Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          abK76Yn97jdk2vaFEZ8+nHTIahGkWMfgPr+4XJlq6kg=
Subject key identifier:   69:F7:B9:40:53:BB:C7:36:66:6E:63:BB:6B:5F:8D:EC:D3:3B:6D:80
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       15C2D39EB4B027EE12E62E175EDE9BC090062CB0
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:11 +0000
ROA not before:           Wed 18 Feb 2026 19:50:11 +0000
ROA not after:            Wed 17 Feb 2027 19:55:11 +0000
asID:                     52266
IP address blocks:        201.219.252.52/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c2:d3:9e:b4:b0:27:ee:12:e6:2e:17:5e:de:9b:c0:90:06:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:11 2026 GMT
            Not After : Feb 17 19:55:11 2027 GMT
        Subject: CN=69F7B94053BBC736666E63BB6B5F8DECD33B6D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:1c:d5:40:4e:90:da:db:2a:f8:2f:a0:d7:
                    88:dc:b4:45:01:03:f0:9c:c6:99:df:f1:64:ab:f8:
                    9b:40:54:5f:93:5b:0b:46:9f:80:b0:05:5c:a4:65:
                    68:6c:da:52:50:c6:9e:e2:8d:de:8e:29:8e:1d:b6:
                    c7:af:57:de:40:7e:59:ce:3b:5f:51:89:61:cd:02:
                    80:42:e8:1e:6c:b1:fd:3d:e3:cf:29:b0:bb:ed:b4:
                    c2:65:5d:0c:a8:52:81:9c:6e:d4:a6:2c:9d:2f:26:
                    26:f0:c6:a3:1d:d3:bf:29:fd:0b:eb:28:06:db:b4:
                    d8:e4:b8:70:bd:aa:0b:3e:73:d9:ff:47:d5:0c:93:
                    9b:00:c5:31:3e:8b:39:c2:4b:21:34:d8:b8:a2:71:
                    21:60:40:42:3b:f3:55:d9:c9:77:23:67:31:b5:f8:
                    8e:9e:b1:cc:b8:29:d4:9a:4e:26:53:a1:9b:f4:4f:
                    de:85:da:6f:af:6c:f7:9f:d5:8d:19:02:c7:ae:4b:
                    32:46:28:ae:21:03:b8:2f:84:26:97:cd:9c:ca:6b:
                    20:7c:4c:26:16:cb:f1:09:c4:10:bd:47:56:d7:55:
                    f4:ab:ba:9f:ea:3e:b3:29:43:b8:c8:90:16:4d:02:
                    3e:72:08:00:49:e8:6f:1e:39:0c:18:d8:af:91:2e:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F7:B9:40:53:BB:C7:36:66:6E:63:BB:6B:5F:8D:EC:D3:3B:6D:80
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35322f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.52/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:f8:96:2e:55:6b:75:7d:29:ad:29:2c:dd:27:f8:65:c0:
         8e:76:47:0a:b7:ec:9e:4a:aa:18:d7:ae:41:af:db:57:e5:08:
         50:06:ef:31:0e:34:07:b9:2d:65:cf:5c:b2:c1:63:66:91:49:
         5e:35:d0:29:17:65:d5:6d:55:6b:dc:dd:4f:06:c6:c3:2c:c1:
         6c:4c:a7:dc:4a:7b:ef:e3:18:7f:9b:d8:98:74:fe:f0:8e:51:
         f2:4c:de:48:13:ec:43:21:a8:94:73:4c:21:78:e1:b3:49:85:
         01:ad:81:60:d8:4e:1b:a7:aa:c4:b3:c4:78:d9:eb:e4:13:83:
         ba:c2:a4:41:9c:8e:31:70:62:25:6c:76:42:18:16:b5:7c:92:
         2f:36:58:1b:a2:23:ff:65:c1:5f:36:d0:05:9e:1f:00:64:d7:
         9d:82:28:4f:85:98:bb:2c:b6:59:37:cd:4a:de:3e:cb:ca:7d:
         a4:10:f1:b1:5f:17:c6:59:00:b1:37:55:3e:1b:31:5c:74:9d:
         e4:02:da:22:37:df:0f:3d:b6:e1:50:08:06:60:d8:07:c7:45:
         2e:d6:d7:ac:f2:8e:29:e3:6d:56:6c:63:17:1b:eb:5a:9b:0a:
         95:92:a3:72:6b:c6:c2:3e:69:93:2b:7b:0f:2f:4d:ba:f1:e4:
         65:06:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:48 2026 by rpki-client