Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33362f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33362f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          7VZJXAyFcOnoMD040TzsTUD1COFnuccPKdTJXP3Rdx8=
Subject key identifier:   B7:5B:98:FE:06:BB:37:46:16:43:36:CA:60:C7:27:0E:02:2E:3C:74
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       3352182AFFF357B6F38DDA587BE08020D3D9A7DC
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33362f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:09 +0000
ROA not before:           Wed 18 Feb 2026 19:50:09 +0000
ROA not after:            Wed 17 Feb 2027 19:55:09 +0000
asID:                     52266
IP address blocks:        201.219.252.36/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:52:18:2a:ff:f3:57:b6:f3:8d:da:58:7b:e0:80:20:d3:d9:a7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:09 2026 GMT
            Not After : Feb 17 19:55:09 2027 GMT
        Subject: CN=B75B98FE06BB3746164336CA60C7270E022E3C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:c8:4f:ef:57:03:d2:a7:f0:db:ea:e5:cd:
                    24:88:94:fb:7b:33:9b:79:c6:16:28:8a:4c:57:ca:
                    f2:1b:19:ac:2c:58:d2:d4:5a:6f:a6:9a:2c:20:fe:
                    2d:a1:a7:26:36:bc:27:85:35:d0:40:16:4b:13:33:
                    ae:8d:59:3a:51:17:e6:13:31:e1:93:ed:5f:bb:89:
                    b2:04:27:25:a6:4a:90:e1:68:4f:e9:33:cc:e8:0c:
                    37:61:d6:56:3b:df:4f:db:ab:1b:1e:f6:37:55:d4:
                    dc:81:25:b7:d9:92:09:2d:a8:ad:c3:8c:16:cc:cc:
                    44:e8:8e:52:92:56:ab:b5:b2:e8:d0:92:f6:8e:e4:
                    41:f2:c8:e2:97:a2:2a:50:4d:e4:cc:65:04:d6:fd:
                    6f:e5:36:d0:a1:d1:97:58:10:df:0d:a6:32:63:af:
                    5c:46:4e:83:cb:ec:8a:8f:9d:1a:f0:15:aa:37:ee:
                    9e:9b:e9:95:db:f7:aa:73:65:ae:da:13:55:f7:b4:
                    62:e1:1b:4f:b0:9e:46:5c:31:0f:2f:c2:c5:e9:c2:
                    33:bc:3d:82:42:5e:89:4d:5f:6a:26:a5:e6:47:5b:
                    61:2e:75:aa:fc:cd:85:67:b5:02:a6:3e:50:1d:78:
                    80:f2:73:e9:b1:8d:d3:03:34:c7:c4:39:18:b9:33:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:98:FE:06:BB:37:46:16:43:36:CA:60:C7:27:0E:02:2E:3C:74
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33362f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.36/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:1a:94:b4:73:4d:78:28:de:33:c7:07:d2:79:96:a5:d4:
         03:93:17:e7:0a:d0:f9:e5:d9:73:36:fe:36:b0:66:24:ce:b0:
         73:ff:0c:22:5d:8c:60:25:6d:3b:66:ab:a1:4e:48:e7:fb:ed:
         ff:23:23:d1:c7:1b:30:a4:41:7a:e2:f0:cf:12:d0:1c:be:cb:
         df:da:39:87:55:d1:c8:fd:29:3b:f9:f6:9c:48:9d:e7:5e:54:
         9e:6d:b8:2e:15:71:13:ab:66:dc:43:76:06:cc:d4:32:1d:a6:
         12:77:e5:2e:63:35:0e:62:21:bd:24:22:82:cd:5e:04:33:22:
         f4:da:79:15:48:01:b7:cc:f6:7a:31:74:5b:21:95:86:12:30:
         72:d3:d6:49:2d:79:e2:04:cb:bf:5a:13:2b:35:03:df:90:ba:
         48:b3:18:af:ae:7c:1d:ea:df:c8:85:82:d0:c3:4d:a4:24:2e:
         dd:a2:02:ec:ec:20:b2:13:7c:5e:3a:11:94:6d:25:e7:7c:11:
         77:89:90:e5:b1:be:dc:a8:06:65:77:1c:31:c0:94:51:35:8e:
         fd:7f:22:f0:a4:11:1b:69:f9:e7:db:23:0c:41:95:1c:ed:19:
         40:09:7c:54:db:29:b3:e6:69:77:ef:ae:4e:39:dd:1c:47:28:
         0f:b1:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:31 2026 by rpki-client