Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33382f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e33382f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          NDza7tH85TyVBbrRyuTgkNDA4ZrD1z/Y2qZGObsYuyQ=
Subject key identifier:   34:AD:CB:70:0D:CC:7E:A2:D5:33:12:68:5E:84:59:93:6F:BB:67:DF
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       7174101BF1BDFF2E5DBC3818A9F8408BD823578F
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33382f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:08 +0000
ROA not before:           Wed 18 Feb 2026 19:50:08 +0000
ROA not after:            Wed 17 Feb 2027 19:55:08 +0000
asID:                     52266
IP address blocks:        201.219.252.38/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:74:10:1b:f1:bd:ff:2e:5d:bc:38:18:a9:f8:40:8b:d8:23:57:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:08 2026 GMT
            Not After : Feb 17 19:55:08 2027 GMT
        Subject: CN=34ADCB700DCC7EA2D53312685E8459936FBB67DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:d8:26:fb:15:89:a2:2d:67:04:b2:b7:7b:
                    52:a6:c0:0d:7a:28:b8:14:f1:8a:05:0d:4c:ad:0c:
                    f8:24:c5:09:46:bd:89:83:3b:e6:2e:06:06:73:c2:
                    5b:d1:53:be:21:31:07:ba:00:e6:a9:ef:44:a8:60:
                    98:3f:de:8c:19:98:1b:c5:fe:ac:df:0a:3b:fc:c4:
                    dd:d2:c8:b9:9e:c3:f7:bf:39:36:3b:2f:f1:99:0c:
                    a3:6b:1a:51:3c:65:00:f2:9d:da:a3:fb:73:d0:b3:
                    e2:79:6d:f0:8a:9d:f3:73:96:db:56:3d:3f:a5:f0:
                    e9:c2:f5:57:e6:14:b2:24:d8:58:83:73:dd:b0:60:
                    3e:67:5a:95:11:bd:e0:6a:c0:53:b6:55:5d:26:cb:
                    f0:91:69:95:00:a3:54:62:82:19:7d:cb:4e:00:b1:
                    92:fe:12:48:bf:f6:0b:75:94:c6:04:c1:b7:5f:06:
                    36:e8:2e:ca:a2:ba:1f:52:2c:db:93:d9:ab:a5:d2:
                    c0:23:b2:54:93:b0:41:e1:25:58:23:7f:7b:ef:05:
                    cd:4b:62:58:89:7a:4e:4e:b6:d5:d0:2c:1f:32:11:
                    ae:ed:fc:55:69:7f:ff:29:ef:0b:4a:79:31:45:93:
                    6e:a4:e1:52:dc:5e:39:6f:b1:17:ad:bf:84:cb:58:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AD:CB:70:0D:CC:7E:A2:D5:33:12:68:5E:84:59:93:6F:BB:67:DF
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e33382f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.38/32

    Signature Algorithm: sha256WithRSAEncryption
         71:09:be:83:10:ad:be:28:f8:29:87:4d:94:2f:69:04:05:b7:
         b2:39:68:91:fa:ed:5a:90:f5:b8:6a:4e:55:22:24:28:ea:d1:
         fa:3a:58:81:05:c0:d6:f0:c0:ee:4e:16:13:b5:f6:66:0b:32:
         f1:f2:7c:40:f7:06:da:1e:5d:7f:d6:2a:87:69:d6:8c:e3:d4:
         3b:62:b4:c1:3b:4a:16:8b:11:a6:6b:e2:b8:de:d0:65:88:fc:
         84:6a:21:48:78:36:c0:4b:c4:71:3d:28:0d:07:87:b4:4b:00:
         89:a7:db:23:3f:a4:a2:ce:39:e8:82:e5:1e:40:62:b3:7b:bf:
         2f:ba:b9:7d:5f:38:ca:0a:99:6d:24:84:13:60:d4:e8:a5:33:
         9c:0c:f9:70:ca:3c:d2:2d:cb:b0:f3:d3:14:fd:1c:3d:94:7f:
         63:af:52:07:1a:cc:e0:52:24:bc:16:39:12:43:51:ea:0c:b6:
         01:2a:3b:b6:d9:25:56:6a:ec:17:a4:fe:53:a6:33:85:82:45:
         91:5a:36:d1:df:5b:a9:ce:72:23:10:8a:dd:e1:0c:97:f3:82:
         69:d0:04:30:9d:5e:6b:a2:0d:2d:d1:4a:d6:88:89:a6:d4:98:
         ec:a4:73:70:70:2e:d1:95:b4:51:61:19:70:6b:b8:30:bd:61:
         40:67:00:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:49 2026 by rpki-client