Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          aF8SH9HID5emIm+C5Mc764JgKXZLdFLkgKxlzhrAtWc=
Subject key identifier:   DC:54:17:B1:BE:C4:43:E9:91:D8:30:37:C3:C0:AD:56:69:20:F8:6C
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       2AE95DDF79884B067623282D688AEF0B9EAFCC90
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:06 +0000
ROA not before:           Wed 18 Feb 2026 19:50:06 +0000
ROA not after:            Wed 17 Feb 2027 19:55:06 +0000
asID:                     52266
IP address blocks:        201.219.252.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e9:5d:df:79:88:4b:06:76:23:28:2d:68:8a:ef:0b:9e:af:cc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:06 2026 GMT
            Not After : Feb 17 19:55:06 2027 GMT
        Subject: CN=DC5417B1BEC443E991D83037C3C0AD566920F86C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:5f:3f:29:20:47:14:d6:f6:82:d2:fd:4a:
                    6f:2b:a4:c2:3b:54:ec:7b:88:7c:c5:37:f7:59:fc:
                    83:1a:e8:4f:ad:00:b7:86:48:46:bc:cb:33:ff:57:
                    96:55:ec:e0:53:8e:41:5a:d4:dc:24:a5:5e:45:69:
                    70:88:43:22:fb:26:af:ab:0a:38:73:7c:7c:36:4f:
                    7e:62:9f:3e:38:f4:43:e1:b4:3d:91:0a:41:0a:f8:
                    81:48:e5:f1:02:08:78:e5:31:ea:74:9f:60:a8:23:
                    44:ab:ff:9f:50:1f:cc:b2:e8:a0:ac:91:2a:85:f5:
                    a8:b3:c2:92:85:5c:cb:4f:24:ff:20:b5:2d:be:cc:
                    48:0c:d5:cc:62:da:9e:5b:97:af:89:af:c5:7e:02:
                    e3:3e:4d:cf:a5:b1:57:60:9e:5c:48:69:e3:25:ec:
                    30:91:a7:7e:bb:11:87:37:5c:61:41:9f:7c:06:b8:
                    fb:6f:91:80:cb:34:f3:c7:fe:fb:7d:3e:b5:a7:52:
                    99:f0:a9:f8:a7:e2:ce:bc:bb:ba:3e:9a:d1:a4:62:
                    ed:73:18:f4:d8:f6:7f:2c:ac:53:9c:b9:33:53:8f:
                    3d:b4:5e:cd:fc:58:1a:92:7f:b7:f7:e2:19:90:d2:
                    61:dd:70:a1:6b:f5:10:91:9e:f5:57:2b:c2:eb:be:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:17:B1:BE:C4:43:E9:91:D8:30:37:C3:C0:AD:56:69:20:F8:6C
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33302f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.30/32

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:b0:c4:af:fa:5b:e1:39:e2:a0:b2:df:d7:e8:5b:21:c5:
         96:dc:a0:34:b3:3d:05:ce:e2:61:1b:c9:5e:02:dd:2b:f4:bd:
         a8:c3:c2:21:be:d9:31:05:e4:ef:8f:2d:f3:c6:62:b6:46:06:
         74:4f:c3:c0:7f:84:48:d0:01:01:a8:ef:19:08:34:f9:69:7a:
         5b:02:c5:ce:4e:be:4d:c4:b3:90:76:8a:8d:20:1a:71:12:11:
         10:15:c0:75:e9:94:29:a3:b4:65:18:e6:d8:5b:d7:56:5a:98:
         20:6b:c9:1f:cd:4c:72:a9:bc:1d:05:3a:35:b4:15:4a:a6:72:
         a5:95:cb:ef:7f:a5:bd:9d:96:7a:69:25:6d:74:2e:1e:1b:f5:
         9a:8c:09:46:af:a7:8e:ac:84:5d:dd:7f:d1:bf:64:09:87:41:
         59:3d:4f:93:b1:d4:8b:6c:24:de:f1:46:4d:78:07:1e:55:6f:
         c9:c1:05:6e:96:a8:82:12:9e:21:cc:be:87:a7:70:95:7e:ca:
         59:e7:07:36:e4:3a:6b:df:4c:b4:10:76:80:b6:bc:fe:b7:33:
         b7:3a:fb:9f:7b:83:d0:e8:7d:90:11:80:eb:67:da:6b:11:98:
         24:10:9f:a6:38:2b:e5:27:f9:06:58:bb:65:09:97:01:6f:ba:
         18:75:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:32 2026 by rpki-client