Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          tZhjEMuzFdM8pydo56/KzZyg/HGtttZv/5mFPmgjpZE=
Subject key identifier:   0F:52:55:81:79:D5:83:47:33:FF:49:1A:01:BD:6F:BC:57:1F:FF:A8
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       0373F36401061951A0254743303DA496D53D4E2D
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:01 +0000
ROA not before:           Wed 18 Feb 2026 19:50:01 +0000
ROA not after:            Wed 17 Feb 2027 19:55:01 +0000
asID:                     52266
IP address blocks:        201.219.252.3/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:73:f3:64:01:06:19:51:a0:25:47:43:30:3d:a4:96:d5:3d:4e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:01 2026 GMT
            Not After : Feb 17 19:55:01 2027 GMT
        Subject: CN=0F52558179D5834733FF491A01BD6FBC571FFFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:79:10:fc:61:df:a6:19:2e:8c:95:5e:ca:
                    b7:bb:ec:5d:0c:37:b9:46:e0:48:aa:78:d7:40:0f:
                    8c:1f:2c:3a:eb:75:d2:22:5f:8d:b8:0a:51:a1:cf:
                    ad:17:6c:af:77:55:a6:2c:bb:8d:ed:44:c6:cd:da:
                    5e:c3:fe:fe:12:73:8f:83:fe:a0:e6:06:02:09:e9:
                    72:ac:c1:c8:95:be:2c:2f:8a:d6:c9:c2:32:e4:c3:
                    34:82:92:f2:bd:0a:66:da:7d:a1:90:71:87:d4:d6:
                    74:6e:69:45:2c:2b:eb:41:f9:31:7c:7e:b9:51:ac:
                    37:9f:ec:53:59:74:98:aa:4f:e2:ca:29:86:1f:79:
                    df:24:24:fd:c3:c8:49:3d:26:b9:77:fa:28:53:33:
                    ec:5b:d1:6f:4b:98:53:af:56:b4:83:70:2e:17:bc:
                    d5:3c:1f:68:44:dd:1c:6a:a0:fc:41:7c:ef:4c:38:
                    dd:99:fe:7e:ec:e7:26:d4:54:68:b9:6d:4c:5b:53:
                    a4:9e:72:2a:8b:0a:1f:28:77:72:69:8a:b3:6d:7a:
                    a0:a4:c9:5b:77:5e:53:97:8d:a8:40:7d:a3:2a:86:
                    b9:51:23:02:5a:aa:c6:b5:ee:1a:a1:49:47:8a:cf:
                    45:79:53:25:d1:17:fd:00:b4:d4:86:9f:b6:71:6f:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:52:55:81:79:D5:83:47:33:FF:49:1A:01:BD:6F:BC:57:1F:FF:A8
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e332f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.3/32

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:68:97:73:a7:00:be:6b:bb:20:a3:9d:d1:5b:62:53:a5:
         d3:1a:01:68:f8:96:97:fd:19:d0:ba:82:26:4f:01:be:31:de:
         c9:56:78:f1:99:e9:19:2f:6b:99:b4:92:7e:5f:ff:e1:51:ae:
         76:80:c3:be:27:c1:54:da:88:ee:e3:f3:25:c4:34:08:41:45:
         21:98:64:a8:49:e9:55:8d:62:77:c0:70:18:fc:25:d8:e7:76:
         68:cd:7c:c1:12:00:f0:77:4f:3f:cd:9b:13:8a:b5:12:26:a3:
         15:55:7a:62:68:2f:14:31:45:18:1a:08:66:64:a3:51:49:1a:
         a2:71:e2:09:86:80:07:0a:d2:24:09:ca:1e:60:79:31:26:68:
         60:ea:f9:33:5e:10:69:81:68:f4:a1:00:7c:79:c8:5f:99:04:
         45:97:39:02:cd:5e:e2:71:3f:83:56:d2:4f:08:f7:c5:92:30:
         66:f3:c1:64:f9:bd:03:4b:69:b9:9d:ca:c8:ae:e4:4e:bd:82:
         2b:fc:dc:5f:40:f6:4a:66:6a:9c:ee:9c:4a:1a:77:48:50:d4:
         a5:2b:b5:7e:fb:cd:37:e9:49:16:aa:ec:71:47:f4:f4:56:55:
         7a:b0:d5:09:8f:9b:db:fd:80:72:f5:6c:55:0e:13:d6:94:40:
         cf:d9:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:32 2026 by rpki-client