Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          kG4k0JD6I+N9XipYNCo/oVzf52L+HzMQ+FdbegWTveY=
Subject key identifier:   02:24:09:9C:44:38:7E:E7:97:FD:28:D3:69:0A:68:82:8B:7E:E4:E9
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       328186966CED0D2380DE375D77490E5AD644F4C9
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:14 +0000
ROA not before:           Wed 18 Feb 2026 19:50:14 +0000
ROA not after:            Wed 17 Feb 2027 19:55:14 +0000
asID:                     52266
IP address blocks:        201.219.252.29/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:81:86:96:6c:ed:0d:23:80:de:37:5d:77:49:0e:5a:d6:44:f4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:14 2026 GMT
            Not After : Feb 17 19:55:14 2027 GMT
        Subject: CN=0224099C44387EE797FD28D3690A68828B7EE4E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:be:6b:47:78:08:f9:56:a7:97:99:10:93:
                    ab:2a:23:97:84:9a:65:10:3b:3a:53:98:e0:48:59:
                    4a:d0:1a:c1:3a:42:92:fd:aa:69:e6:c1:6e:b5:24:
                    85:5c:57:75:73:48:b7:08:94:ae:b5:c0:fc:75:da:
                    8d:a7:2e:6e:ed:1b:53:52:42:06:4f:e0:3b:e4:4d:
                    50:c3:a9:93:93:12:da:7c:f1:58:b7:d0:71:b8:dc:
                    fa:34:8a:3d:bd:4e:a0:25:ce:09:37:55:ce:53:a1:
                    52:d2:e8:ca:14:27:2e:06:a1:11:e3:cc:10:2b:9b:
                    7a:a0:55:2f:2d:2d:d8:ce:af:84:5e:f8:ac:39:f2:
                    e2:d7:78:36:96:fd:9e:0d:54:03:e8:cc:e4:da:8a:
                    d7:a1:16:69:14:da:79:c8:9f:bd:27:25:e8:c4:b1:
                    91:7d:72:e0:79:8b:08:78:70:13:f2:9f:e3:fb:e6:
                    50:3b:85:68:03:32:e6:1d:24:ec:e6:6b:23:50:e9:
                    4c:ab:3d:fc:ac:86:52:06:00:72:19:36:4b:1e:b4:
                    c6:82:e7:ae:30:5d:27:9e:8d:ea:f1:37:c1:63:21:
                    4a:a2:b1:f2:f1:99:16:d6:6a:09:98:ee:4a:04:5f:
                    24:d9:4b:2b:24:a1:1d:1c:71:02:4c:6c:d3:1d:fc:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:24:09:9C:44:38:7E:E7:97:FD:28:D3:69:0A:68:82:8B:7E:E4:E9
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e32392f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.29/32

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:a1:d4:43:3b:3e:4f:1a:c3:b5:d3:5d:5b:1b:0d:b8:d4:
         d1:11:3f:5d:9b:3d:29:9b:c9:cd:95:4d:69:7b:80:93:09:69:
         a4:97:dc:14:ca:3b:62:39:f8:a8:3d:7d:05:89:47:87:f9:c0:
         7b:33:48:d0:ca:fc:13:a3:0a:6d:07:05:02:59:de:0a:1f:63:
         1a:a0:86:94:cc:12:6c:9c:16:8d:f7:1c:00:82:17:61:51:c0:
         6d:4f:43:10:5e:a8:6d:f2:4c:14:fb:a2:60:5d:15:59:cf:51:
         93:b9:fb:82:f9:59:27:f6:f3:27:60:cc:ff:4b:2a:47:cf:2c:
         82:be:87:61:01:3f:5e:06:97:25:96:d7:e3:7b:37:e1:48:dd:
         ac:f4:e0:bb:56:80:9d:c8:85:b9:87:49:14:1f:df:5b:2a:7c:
         0c:a7:ae:46:e3:5e:9d:6d:9c:b1:56:a7:52:77:8f:96:fc:0f:
         0b:5b:dc:ba:dd:e1:7e:82:3c:90:82:9f:66:35:dc:80:c5:4e:
         f9:28:74:ed:ba:cc:b1:9e:4b:ab:3e:d7:2f:18:8c:61:d1:ac:
         f7:cb:b7:76:4f:a9:2c:11:05:ee:6e:ff:40:6b:e4:f0:0c:1d:
         b7:01:0e:0f:4d:7a:23:73:d6:9c:8c:72:60:fd:40:5c:5f:7b:
         5f:f9:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:50 2026 by rpki-client