Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31382f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e31382f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          Bd1MCtWUvgD8euamQULMri+NklI1KF1IzqsiKLLYN1s=
Subject key identifier:   52:06:05:E6:98:32:03:06:78:6E:36:A0:B5:9B:FE:DF:CD:68:6C:42
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       698B81B962031DF570D40E4B23F4FF9CAAE4F3E8
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31382f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:06 +0000
ROA not before:           Wed 18 Feb 2026 19:50:06 +0000
ROA not after:            Wed 17 Feb 2027 19:55:06 +0000
asID:                     52266
IP address blocks:        201.219.252.18/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8b:81:b9:62:03:1d:f5:70:d4:0e:4b:23:f4:ff:9c:aa:e4:f3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:06 2026 GMT
            Not After : Feb 17 19:55:06 2027 GMT
        Subject: CN=520605E698320306786E36A0B59BFEDFCD686C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:ff:95:a7:2f:d9:29:7f:18:c9:8a:68:26:
                    a8:ca:79:ce:80:21:7c:54:2a:e9:26:ad:fc:b0:7b:
                    af:5b:27:c2:4d:04:b8:2f:71:cc:77:10:26:75:8f:
                    78:9a:f3:09:f4:87:13:4d:55:58:aa:23:e8:3e:8f:
                    58:64:5f:9f:63:55:3c:d6:c8:c4:53:a1:25:73:4f:
                    fc:e5:ca:49:1b:a1:82:55:dd:89:f2:0c:60:29:c5:
                    fc:bb:62:ad:e0:c2:9b:0f:c8:bf:02:50:8c:7e:a7:
                    c7:96:b2:4d:3f:2b:56:5a:48:f6:bf:1f:79:70:d6:
                    48:42:de:04:8b:cc:7e:ba:f1:d0:9a:dc:b9:2f:69:
                    90:4e:15:97:05:dc:26:57:f0:4a:bf:af:b1:12:17:
                    ab:48:2c:7b:29:30:8a:74:34:a4:17:c8:28:0d:1e:
                    a8:6a:10:f9:64:6a:25:8f:cf:26:32:fa:84:01:7b:
                    d0:d8:29:1b:bd:56:21:c8:09:28:1c:47:b5:7d:90:
                    8f:42:e7:be:ff:8c:86:32:72:ab:d1:b8:8a:08:c5:
                    fc:20:f6:4b:e4:92:ca:a4:f0:98:2f:36:6f:ec:b1:
                    03:e7:f2:26:9f:96:45:0c:df:3a:7a:d9:e9:84:ad:
                    a4:0d:c1:4b:05:48:c4:91:b0:2e:ad:de:79:89:cb:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:06:05:E6:98:32:03:06:78:6E:36:A0:B5:9B:FE:DF:CD:68:6C:42
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e31382f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.18/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:b7:ca:5c:aa:7c:49:22:a2:7c:8e:62:fe:50:c5:a6:9c:b3:
         84:20:a1:01:06:ec:ca:f9:66:34:73:db:9c:91:31:6f:34:ab:
         df:10:8e:6a:d5:02:fa:05:b1:2e:ff:de:dc:66:6a:ed:3b:b0:
         8e:59:80:84:c9:a9:4c:60:2f:02:a5:c6:59:7e:05:7a:b2:cf:
         1c:f7:3a:67:92:76:b7:26:25:57:f6:c7:5e:03:eb:10:16:8d:
         bc:b2:dc:3b:92:93:95:37:dd:f3:f6:0f:84:bd:f4:86:e8:49:
         fc:6c:45:c8:f5:47:51:0b:d8:b7:31:66:67:3a:52:84:31:6d:
         e0:aa:30:e7:b1:82:8c:94:87:8d:b6:7b:37:33:9f:8a:c5:94:
         11:aa:66:c6:bc:fd:3c:37:7b:f0:84:bd:87:3d:00:7a:66:81:
         38:f2:5a:d0:04:c4:3a:71:05:c0:12:26:20:ad:9b:af:b6:12:
         bf:7a:b0:08:7c:87:61:28:b6:f6:f6:b2:74:87:cb:88:df:fc:
         8f:03:f9:09:b8:41:06:e1:f0:61:9a:f0:b3:8f:05:a0:6b:bc:
         ba:6d:3d:70:ae:7a:0a:14:83:16:40:12:f2:6d:75:7d:c7:3f:
         4c:5d:05:75:83:f2:b5:ac:16:3e:50:72:c0:e9:21:08:f9:0c:
         26:54:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:50 2026 by rpki-client