Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          k2TNfVLpIKZ6nxtjO5yi7m6Uag5YwNOlA5G4TXKjBCk=
Subject key identifier:   DE:BE:AD:9E:03:AE:BD:A2:F1:B6:4A:DC:44:49:F2:BC:27:EA:C4:0C
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       580C7A1B4D09060082142DCA526C916461288C10
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:16 +0000
ROA not before:           Wed 18 Feb 2026 19:50:16 +0000
ROA not after:            Wed 17 Feb 2027 19:55:16 +0000
asID:                     52266
IP address blocks:        201.219.252.46/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0c:7a:1b:4d:09:06:00:82:14:2d:ca:52:6c:91:64:61:28:8c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:16 2026 GMT
            Not After : Feb 17 19:55:16 2027 GMT
        Subject: CN=DEBEAD9E03AEBDA2F1B64ADC4449F2BC27EAC40C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:e2:21:ee:ab:dc:27:83:fe:18:76:80:96:
                    c0:69:77:9f:c9:4a:33:2b:c5:4b:f2:b9:8c:7b:3d:
                    75:15:95:ee:96:6e:96:50:6d:e1:af:88:79:96:29:
                    ab:8c:74:70:d1:49:1c:b4:88:8d:b9:ea:67:c5:bd:
                    7e:39:ab:32:5b:6b:d1:7c:bf:3c:82:08:ac:7c:fd:
                    80:93:ca:00:5a:f9:9d:1c:9f:57:0b:8c:fa:fe:8f:
                    f2:81:62:c9:a1:2c:8c:71:f3:b7:e6:9a:91:c5:85:
                    f0:4c:50:14:18:46:75:d8:47:1b:19:4b:ae:b7:78:
                    39:12:59:3d:ae:0e:99:11:47:d2:06:d0:76:50:80:
                    65:57:1b:5d:c4:4c:ab:a3:03:7a:60:0c:dd:de:99:
                    d0:3c:0e:fe:77:4f:e1:20:10:1a:04:6d:1e:42:6e:
                    2b:ea:d4:b4:36:09:3c:4d:85:74:f3:27:fe:a5:23:
                    b5:3b:9b:5e:e1:2a:ff:cc:40:44:35:57:23:7f:15:
                    a8:f5:75:79:33:41:44:a4:4a:81:b3:17:c3:60:3e:
                    7c:40:9e:f3:65:8b:1a:4b:d8:cb:24:2a:18:d5:9c:
                    aa:f0:61:f7:9e:4e:ce:60:15:24:7d:38:6c:82:91:
                    32:8e:f0:ec:94:29:49:6b:d7:a3:aa:56:8c:5b:0d:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:AD:9E:03:AE:BD:A2:F1:B6:4A:DC:44:49:F2:BC:27:EA:C4:0C
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34362f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.46/32

    Signature Algorithm: sha256WithRSAEncryption
         50:09:e2:b0:6d:63:fd:dc:ce:12:4f:a2:97:f1:d3:7f:a8:db:
         52:ba:96:81:92:30:46:9f:13:35:35:b4:19:ff:31:7a:40:b9:
         ee:11:e9:e0:50:b0:a8:0f:b0:83:55:b9:86:ac:f6:93:ba:17:
         c1:88:0c:93:7a:92:5e:20:d0:20:f4:dc:57:27:f5:c4:98:22:
         08:7c:4c:3c:8b:de:a3:01:ac:68:15:23:d6:7b:a3:fc:57:52:
         9a:35:b0:d0:7d:0e:77:c1:15:46:f1:05:07:4f:aa:87:80:f1:
         a1:75:3d:d8:b1:99:8f:c3:e0:02:f0:78:a5:23:f7:0c:3f:60:
         82:64:68:80:f7:ba:cd:72:0c:a0:01:20:9b:61:38:2e:ba:4d:
         c2:1a:e8:57:cf:61:4b:f2:4c:4c:7e:44:fc:50:35:ef:f0:42:
         af:71:ff:de:c2:bf:51:2d:7c:a0:f4:43:c1:b4:e3:2e:c6:ed:
         60:f6:84:03:82:0b:fc:3c:17:be:44:15:f7:83:7b:0a:06:3f:
         ad:29:a1:1c:14:71:08:a6:54:87:d3:45:41:01:a0:a2:69:fa:
         71:1a:ea:15:3f:73:21:d4:1f:be:dc:45:6d:09:1d:b8:4d:ed:
         68:64:4a:39:46:6b:26:32:8e:7f:44:a6:25:f2:79:dc:b8:d8:
         46:3e:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:50 2026 by rpki-client