Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34332f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34332f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          pnru1nKn0tpmeEfWYk/14jTDIe1kgKAq8DCEraJ/0FI=
Subject key identifier:   F0:AC:05:2D:3A:0B:10:F4:17:4C:30:05:52:D2:96:FB:66:09:62:28
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       32118170DC0665E7221D80CE3E1D8E7B2DACDD70
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34332f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:06 +0000
ROA not before:           Wed 18 Feb 2026 19:50:06 +0000
ROA not after:            Wed 17 Feb 2027 19:55:06 +0000
asID:                     52266
IP address blocks:        201.219.252.43/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:11:81:70:dc:06:65:e7:22:1d:80:ce:3e:1d:8e:7b:2d:ac:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:06 2026 GMT
            Not After : Feb 17 19:55:06 2027 GMT
        Subject: CN=F0AC052D3A0B10F4174C300552D296FB66096228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:36:53:85:d8:eb:7c:be:00:a2:e3:e0:fc:
                    89:d4:90:08:72:a5:c9:d7:81:94:1d:d1:e8:ae:2a:
                    19:42:b0:be:11:06:ed:5d:dd:59:f8:af:df:23:13:
                    ef:50:e0:93:0c:d2:d4:13:fc:cc:64:1a:f5:83:20:
                    64:27:91:f9:f9:ed:ad:58:9f:06:d5:9d:02:9c:d3:
                    44:35:ef:bb:77:41:6f:6e:ee:78:4f:0d:65:b6:cb:
                    81:c8:cb:03:02:23:05:6c:11:71:31:5c:fc:78:1a:
                    41:25:0a:c8:da:92:b6:f4:51:8a:3c:52:f3:f6:28:
                    1e:65:35:04:be:21:3b:db:9f:1b:63:59:96:47:04:
                    a9:bc:53:e2:82:1e:09:b6:72:3b:22:4c:29:56:5e:
                    90:84:4e:75:71:b6:96:f7:c1:0d:81:52:aa:c2:82:
                    3b:ce:72:3e:83:e5:13:e1:20:e0:82:2f:7a:a1:7b:
                    36:de:c2:2b:f6:43:69:ed:ed:9c:85:3d:6e:f6:3b:
                    25:7c:f3:b8:8c:a3:00:54:43:79:ec:d3:74:85:be:
                    36:cf:e9:52:ed:f6:c7:49:20:1f:d2:b5:fe:6f:1c:
                    f0:62:7d:bc:dc:ad:2b:84:2d:84:47:a8:d4:e1:a8:
                    66:c1:cf:53:40:d1:ec:17:9f:84:da:2e:51:d6:e1:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AC:05:2D:3A:0B:10:F4:17:4C:30:05:52:D2:96:FB:66:09:62:28
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34332f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.43/32

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:25:a8:31:35:06:a7:1b:0c:96:cd:8e:28:41:5b:54:15:
         45:7e:e3:9d:ab:40:a7:7a:dc:a5:72:29:b8:17:d4:db:7b:e7:
         de:0a:11:42:37:b2:dd:b2:69:0f:ea:f5:c3:34:99:24:23:f8:
         f3:cf:18:a6:f0:8d:db:ce:20:43:bf:c5:35:80:3c:ac:ca:be:
         52:26:26:a9:3c:9f:ee:12:d7:d6:d6:2b:49:fb:9e:3b:17:a1:
         e5:07:5c:79:38:22:13:1f:f5:cc:2c:9c:dc:78:68:1f:95:2e:
         c2:0a:54:a0:80:a0:7d:3b:be:69:e0:4a:04:49:d1:89:45:42:
         9d:1f:e5:b6:94:17:7f:7a:df:1d:b6:6c:d6:e2:90:ec:98:d0:
         5c:90:c1:74:08:9e:0f:29:01:42:f2:6e:d7:0c:b8:dd:ef:f8:
         05:4d:01:ce:fe:bb:0d:f7:c0:3c:19:06:76:e6:7d:16:c0:0c:
         7c:78:10:17:55:4d:e0:07:24:e7:ab:98:b1:e1:d6:7a:ea:57:
         ac:c6:db:d2:46:f2:7b:67:28:28:ea:81:25:4f:91:0e:44:53:
         28:06:b5:a4:50:a2:be:e9:dd:cb:a9:75:0c:d4:b8:2c:12:9d:
         ac:95:f4:36:be:53:03:73:a7:46:57:fc:a4:7c:f3:cd:26:e9:
         c1:2d:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:51 2026 by rpki-client