Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34382f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34382f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          UAyLxDMnrJpMbvpa6BIXoiLZszqRBSOh5UV4dhXnOkk=
Subject key identifier:   79:67:8B:DE:15:E7:35:9D:81:A8:20:D6:5B:BE:75:02:3D:FB:A9:95
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       4DE44A83A10EE8BAB1475DDBB7C08A8113C69102
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34382f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:13 +0000
ROA not before:           Wed 18 Feb 2026 19:50:13 +0000
ROA not after:            Wed 17 Feb 2027 19:55:13 +0000
asID:                     52266
IP address blocks:        201.219.252.48/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e4:4a:83:a1:0e:e8:ba:b1:47:5d:db:b7:c0:8a:81:13:c6:91:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:13 2026 GMT
            Not After : Feb 17 19:55:13 2027 GMT
        Subject: CN=79678BDE15E7359D81A820D65BBE75023DFBA995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:d5:33:fc:3d:9b:b2:63:cc:2d:ed:6f:09:
                    71:94:4d:a6:75:1a:13:e6:ac:c1:7b:06:9f:e8:eb:
                    fe:b9:ee:0b:80:9f:72:57:e9:af:fa:79:b9:86:22:
                    00:7f:e5:78:31:06:aa:ff:19:f7:ea:3a:a5:56:6d:
                    c2:2c:ca:46:fa:23:2d:30:4b:21:85:78:d0:0d:fe:
                    f2:a5:30:03:99:f1:0c:10:60:29:9a:79:64:22:91:
                    0f:ca:55:c1:36:9d:45:eb:d6:8f:9f:c9:76:ee:08:
                    55:4a:dc:20:51:e4:cd:fd:af:77:c6:fe:8b:e7:7f:
                    6c:64:ef:c3:39:b7:65:67:d8:4d:83:4a:76:e0:ac:
                    9d:11:57:99:90:8f:27:52:66:d3:80:9d:e7:65:ca:
                    99:66:00:7e:bc:1d:75:c4:5c:56:83:28:81:fe:a3:
                    58:0e:02:69:01:ac:5d:2a:f2:f9:70:99:86:43:4d:
                    a7:25:f1:4e:7d:cb:26:60:e1:af:4f:87:04:27:a2:
                    25:d0:ec:0f:33:d6:f1:1f:ef:73:39:36:40:7e:3e:
                    c4:7f:b5:c0:66:af:37:8b:d8:ea:8c:5c:c9:1d:7e:
                    05:2a:8e:92:d4:6a:6e:b8:af:a9:9a:7f:c1:51:c1:
                    ba:65:66:34:af:45:d7:72:4c:4e:e1:d7:d9:ef:fd:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:67:8B:DE:15:E7:35:9D:81:A8:20:D6:5B:BE:75:02:3D:FB:A9:95
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34382f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.48/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:f9:1c:82:d7:67:ab:f9:5a:c3:ff:12:26:7e:87:c9:85:31:
         fa:3e:c9:f1:1b:cb:05:e2:8c:ac:ae:9a:31:c6:82:4d:df:f4:
         63:c1:e7:33:2b:44:1d:59:ec:0f:e8:e7:30:99:a7:a6:df:36:
         06:7c:9c:72:3c:64:9f:66:b0:c8:a4:ca:c2:d7:80:44:7c:59:
         a5:85:b5:b9:b0:f1:69:31:3c:82:af:13:52:c8:8d:8e:68:5e:
         3b:1d:37:61:8c:62:87:fe:a0:81:1a:87:7b:48:c3:1e:9a:63:
         91:bd:a2:43:f5:3d:4d:87:88:a3:24:dc:7f:33:5b:19:aa:1a:
         8f:e0:4f:f1:20:8b:84:9c:37:89:f3:b4:e2:b0:74:75:d5:0a:
         a3:97:6c:b1:d8:1c:7d:8e:d0:5e:87:32:99:e5:2e:54:bf:bc:
         7f:d4:9f:80:04:0b:9e:18:98:d8:a4:e7:73:af:00:fa:0d:f1:
         73:61:86:4d:94:4c:39:f9:62:ad:ca:5a:75:7a:26:e1:6f:c1:
         37:ae:c9:34:1e:4a:79:81:0c:f8:1b:51:c5:7f:74:70:76:4b:
         65:7f:c6:0c:f0:61:17:0b:93:61:5d:30:06:57:64:af:26:ad:
         57:e9:e8:79:80:72:9e:be:81:61:a1:2c:f8:a6:ce:4f:e5:c1:
         82:20:89:a0
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUTeRKg6EO6LqxR13bt8CKgRPGkQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjAyMTgxOTUwMTNaFw0yNzAyMTcxOTU1MTNaMDMxMTAvBgNV
BAMTKDc5Njc4QkRFMTVFNzM1OUQ4MUE4MjBENjVCQkU3NTAyM0RGQkE5OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClq9Uz/D2bsmPMLe1vCXGUTaZ1
GhPmrMF7Bp/o6/657guAn3JX6a/6ebmGIgB/5XgxBqr/GffqOqVWbcIsykb6Iy0w
SyGFeNAN/vKlMAOZ8QwQYCmaeWQikQ/KVcE2nUXr1o+fyXbuCFVK3CBR5M39r3fG
/ovnf2xk78M5t2Vn2E2DSnbgrJ0RV5mQjydSZtOAnedlyplmAH68HXXEXFaDKIH+
o1gOAmkBrF0q8vlwmYZDTacl8U59yyZg4a9PhwQnoiXQ7A8z1vEf73M5NkB+PsR/
tcBmrzeL2OqMXMkdfgUqjpLUam64r6maf8FRwbplZjSvRddyTE7h19nv/WbNAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUeWeL3hXnNZ2BqCDWW751Aj37qZUwHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTM0MzgyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wwMA0GCSqGSIb3DQEBCwUAA4IBAQC9+RyC12er+VrD/xImfofJhTH6PsnxG8sF
4oysrpoxxoJN3/RjweczK0QdWewP6Ocwmaem3zYGfJxyPGSfZrDIpMrC14BEfFml
hbW5sPFpMTyCrxNSyI2OaF47HTdhjGKH/qCBGod7SMMemmORvaJD9T1Nh4ijJNx/
M1sZqhqP4E/xIIuEnDeJ87TisHR11Qqjl2yx2Bx9jtBehzKZ5S5Uv7x/1J+ABAue
GJjYpOdzrwD6DfFzYYZNlEw5+WKtylp1eibhb8E3rsk0Hkp5gQz4G1HFf3Rwdktl
f8YM8GEXC5NhXTAGV2SvJq1X6eh5gHKevoFhoSz4ps5P5cGCIImg
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:47 2026 by rpki-client