Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e312f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e312f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          bHVC9sjS+8Ss2hNK+ylat5U4CWIhCsj0N4NVLfqcSlo=
Subject key identifier:   94:63:B8:88:9F:37:B4:4E:7E:01:7C:5B:23:99:9D:EE:C8:52:4B:B2
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       4EDA9A82C99D12A4F8B89473DF87DA36A4F62601
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e312f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:07 +0000
ROA not before:           Wed 18 Feb 2026 19:50:07 +0000
ROA not after:            Wed 17 Feb 2027 19:55:07 +0000
asID:                     52266
IP address blocks:        201.219.252.1/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:da:9a:82:c9:9d:12:a4:f8:b8:94:73:df:87:da:36:a4:f6:26:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:07 2026 GMT
            Not After : Feb 17 19:55:07 2027 GMT
        Subject: CN=9463B8889F37B44E7E017C5B23999DEEC8524BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:fd:eb:5b:cf:b7:3f:1b:6d:da:b4:3c:be:
                    08:01:09:1b:c3:ea:91:90:85:30:dc:ab:08:ce:ba:
                    42:64:32:4c:8b:d7:5a:cb:c5:35:05:3f:a4:8f:18:
                    ac:5f:45:12:b3:ab:9b:97:c1:16:ba:18:0d:ae:0c:
                    ef:4c:d8:a8:12:36:c9:94:52:f3:b1:af:8a:b3:2d:
                    b5:1d:26:63:56:b1:0a:13:85:ad:ac:c4:d1:7f:8d:
                    9e:c1:7f:1e:37:63:73:10:71:e2:29:43:75:f8:88:
                    a7:13:79:dc:38:9d:ab:92:b0:d6:93:09:11:44:3c:
                    97:74:a3:eb:75:7b:5a:28:22:e0:44:83:fe:58:5b:
                    c0:42:a9:f6:63:06:b8:d1:c6:6e:a4:68:92:d6:cc:
                    23:17:5e:da:27:e9:8e:28:ac:24:a2:21:21:e1:00:
                    82:41:69:af:b9:4d:63:b4:0c:23:8d:4b:94:77:48:
                    43:7b:42:82:2f:3e:d0:4e:00:d9:50:e8:65:6a:27:
                    cb:c4:06:6c:f9:c2:e9:3a:0d:d5:61:00:42:b1:6a:
                    fe:15:c3:d7:6c:2b:ab:15:18:71:60:bb:fb:88:6d:
                    2c:75:4b:82:0d:c9:61:b2:7c:02:22:e3:5e:ca:bc:
                    13:c8:ca:50:62:86:09:f3:75:94:da:83:32:90:d7:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:63:B8:88:9F:37:B4:4E:7E:01:7C:5B:23:99:9D:EE:C8:52:4B:B2
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e312f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.1/32

    Signature Algorithm: sha256WithRSAEncryption
         05:45:14:59:f6:b3:0d:be:13:f8:ee:d1:3e:70:36:bb:01:5c:
         a8:30:7e:dd:14:9b:de:08:b3:3f:b1:11:9b:e2:78:46:f6:5c:
         b9:6d:43:44:7b:f1:6c:c5:b0:bf:9c:04:26:29:80:5e:6a:58:
         77:bb:f6:10:66:3a:38:ee:3b:8b:e6:56:7b:5c:61:24:cb:3a:
         fb:34:82:fd:f7:32:36:ce:eb:8e:24:de:a0:d0:4f:e6:5d:87:
         fc:ea:ba:c3:33:41:0c:fa:db:7a:42:6f:71:31:29:5f:40:65:
         b9:c8:cc:a5:a6:4d:da:a3:ae:1e:50:c7:ad:ad:72:7e:55:d3:
         cd:a3:15:ce:51:2b:cf:48:cf:0c:c2:67:61:76:af:af:0a:12:
         c6:b8:a9:34:3a:1b:38:a6:76:0f:45:d8:68:94:7e:30:8a:31:
         16:df:d0:12:d9:62:98:25:d4:a3:04:91:6f:5f:cf:95:4f:e6:
         46:d2:0f:bc:ec:4b:ad:15:86:f0:00:79:58:f2:d8:ba:c0:50:
         c0:da:cd:42:fe:21:47:d6:6e:ec:a4:5b:c1:00:79:29:4f:0e:
         22:2a:32:8a:93:9d:c9:fb:aa:55:85:24:b7:d7:74:0f:32:25:
         d2:76:17:6e:34:80:94:5a:63:0a:81:e8:70:c8:74:51:c9:3c:
         96:18:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:32 2026 by rpki-client