Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          sn0556x8KnsuM73TDboB96sE1JTAP/dnTZKlBjeujTU=
Subject key identifier:   34:F6:0C:9F:D9:AB:BE:9B:FF:E3:8B:3C:E6:0F:C8:2F:D9:ED:64:76
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       1B3CC8DDA46F121EB251DAB5F690FD5B8AAA66C3
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:16 +0000
ROA not before:           Wed 18 Feb 2026 19:50:16 +0000
ROA not after:            Wed 17 Feb 2027 19:55:16 +0000
asID:                     52266
IP address blocks:        201.219.252.0/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:c8:dd:a4:6f:12:1e:b2:51:da:b5:f6:90:fd:5b:8a:aa:66:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:16 2026 GMT
            Not After : Feb 17 19:55:16 2027 GMT
        Subject: CN=34F60C9FD9ABBE9BFFE38B3CE60FC82FD9ED6476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:3a:ac:70:0f:07:1f:a5:5b:dc:9b:74:14:
                    1c:fb:3d:53:0f:0f:7d:20:89:4c:06:b5:2a:3e:7b:
                    8a:c6:6c:6c:52:3b:96:4a:d7:11:75:61:18:f5:9f:
                    6c:48:e3:7a:d5:fc:1f:f8:7a:83:9a:b8:e4:63:bc:
                    81:97:4f:6a:28:2a:2f:e7:e9:5a:b3:e8:39:16:b8:
                    9b:40:5c:bd:61:c2:d7:10:78:c6:2a:ac:f9:1a:5b:
                    46:45:05:c6:fb:12:34:e1:52:d3:ce:3d:8a:53:58:
                    77:25:5e:5e:f4:10:2d:e3:ed:67:0a:81:7e:d1:0e:
                    17:7c:60:d5:1d:1e:1e:61:b6:c7:37:2c:ff:5a:6b:
                    bd:c0:14:26:6a:d1:da:13:9c:16:d5:88:5d:48:c7:
                    85:a3:b8:d6:36:8f:40:ad:27:ff:47:00:24:31:48:
                    dd:12:d7:73:70:46:dd:ba:b4:03:2f:ce:3d:69:4c:
                    da:79:38:96:27:89:d1:fd:e6:36:17:b1:f0:4f:53:
                    99:7a:3b:2b:d0:0d:d7:16:f6:be:eb:c0:a3:fa:b2:
                    d4:07:ff:d0:02:69:bf:19:36:98:f7:81:ba:e7:4e:
                    6b:6f:12:e3:e5:6f:2f:60:55:c3:25:a2:28:b0:0f:
                    b6:cf:6c:28:7b:e0:57:64:70:c6:7c:f1:a2:e8:37:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F6:0C:9F:D9:AB:BE:9B:FF:E3:8B:3C:E6:0F:C8:2F:D9:ED:64:76
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:66:2d:de:da:a7:5c:b1:fd:30:1d:17:cf:39:1a:f4:f2:be:
         28:8e:8d:9a:7c:db:ac:ef:29:3d:b1:66:a6:53:a3:26:20:fd:
         40:8f:3f:a6:6f:fa:a5:3e:e6:b6:20:6e:70:82:35:2c:eb:ab:
         14:8f:db:0a:30:5b:cb:cd:48:03:7b:8f:9b:64:35:d6:f3:44:
         90:80:37:b4:00:15:37:7f:02:36:51:f8:1b:39:20:c1:32:14:
         43:60:17:3c:2a:9f:43:93:f8:c5:15:91:94:a8:d4:e0:b0:ba:
         8f:13:04:bf:9e:e8:86:24:8d:5f:25:48:66:1c:c5:df:ec:c1:
         e4:cc:82:4d:a3:d4:b1:ba:e1:a7:1b:0f:66:2d:ae:91:30:05:
         80:2e:ae:32:bb:1d:4d:b7:2e:38:4c:d7:ba:b2:ba:1c:be:ae:
         cf:ec:bb:59:af:23:e8:90:72:8d:79:b7:89:55:7c:8e:10:ad:
         8b:dd:50:b0:18:c1:c8:f9:5c:5d:67:a0:bd:64:08:05:c7:8d:
         59:1a:ae:84:93:41:87:53:e5:6c:f9:5e:44:1f:9d:89:b3:fa:
         c0:fb:95:e6:da:4e:31:63:b8:da:23:47:9d:07:28:f1:7d:b9:
         20:b0:e1:ba:c6:8f:6f:31:e0:a4:cb:b8:cd:a1:f4:e8:ae:f3:
         57:f8:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:33 2026 by rpki-client