Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          rnWF7DfE2dn2rnlPP9tBIzM7mOLuwDj97uxluTyrkgg=
Subject key identifier:   38:5C:BC:0F:61:70:1F:F2:FC:19:4E:1F:F1:E5:72:6D:99:E8:61:C0
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       76882202132438F5D0BBD1F0CA74E55D9D409A8E
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:08 +0000
ROA not before:           Wed 18 Feb 2026 19:50:08 +0000
ROA not after:            Wed 17 Feb 2027 19:55:08 +0000
asID:                     52266
IP address blocks:        201.219.252.16/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:88:22:02:13:24:38:f5:d0:bb:d1:f0:ca:74:e5:5d:9d:40:9a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:08 2026 GMT
            Not After : Feb 17 19:55:08 2027 GMT
        Subject: CN=385CBC0F61701FF2FC194E1FF1E5726D99E861C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:91:33:19:c9:b3:33:ea:c7:e0:02:b1:4b:
                    86:3d:5c:9a:40:fd:fd:99:79:20:e3:0a:fc:33:d1:
                    ac:0e:08:15:c1:e3:ff:86:dc:04:50:50:6e:af:a8:
                    eb:a7:c0:9a:13:bb:c0:dc:cb:fd:e9:5b:88:2f:66:
                    42:e4:24:a7:1a:bd:b4:1f:25:14:2d:d4:bd:d4:d6:
                    eb:d7:6c:09:62:91:30:79:bb:80:78:56:f1:1d:ee:
                    86:21:61:d1:2a:59:e3:47:52:27:d8:a9:ad:b2:25:
                    7e:8a:56:21:02:29:40:41:db:33:a8:c3:51:05:4f:
                    08:b0:9b:9e:e4:90:ea:ee:43:04:13:1e:cb:51:70:
                    37:a6:08:5c:60:c4:a4:de:99:7a:30:ed:4c:24:f9:
                    eb:2c:22:3b:ce:37:9b:c6:a8:c6:88:cd:04:48:b7:
                    13:0c:05:7b:fb:eb:e1:30:e9:3b:53:68:c7:20:b9:
                    ec:6b:18:26:d2:12:af:2e:9c:3c:cd:be:08:eb:d9:
                    47:e3:e8:85:eb:33:7e:d0:89:28:d6:7c:a8:9e:ab:
                    cb:97:b8:02:22:e0:d0:54:a0:54:a8:a2:f0:59:de:
                    42:8b:00:32:c4:2e:24:83:0e:42:8c:b9:18:c8:be:
                    5b:ca:9c:71:ba:a8:60:74:02:cf:cd:fb:73:7a:66:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5C:BC:0F:61:70:1F:F2:FC:19:4E:1F:F1:E5:72:6D:99:E8:61:C0
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31362f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.16/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:03:8e:08:41:1a:f2:ce:71:ef:cb:1e:8b:9b:3e:0a:63:
         a4:23:a9:e2:61:41:1a:31:09:1b:49:84:77:32:92:63:5f:fd:
         7a:58:12:9f:52:02:2e:e3:22:58:21:02:39:88:8c:9b:d5:a0:
         4c:f2:06:58:22:f9:bb:f2:d1:19:b7:ae:bc:0b:43:5e:bc:ba:
         29:59:a9:6a:de:e9:c3:2d:17:a8:08:c8:31:25:f3:bd:79:ec:
         c1:cd:fc:fa:21:ca:cd:dd:bd:95:08:6e:4e:86:18:51:4e:b8:
         46:cb:61:6d:6f:91:8e:1f:95:fa:7b:23:2f:5f:07:04:16:42:
         30:5c:5e:c5:17:09:e9:06:a8:10:44:54:da:2d:08:ce:21:58:
         0d:85:d1:63:b8:ac:89:36:a0:fc:b9:ec:cc:a6:44:98:24:ee:
         9e:fe:22:68:27:72:fc:13:98:c1:30:83:e7:6b:94:84:56:91:
         af:dd:da:bb:13:2b:e4:75:1b:24:93:1b:a3:ef:ff:45:09:1e:
         2f:78:de:20:64:8a:ec:dc:8c:37:ae:9c:fd:06:c9:84:84:c5:
         ca:bf:f3:f8:84:4c:44:a3:88:33:33:07:9e:2c:5a:d1:eb:f1:
         1f:09:7c:49:60:f2:5a:8e:8b:2b:ef:fe:3a:5f:4a:c6:cd:72:
         5f:ec:68:1d
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUdogiAhMkOPXQu9HwynTlXZ1Amo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjAyMTgxOTUwMDhaFw0yNzAyMTcxOTU1MDhaMDMxMTAvBgNV
BAMTKDM4NUNCQzBGNjE3MDFGRjJGQzE5NEUxRkYxRTU3MjZEOTlFODYxQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKJEzGcmzM+rH4AKxS4Y9XJpA
/f2ZeSDjCvwz0awOCBXB4/+G3ARQUG6vqOunwJoTu8Dcy/3pW4gvZkLkJKcavbQf
JRQt1L3U1uvXbAlikTB5u4B4VvEd7oYhYdEqWeNHUifYqa2yJX6KViECKUBB2zOo
w1EFTwiwm57kkOruQwQTHstRcDemCFxgxKTemXow7Uwk+essIjvON5vGqMaIzQRI
txMMBXv76+Ew6TtTaMcguexrGCbSEq8unDzNvgjr2Ufj6IXrM37QiSjWfKieq8uX
uAIi4NBUoFSoovBZ3kKLADLELiSDDkKMuRjIvlvKnHG6qGB0As/N+3N6ZnfzAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUOFy8D2FwH/L8GU4f8eVybZnoYcAwHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMxMzYyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wQMA0GCSqGSIb3DQEBCwUAA4IBAQACyAOOCEEa8s5x78sei5s+CmOkI6niYUEa
MQkbSYR3MpJjX/16WBKfUgIu4yJYIQI5iIyb1aBM8gZYIvm78tEZt668C0NevLop
Walq3unDLReoCMgxJfO9eezBzfz6IcrN3b2VCG5OhhhRTrhGy2Ftb5GOH5X6eyMv
XwcEFkIwXF7FFwnpBqgQRFTaLQjOIVgNhdFjuKyJNqD8uezMpkSYJO6e/iJoJ3L8
E5jBMIPna5SEVpGv3dq7EyvkdRskkxuj7/9FCR4veN4gZIrs3Iw3rpz9BsmEhMXK
v/P4hExEo4gzMweeLFrR6/EfCXxJYPJajosr7/46X0rGzXJf7Ggd
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:49 2026 by rpki-client