Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34352f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34352f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          RYfvVqlAbdUJGz0LfYF7PC9cgeIO2FrNvOHNjKrSVIQ=
Subject key identifier:   4D:ED:F1:30:AD:9B:60:D0:D4:E4:F1:97:54:B8:53:CE:D0:C3:53:1A
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       578519E024F9FA0E129BCEFDA54B89CC7F815309
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34352f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:17 +0000
ROA not before:           Wed 18 Feb 2026 19:50:17 +0000
ROA not after:            Wed 17 Feb 2027 19:55:17 +0000
asID:                     52266
IP address blocks:        201.219.252.45/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:19:e0:24:f9:fa:0e:12:9b:ce:fd:a5:4b:89:cc:7f:81:53:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:17 2026 GMT
            Not After : Feb 17 19:55:17 2027 GMT
        Subject: CN=4DEDF130AD9B60D0D4E4F19754B853CED0C3531A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e7:a4:08:7a:7e:68:c9:b8:21:f2:f2:f2:b8:
                    fb:bf:a9:52:85:44:00:9c:ea:97:e9:07:4a:a8:f6:
                    64:9d:c2:3d:ba:51:56:6e:9a:20:a6:dc:40:cc:d7:
                    ec:eb:31:32:05:96:0a:3a:cf:3f:f1:be:a0:79:6e:
                    18:56:c0:6d:45:8c:f2:21:56:78:93:af:ac:d8:f7:
                    3c:ee:07:5a:d8:80:32:1c:b9:4e:06:04:46:6a:6f:
                    f9:10:60:0d:72:1f:4d:c7:cb:62:bf:37:2d:6f:52:
                    f2:4b:82:c0:1a:39:bc:ab:f3:f0:07:bb:97:79:f1:
                    b2:fb:97:09:b3:9a:9b:fc:bc:fe:fb:ff:27:5b:01:
                    b0:8a:29:0e:f7:17:80:6e:dc:39:5a:0a:75:1d:df:
                    74:5e:9a:01:1b:82:f1:63:d8:fa:09:54:aa:79:25:
                    01:cd:9d:4a:8d:f0:df:22:a3:8c:e6:7c:b5:63:79:
                    b1:6a:f3:cd:a9:82:7b:39:ca:60:8f:75:7c:f9:46:
                    d1:15:42:53:0b:52:ab:60:b3:68:67:42:4c:e5:f7:
                    ca:a9:83:99:ae:a8:6d:99:0b:1f:76:4e:7f:6a:df:
                    3e:86:38:29:94:a8:8a:e2:da:13:7c:e4:25:4a:18:
                    64:dc:17:0c:fd:46:5b:c6:7f:cb:22:03:08:dd:e6:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:F1:30:AD:9B:60:D0:D4:E4:F1:97:54:B8:53:CE:D0:C3:53:1A
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34352f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.45/32

    Signature Algorithm: sha256WithRSAEncryption
         67:80:3c:48:bf:f1:d3:a7:ce:86:15:80:9d:80:ae:9c:d4:65:
         5e:6b:f0:d7:e3:c1:24:49:b6:30:bb:91:3f:f8:3d:12:77:a8:
         35:db:42:e0:bf:32:fa:12:a2:a2:a5:09:89:3e:ff:9f:86:2e:
         74:43:34:2b:d1:32:d8:6a:e9:c0:94:86:e7:b0:d1:ed:ac:9b:
         d6:65:bf:43:21:ab:a9:cb:2b:8b:61:cc:30:08:ca:ce:f6:66:
         19:28:82:63:e0:e7:1f:65:b5:85:a6:3f:2b:b1:6f:53:96:79:
         a2:82:5f:cb:db:a1:85:38:20:95:2a:83:bd:eb:7c:c0:e6:7a:
         90:27:53:55:77:e8:67:5d:3e:49:91:5a:78:ad:e3:fc:c2:0f:
         61:27:37:7f:6c:36:80:5f:88:20:71:1c:80:ec:f8:90:4a:63:
         8d:97:f6:7e:d9:cb:fd:01:d3:91:52:ad:95:a3:94:e1:0e:5e:
         31:74:20:32:7e:bb:42:12:ba:ca:7b:32:48:0b:fd:9f:82:09:
         3a:41:e0:dd:ae:23:da:f9:1f:07:dc:2a:b9:fd:46:3c:92:85:
         de:c0:4d:c8:65:f2:fc:13:aa:47:f0:8d:93:81:86:50:fe:65:
         62:f1:03:89:7f:0d:90:95:8b:73:ac:93:b6:97:fc:3f:14:4a:
         82:53:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:30 2026 by rpki-client