Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32362f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32362f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          dBqEjwHsp0j1gBZn4NQo7MAzQrVfZvbKMWLSrLOX8vY=
Subject key identifier:   A6:DF:CF:9B:38:63:E0:5B:67:86:89:E0:B3:00:4A:B3:79:C8:55:AF
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       2DCAB260D1972A13DD0CE69B6108DAB8608562BD
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32362f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:08 +0000
ROA not before:           Wed 18 Feb 2026 19:50:08 +0000
ROA not after:            Wed 17 Feb 2027 19:55:08 +0000
asID:                     52266
IP address blocks:        201.219.252.26/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ca:b2:60:d1:97:2a:13:dd:0c:e6:9b:61:08:da:b8:60:85:62:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:08 2026 GMT
            Not After : Feb 17 19:55:08 2027 GMT
        Subject: CN=A6DFCF9B3863E05B678689E0B3004AB379C855AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7a:3f:a9:6a:74:13:fd:a0:cb:c2:04:66:5c:
                    c7:a2:8a:9b:04:af:63:8a:e8:ef:35:3c:e0:d7:5c:
                    72:90:3c:71:86:18:9d:4d:1b:b0:02:0b:7d:ca:b4:
                    24:d3:b6:35:10:bc:3e:7e:37:8e:58:04:98:2c:d3:
                    28:b5:75:89:b9:44:58:4e:fe:5d:1d:69:af:be:62:
                    a2:b1:48:cd:55:10:6e:70:29:1c:58:af:95:9f:48:
                    8f:87:bf:71:83:b0:97:e9:02:24:6e:9f:bc:8d:95:
                    b9:4a:0a:11:93:50:c4:40:65:b4:c6:e7:13:90:a0:
                    2f:f2:5a:49:92:57:bb:ad:21:0a:a6:64:d1:d5:3b:
                    00:92:0a:dc:91:5e:a3:77:cc:c2:2e:12:b4:8b:3a:
                    1f:9a:b5:6e:10:5b:8e:3e:a0:f0:09:24:be:ea:bb:
                    04:27:6b:2c:31:e1:b8:90:ae:8f:28:dc:4f:6b:7b:
                    f0:2b:cb:f9:28:b6:b8:50:07:dc:b0:7d:73:1e:c6:
                    d6:44:87:46:de:99:e0:20:b8:e4:b4:32:b4:83:a2:
                    b0:5e:48:91:5e:51:c4:4c:f9:73:38:52:2b:c9:c4:
                    75:58:86:fb:e4:77:80:eb:75:57:c7:f7:82:31:eb:
                    77:0b:70:7c:b7:15:7b:db:a2:cf:8e:43:b0:b7:cc:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:CF:9B:38:63:E0:5B:67:86:89:E0:B3:00:4A:B3:79:C8:55:AF
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32362f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.26/32

    Signature Algorithm: sha256WithRSAEncryption
         14:9d:e7:0d:e9:88:e0:88:74:3f:ee:cf:6c:c2:a5:f7:58:61:
         30:8d:6a:b8:61:dd:cd:b9:ce:20:28:5c:74:ff:bd:5d:95:22:
         96:89:7d:f4:11:0d:a7:72:90:6e:5f:b0:25:3a:50:fd:6c:21:
         a8:b6:21:3a:4d:9a:04:ec:3c:22:64:56:a0:6b:62:19:cd:63:
         c9:cc:33:ea:61:00:eb:cd:e2:dc:91:39:33:90:5c:52:04:18:
         c8:78:65:26:bf:3b:b8:f8:6e:78:05:8b:bc:01:ce:3d:8e:0b:
         7e:a5:cd:2a:08:1b:fd:81:6d:05:d5:52:43:41:f1:b8:40:2a:
         b9:6f:e2:38:59:e1:56:92:19:07:91:d2:23:b0:cf:a5:63:d5:
         41:8d:9a:d0:69:81:28:b2:99:91:95:da:10:57:a4:f2:db:e3:
         1f:4a:3c:cd:af:89:64:95:5e:8c:63:19:b0:5c:3b:e3:40:71:
         be:35:cb:f2:dd:5a:59:7a:f7:f3:1c:57:e3:8f:9b:48:c1:05:
         87:a5:b3:65:df:ea:07:ed:45:1c:9b:86:fb:79:8e:ac:cb:e1:
         3e:1e:79:78:b7:10:51:20:19:c8:dc:5c:3e:ad:c6:cd:bc:34:
         7d:ac:83:a7:21:65:26:24:f6:f1:58:73:42:2f:f9:52:71:b6:
         33:51:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:48 2026 by rpki-client