el siguiente:

\n
https://rrdp.lacnic.net/ta/rta-lacnic-rpki-as0.cer\nrsync://repository.lacnic.net/rpkias0/lacnic/rta-lacnic-rpki-as0.cer\n\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW5FgZ9Foda5ZpboK99IzhnBG4Gu9t0M \nbzaqUI7rEH70RKbxpYtBguktrwVX3CaK7BiDtxOEtQv6iikt2DyfLZ14tpwoh/1NBqPilb+PfvNC \nN75LU9WYv5Fy651bC+N9kO7tAZeWY1NhZCYi3FjFjBRvv7IbUuWx5Us+xoV0g1jVVI5PI69Cbp/j \n1a3CutCe92yJ5z9VTJQYXPw32ti0gAAERCepr21y4sO4rJiJtdDGk2+ezFzSgvgitX+/aqaoTpsD \nHCcSu0ScdsuY+XIQuq0f/Pcg/ClwSmRX2M+7nsbiOHv0GP4VubEW14u9lvu+XdpaPcZVBRldaP9h \n5I1f2QIDAQAB\n\n
\n

Si bien la mayoría de las herramientas de validación ya incluyen los archivos TAL necesarios, en algunos casos puede ser útil contar con el archivo TAL por separado.

\n

El mismo puede ser descargado desde este enlace:

\n

https://www.lacnic.net/rpki/lacnic.tal

\n

https://www.lacnic.net/rpki/lacnic-as0.tal

\n

El formato de los archivos TAL están especificados por documentos de la Internet Engineering Task Force (IETF) en la RFC 8630 (anteriormente en las 6490 y 7730)

" ], "attachedUrls": ["/innovaportal/file/4983/1/lacnic.tal", "/innovaportal/file/4983/1/lacnic-as0.tal"], "sidebar": [{"contentId":4986,"title":"menu-rpki-es","typeKeyName":"HTM","language":"ES","body":[""]}], "url": "/4983/1/lacnic/ancla-de-confianza-de-rpki---tal", "site": 1, "channel": "lacnic" } ] }