Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e322f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e322f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          5PFitH9muWoTLyXlxvfpmtjLsUqWp4GgZfl6S4yeizQ=
Subject key identifier:   8A:2A:80:E3:EB:A2:EE:3F:EF:36:AB:D6:00:06:BA:3E:9F:B3:FF:2C
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       5E3185F49943CDB7CA9927D9A9B45E9CA79C59FC
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e322f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:09 +0000
ROA not before:           Wed 18 Feb 2026 19:50:09 +0000
ROA not after:            Wed 17 Feb 2027 19:55:09 +0000
asID:                     52266
IP address blocks:        201.219.252.2/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:31:85:f4:99:43:cd:b7:ca:99:27:d9:a9:b4:5e:9c:a7:9c:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:09 2026 GMT
            Not After : Feb 17 19:55:09 2027 GMT
        Subject: CN=8A2A80E3EBA2EE3FEF36ABD60006BA3E9FB3FF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:c7:e5:ed:9a:36:70:dd:17:59:bb:c4:51:
                    81:5e:73:24:03:35:10:4a:f6:a3:ed:43:1e:d9:22:
                    e0:89:ed:2c:21:88:a4:61:a6:a2:15:dc:e3:9e:5a:
                    86:0c:87:68:fe:51:69:84:50:a6:14:8f:99:bd:7e:
                    b3:2e:22:6b:9f:c8:fe:0f:0f:c8:7f:52:cc:7c:89:
                    c8:c0:1b:5a:c9:88:0f:cb:64:27:d1:30:b4:45:76:
                    3b:6e:c5:36:34:e6:3a:ee:9c:24:70:89:d5:4f:c3:
                    09:79:76:cc:2f:87:87:7a:2e:4d:9e:14:b1:e6:94:
                    61:29:e7:d6:a6:28:2b:b1:8e:9d:b3:20:31:1f:7c:
                    e3:91:4f:d1:ce:f3:67:da:93:f9:db:a4:0a:cd:3e:
                    17:d6:a1:44:28:e7:13:25:c2:3d:fc:3e:68:51:6d:
                    23:67:89:7d:f3:d0:67:55:4d:dc:8e:fb:a7:85:ea:
                    92:db:0d:9f:36:51:c6:91:55:9e:47:f5:58:ed:de:
                    e7:2f:6c:ab:11:f0:02:10:06:81:da:af:10:43:63:
                    c7:2b:23:a1:79:78:79:52:d5:4e:2d:03:b0:8b:53:
                    86:58:fd:4d:30:d4:73:8e:ff:30:f0:b2:83:58:29:
                    8c:e2:c1:ca:3f:59:56:e6:2b:82:38:1e:2b:76:c7:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2A:80:E3:EB:A2:EE:3F:EF:36:AB:D6:00:06:BA:3E:9F:B3:FF:2C
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e322f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.2/32

    Signature Algorithm: sha256WithRSAEncryption
         88:2b:a6:cd:52:51:14:f0:a9:90:ec:40:8b:47:48:f1:bb:ef:
         43:13:96:b6:8c:51:0c:e7:4c:cc:5c:07:da:fc:bb:55:ef:8e:
         d1:43:d4:ea:12:bd:56:63:d6:a2:a8:64:77:2d:97:76:cb:d5:
         9b:bb:7a:be:69:32:c8:0d:91:27:31:4e:17:38:70:69:57:38:
         79:1a:d2:3f:77:c9:ae:67:09:c0:29:dd:94:71:98:c4:50:84:
         f5:2c:92:6c:15:0d:49:47:a2:80:fd:d5:8a:f1:0b:3a:d2:a3:
         9a:3b:5c:1d:b6:1e:3b:a6:3a:c5:6e:bc:e0:f9:e2:1c:c5:d5:
         8c:58:40:f9:b3:f5:c4:36:a2:6b:9c:ae:8f:16:be:c1:23:fc:
         72:bf:d7:ab:b8:ef:52:2a:6c:42:61:2a:d8:dc:56:c9:d5:fc:
         73:72:0f:3d:c0:bd:7e:02:23:04:8e:05:fc:2f:a4:17:fe:03:
         cd:ab:a0:03:18:d4:1d:63:43:1c:11:c7:04:97:90:6e:89:74:
         cd:dc:0d:d2:1c:09:1a:a2:9f:b1:bf:39:3b:06:85:30:98:fe:
         77:7d:93:82:73:28:ac:ca:df:85:45:88:fc:dc:0f:e8:57:3e:
         26:80:e8:0d:8d:9f:11:e2:c1:dc:2b:d9:fe:86:f5:0d:00:bd:
         04:1f:51:f0
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUXjGF9JlDzbfKmSfZqbRenKecWfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjAyMTgxOTUwMDlaFw0yNzAyMTcxOTU1MDlaMDMxMTAvBgNV
BAMTKDhBMkE4MEUzRUJBMkVFM0ZFRjM2QUJENjAwMDZCQTNFOUZCM0ZGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4esfl7Zo2cN0XWbvEUYFecyQD
NRBK9qPtQx7ZIuCJ7SwhiKRhpqIV3OOeWoYMh2j+UWmEUKYUj5m9frMuImufyP4P
D8h/Usx8icjAG1rJiA/LZCfRMLRFdjtuxTY05jrunCRwidVPwwl5dswvh4d6Lk2e
FLHmlGEp59amKCuxjp2zIDEffOORT9HO82fak/nbpArNPhfWoUQo5xMlwj38PmhR
bSNniX3z0GdVTdyO+6eF6pLbDZ82UcaRVZ5H9Vjt3ucvbKsR8AIQBoHarxBDY8cr
I6F5eHlS1U4tA7CLU4ZY/U0w1HOO/zDwsoNYKYziwco/WVbmK4I4Hit2x03HAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUiiqA4+ui7j/vNqvWAAa6Pp+z/ywwHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTMyMmYzMzMyMmQzMzMyMjAzZDNlMjAzNTMyMzIzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAydv8
AjANBgkqhkiG9w0BAQsFAAOCAQEAiCumzVJRFPCpkOxAi0dI8bvvQxOWtoxRDOdM
zFwH2vy7Ve+O0UPU6hK9VmPWoqhkdy2XdsvVm7t6vmkyyA2RJzFOFzhwaVc4eRrS
P3fJrmcJwCndlHGYxFCE9SySbBUNSUeigP3VivELOtKjmjtcHbYeO6Y6xW684Pni
HMXVjFhA+bP1xDaia5yujxa+wSP8cr/Xq7jvUipsQmEq2NxWydX8c3IPPcC9fgIj
BI4F/C+kF/4DzaugAxjUHWNDHBHHBJeQbol0zdwN0hwJGqKfsb85OwaFMJj+d32T
gnMorMrfhUWI/NwP6Fc+JoDoDY2fEeLB3CvZ/ob1DQC9BB9R8A==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:51 2026 by rpki-client