Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31322f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e31322f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          x4dbwpCAPDnot+2A12mjnapI7sj+6UcevyUTLV8Ddm0=
Subject key identifier:   CB:49:E3:17:AC:05:EF:3C:41:2D:23:75:84:A2:7D:06:A6:3A:6A:F8
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       06AB46D001679D7FA2E7EFBB8C028176EB5844D5
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31322f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:00 +0000
ROA not before:           Wed 18 Feb 2026 19:50:00 +0000
ROA not after:            Wed 17 Feb 2027 19:55:00 +0000
asID:                     52266
IP address blocks:        201.219.252.12/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ab:46:d0:01:67:9d:7f:a2:e7:ef:bb:8c:02:81:76:eb:58:44:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:00 2026 GMT
            Not After : Feb 17 19:55:00 2027 GMT
        Subject: CN=CB49E317AC05EF3C412D237584A27D06A63A6AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:a4:6a:52:e5:a0:9e:a5:3a:c3:29:c9:ce:
                    cf:6f:b6:6d:f2:cf:6d:d1:0b:8b:d6:7f:84:05:5b:
                    c7:13:f7:f9:8e:07:96:f1:23:41:c5:26:ed:66:e7:
                    4e:b8:60:22:11:c4:f2:1d:48:10:e5:ff:c0:ef:55:
                    32:5e:91:fd:43:33:75:08:17:1b:6d:1b:bd:fe:55:
                    82:60:f3:ba:8e:49:ae:85:de:0f:e4:4a:8e:bc:c8:
                    fd:53:ec:47:ad:38:33:54:c1:b2:ea:d7:16:1b:e9:
                    ae:51:28:0f:11:6e:e7:5a:4d:b0:a3:29:1f:da:85:
                    6c:7e:4f:d8:88:98:d8:ec:3a:23:cc:c8:9f:dc:89:
                    6f:4a:57:07:6b:f4:78:43:e7:c9:23:89:bb:5b:49:
                    5c:dd:6b:a0:1b:ad:1e:35:d6:47:70:7f:a0:75:06:
                    32:f3:66:44:31:6f:03:6b:7e:03:bc:03:3d:eb:22:
                    b4:f7:7b:4e:7f:bf:0b:c3:f3:4f:16:40:dd:9d:88:
                    43:06:3c:a8:36:8c:3f:c4:e9:00:4b:2a:52:b6:a6:
                    69:d0:61:70:ae:42:86:3e:34:8e:44:41:43:51:f0:
                    47:93:67:3c:9f:c3:82:e7:e7:ab:f5:be:d5:05:de:
                    94:7f:14:75:70:48:2a:f7:3b:c2:2f:0d:54:5a:fe:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:49:E3:17:AC:05:EF:3C:41:2D:23:75:84:A2:7D:06:A6:3A:6A:F8
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31322f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.12/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:ba:01:a7:aa:12:5c:f3:44:ae:4d:b5:dd:31:2e:d7:bb:
         46:73:0d:e7:ee:8b:32:92:b3:19:df:f4:0b:12:9b:2f:7f:93:
         4f:a3:2c:c7:90:85:18:c4:70:cf:92:43:5a:b0:3c:30:4a:63:
         65:34:32:d6:0e:f3:ac:77:c1:b3:9b:60:47:87:64:8e:82:cc:
         c7:22:10:80:f2:c2:c9:9a:30:9c:c4:af:02:fd:34:15:6f:bb:
         36:fe:2d:00:50:32:c7:39:bf:13:73:f0:41:e7:53:2e:b8:33:
         b3:5d:7b:6f:2a:4f:6d:51:ab:d3:da:6e:96:bc:8d:a0:32:5f:
         f8:ae:67:a4:76:40:1a:2b:02:ee:7f:6a:19:d3:e4:b4:1e:27:
         9d:cb:94:df:65:e0:db:01:bd:a7:37:33:b3:88:23:f2:64:33:
         60:e2:f7:e7:c6:da:42:ea:1e:a2:9a:d8:b3:f2:8f:3c:09:01:
         89:0d:ca:0f:dc:2a:80:e9:48:38:29:2a:ac:87:89:ff:ee:7e:
         5c:19:e3:79:91:15:3b:b8:98:3c:c3:5c:00:5b:40:c0:75:3d:
         87:39:73:b1:52:63:ca:e8:de:19:fc:a4:da:29:da:cb:a7:3a:
         9c:95:29:d6:1f:92:17:ec:45:32:ee:5e:6a:0e:e8:4b:d9:e0:
         9d:28:40:96
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUBqtG0AFnnX+i5++7jAKBdutYRNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjAyMTgxOTUwMDBaFw0yNzAyMTcxOTU1MDBaMDMxMTAvBgNV
BAMTKENCNDlFMzE3QUMwNUVGM0M0MTJEMjM3NTg0QTI3RDA2QTYzQTZBRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDqRqUuWgnqU6wynJzs9vtm3y
z23RC4vWf4QFW8cT9/mOB5bxI0HFJu1m5064YCIRxPIdSBDl/8DvVTJekf1DM3UI
FxttG73+VYJg87qOSa6F3g/kSo68yP1T7EetODNUwbLq1xYb6a5RKA8RbudaTbCj
KR/ahWx+T9iImNjsOiPMyJ/ciW9KVwdr9HhD58kjibtbSVzda6AbrR411kdwf6B1
BjLzZkQxbwNrfgO8Az3rIrT3e05/vwvD808WQN2diEMGPKg2jD/E6QBLKlK2pmnQ
YXCuQoY+NI5EQUNR8EeTZzyfw4Ln56v1vtUF3pR/FHVwSCr3O8IvDVRa/iNtAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUy0njF6wF7zxBLSN1hKJ9BqY6avgwHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMxMzIyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wMMA0GCSqGSIb3DQEBCwUAA4IBAQBqBroBp6oSXPNErk213TEu17tGcw3n7osy
krMZ3/QLEpsvf5NPoyzHkIUYxHDPkkNasDwwSmNlNDLWDvOsd8Gzm2BHh2SOgszH
IhCA8sLJmjCcxK8C/TQVb7s2/i0AUDLHOb8Tc/BB51MuuDOzXXtvKk9tUavT2m6W
vI2gMl/4rmekdkAaKwLuf2oZ0+S0Hiedy5TfZeDbAb2nNzOziCPyZDNg4vfnxtpC
6h6imtiz8o88CQGJDcoP3CqA6Ug4KSqsh4n/7n5cGeN5kRU7uJg8w1wAW0DAdT2H
OXOxUmPK6N4Z/KTaKdrLpzqclSnWH5IX7EUy7l5qDuhL2eCdKECW
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:49 2026 by rpki-client