Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32332f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32332f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          DXdVmbPXIXAwIZTxbsPADKgRQR/cgomAvX36bqloESg=
Subject key identifier:   5C:65:7C:DB:D3:25:7E:E7:E3:40:55:B3:74:FB:F5:06:3F:DA:4B:40
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       1DF366B689F1501D1C1E1D566D222CCA3499096C
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32332f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:02 +0000
ROA not before:           Wed 18 Feb 2026 19:50:02 +0000
ROA not after:            Wed 17 Feb 2027 19:55:02 +0000
asID:                     52266
IP address blocks:        201.219.252.23/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f3:66:b6:89:f1:50:1d:1c:1e:1d:56:6d:22:2c:ca:34:99:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:02 2026 GMT
            Not After : Feb 17 19:55:02 2027 GMT
        Subject: CN=5C657CDBD3257EE7E34055B374FBF5063FDA4B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:c2:75:32:26:63:57:5b:74:b6:25:53:ce:
                    f4:53:dd:35:da:1b:f5:cd:46:3f:9d:db:22:cc:6c:
                    ee:33:1c:39:4d:1c:af:5e:ed:37:f9:9d:b5:99:45:
                    02:8f:75:fa:65:ef:f8:11:fe:d4:13:11:2d:0d:36:
                    bc:d3:0a:dc:49:80:93:14:79:3d:02:93:4c:a4:a3:
                    e3:5a:4c:d8:2b:88:a8:11:fc:e5:b0:e8:57:5f:3a:
                    66:62:3b:2e:6a:8b:8d:a8:39:0a:c3:d3:8a:4a:48:
                    75:2c:4f:f9:fe:52:4f:b5:f7:62:ed:b6:11:ce:fa:
                    06:ba:f4:06:ed:48:d4:08:05:55:c4:78:c0:99:7d:
                    a5:37:a0:16:36:10:3f:63:ef:59:7e:01:f1:2a:7d:
                    1f:4d:94:a5:a6:72:8c:c1:ad:2f:c1:0d:0d:fb:d4:
                    62:a4:76:c8:80:99:25:bf:72:72:52:8c:a9:38:55:
                    4d:6a:a4:16:2e:47:35:b2:f1:d1:52:47:97:c3:d4:
                    cf:2e:23:4f:92:4d:0d:a8:b6:bd:cb:1a:7f:da:fd:
                    38:18:a9:4d:49:e2:fe:b0:df:bc:b9:aa:06:f7:26:
                    52:c1:eb:e4:a2:d0:80:a9:2a:cc:04:c4:91:73:a3:
                    bf:e2:c7:99:e3:f0:a2:ac:48:30:e0:3b:4d:7b:6a:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:65:7C:DB:D3:25:7E:E7:E3:40:55:B3:74:FB:F5:06:3F:DA:4B:40
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32332f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.23/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:2a:b0:e1:71:cf:37:2e:fe:4c:58:57:e4:fe:07:ad:86:52:
         6d:21:2b:19:c1:d1:c6:df:dd:79:96:23:c7:ea:d8:b6:42:52:
         4b:83:e4:46:9c:a6:ed:89:a5:26:98:8c:7a:9e:6c:0b:d9:cc:
         a1:99:0a:d8:0b:56:45:8b:88:26:a1:0f:4b:24:00:20:10:16:
         c9:42:2c:26:13:3e:31:e3:11:45:26:4e:1f:17:f4:9c:a2:fb:
         16:c2:61:8f:7d:2b:95:ce:b8:42:61:df:e0:4d:67:d9:cb:05:
         83:bd:68:46:44:7b:35:7a:f6:f1:5b:33:73:00:be:e7:9a:64:
         08:63:58:09:7b:c0:6c:2b:d8:2a:fd:36:34:6d:7a:aa:69:e7:
         44:a4:46:01:2b:8f:9b:a4:65:4e:5f:45:96:d2:e4:f1:b1:eb:
         05:4a:3a:b4:e6:78:54:fc:30:8a:6c:fa:4e:97:4a:83:78:b3:
         ac:9a:a9:b9:8c:42:00:d6:f1:5b:56:f5:71:9d:d2:a9:e8:9e:
         25:e2:ad:b6:e7:da:0a:0a:14:14:d9:d5:2b:d2:89:b6:b0:93:
         8d:a0:7a:2d:e3:27:ab:40:f1:5f:52:94:ae:fb:fb:2a:66:09:
         50:e5:c3:15:89:82:5f:44:19:a6:f5:62:2b:a8:54:cd:70:2e:
         45:8c:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:50 2026 by rpki-client