Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31352f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e31352f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          vTnLh/DTYr/MlW6lUJsyTU5gVJjjRai48wx92In20oA=
Subject key identifier:   FA:0D:02:6F:45:AB:04:D5:C4:28:58:5B:CC:7F:04:9C:37:05:A0:8A
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       4D493B8F75972B874A75B4210D014F52C60C79DF
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31352f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:01 +0000
ROA not before:           Wed 18 Feb 2026 19:50:01 +0000
ROA not after:            Wed 17 Feb 2027 19:55:01 +0000
asID:                     52266
IP address blocks:        201.219.252.15/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:49:3b:8f:75:97:2b:87:4a:75:b4:21:0d:01:4f:52:c6:0c:79:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:01 2026 GMT
            Not After : Feb 17 19:55:01 2027 GMT
        Subject: CN=FA0D026F45AB04D5C428585BCC7F049C3705A08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bc:83:8b:cb:95:5e:8f:64:45:07:5e:1c:0b:
                    2b:60:0d:e4:b8:39:2b:e3:0a:ee:91:d1:58:b3:8a:
                    2b:f0:e0:49:30:15:f7:7f:65:94:64:4b:98:04:b0:
                    a7:5e:c5:1d:c0:b5:56:a6:d0:43:fd:b5:ae:4f:e1:
                    65:fd:83:6f:f6:69:59:a7:b1:a3:32:37:b7:7f:30:
                    c7:e2:ba:a7:6a:c9:c3:fa:28:02:3d:f2:90:fe:28:
                    de:fd:06:2f:01:77:f8:98:ed:7f:e7:5d:bc:d1:bc:
                    12:9f:88:4c:de:30:d5:7f:ca:5f:09:ab:c1:d2:85:
                    67:86:7b:e6:a8:aa:ae:3c:46:f0:6f:88:fa:a1:1b:
                    ed:9d:5e:a6:55:ef:f0:76:b9:38:08:38:94:2c:9d:
                    14:c3:ea:de:c4:2c:47:75:32:33:fc:86:3b:26:fc:
                    5f:85:3a:57:00:07:3c:13:59:e0:3c:4b:22:13:06:
                    83:11:46:4a:21:f8:d9:90:cd:a6:28:46:30:09:19:
                    63:31:7a:50:15:48:9d:df:a9:2e:d6:b9:9a:b2:72:
                    4b:44:ae:dd:ff:f0:c0:6c:be:40:24:1a:03:3c:59:
                    55:ba:c3:0a:b7:64:f3:dc:2d:71:1a:02:03:b3:bc:
                    e9:82:94:fb:a5:e6:60:c0:bb:9f:32:4d:d7:73:54:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:02:6F:45:AB:04:D5:C4:28:58:5B:CC:7F:04:9C:37:05:A0:8A
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31352f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.15/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:b1:aa:26:41:28:b4:1d:1f:6d:80:d9:d3:9f:22:16:95:08:
         32:85:95:16:6b:7e:71:d7:3c:b9:96:c8:5a:ee:e5:d2:78:60:
         bc:46:a7:de:75:3b:13:67:8b:18:09:4b:cb:38:da:2d:86:94:
         a5:cd:63:a3:f1:73:06:f4:ae:b1:01:51:49:a5:ab:d5:2f:f6:
         32:9c:04:40:85:3d:cb:c0:6f:28:b9:44:d6:bf:c3:e2:1f:19:
         37:c3:70:34:17:9e:84:82:f3:3d:e4:5a:20:57:d7:69:ff:e2:
         82:ec:3e:dd:24:80:d9:08:f4:44:9f:eb:49:d2:da:08:77:ee:
         46:1e:5e:6c:d1:20:f0:c0:93:85:cd:c3:34:42:cf:05:29:1d:
         18:0f:92:93:04:d4:5d:12:3a:da:a7:a7:c0:d2:3a:72:48:42:
         5b:84:1e:d3:e2:62:f1:f7:a0:3d:6c:a8:01:de:3c:51:d5:ee:
         03:8d:c7:f9:a7:7f:64:1a:33:4b:17:45:1a:2e:55:4c:69:4d:
         40:71:35:11:78:f0:81:24:e9:7b:49:80:39:32:79:e6:d0:58:
         f2:64:21:db:80:31:45:4f:89:48:b8:4c:be:de:bf:c5:20:48:
         20:ae:da:0f:57:9b:40:94:f0:6e:83:cb:00:a0:4b:ea:40:ee:
         eb:a9:3e:57
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUTUk7j3WXK4dKdbQhDQFPUsYMed8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjAyMTgxOTUwMDFaFw0yNzAyMTcxOTU1MDFaMDMxMTAvBgNV
BAMTKEZBMEQwMjZGNDVBQjA0RDVDNDI4NTg1QkNDN0YwNDlDMzcwNUEwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0vIOLy5Vej2RFB14cCytgDeS4
OSvjCu6R0Viziivw4EkwFfd/ZZRkS5gEsKdexR3AtVam0EP9ta5P4WX9g2/2aVmn
saMyN7d/MMfiuqdqycP6KAI98pD+KN79Bi8Bd/iY7X/nXbzRvBKfiEzeMNV/yl8J
q8HShWeGe+aoqq48RvBviPqhG+2dXqZV7/B2uTgIOJQsnRTD6t7ELEd1MjP8hjsm
/F+FOlcABzwTWeA8SyITBoMRRkoh+NmQzaYoRjAJGWMxelAVSJ3fqS7WuZqycktE
rt3/8MBsvkAkGgM8WVW6wwq3ZPPcLXEaAgOzvOmClPul5mDAu58yTddzVHPlAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU+g0Cb0WrBNXEKFhbzH8EnDcFoIowHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMxMzUyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wPMA0GCSqGSIb3DQEBCwUAA4IBAQDDsaomQSi0HR9tgNnTnyIWlQgyhZUWa35x
1zy5lsha7uXSeGC8RqfedTsTZ4sYCUvLONothpSlzWOj8XMG9K6xAVFJpavVL/Yy
nARAhT3LwG8ouUTWv8PiHxk3w3A0F56EgvM95FogV9dp/+KC7D7dJIDZCPREn+tJ
0toId+5GHl5s0SDwwJOFzcM0Qs8FKR0YD5KTBNRdEjrap6fA0jpySEJbhB7T4mLx
96A9bKgB3jxR1e4Djcf5p39kGjNLF0UaLlVMaU1AcTURePCBJOl7SYA5Mnnm0Fjy
ZCHbgDFFT4lIuEy+3r/FIEggrtoPV5tAlPBug8sAoEvqQO7rqT5X
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:50 2026 by rpki-client