Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          EZ35zP8N+zxAMYvJoGGQ1ht2iWGziLdbYslD6vGxHYQ=
Subject key identifier:   56:46:FF:FF:88:3A:A4:99:44:31:09:C6:42:64:36:03:6C:74:A7:93
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       0E6C1699729F7B25B9D280BBB486FFC234DC49AE
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:03 +0000
ROA not before:           Wed 18 Feb 2026 19:50:03 +0000
ROA not after:            Wed 17 Feb 2027 19:55:03 +0000
asID:                     52266
IP address blocks:        201.219.252.58/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:16:99:72:9f:7b:25:b9:d2:80:bb:b4:86:ff:c2:34:dc:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:03 2026 GMT
            Not After : Feb 17 19:55:03 2027 GMT
        Subject: CN=5646FFFF883AA499443109C6426436036C74A793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:bf:75:18:f3:40:b9:23:99:8a:f4:f7:e7:
                    d3:be:0d:f0:cd:14:96:7e:5c:2b:82:5a:8a:93:dd:
                    2c:bd:1a:af:3f:97:03:0c:c1:6f:9d:b8:1c:0b:26:
                    32:c4:2b:e8:81:37:ea:0c:de:ba:e9:6a:3d:e8:da:
                    2f:6d:f5:8e:9e:0e:90:e3:c9:ba:8d:ea:05:a8:7e:
                    8f:e0:66:14:44:fc:d3:e0:44:9c:1a:5c:25:5a:7e:
                    50:c9:c8:47:ce:5f:46:cd:5f:f9:fa:70:64:47:4a:
                    ee:27:7c:8d:3b:24:0f:df:c3:54:72:c4:98:9b:3b:
                    71:b9:4f:4f:f0:e1:7b:80:ec:58:a1:36:06:89:35:
                    7b:5d:6b:05:e2:e5:09:0b:52:cf:7c:5d:05:6e:b5:
                    0e:f2:d2:8b:01:57:96:09:1a:a8:84:fc:e0:50:d4:
                    b4:82:b9:a4:40:43:45:6e:d5:b9:2e:47:2a:57:aa:
                    9d:af:e0:58:9f:a4:82:b4:5f:a0:f2:a2:86:80:0c:
                    fe:da:3f:75:86:fc:d1:ee:97:5d:59:00:a1:9b:93:
                    12:35:73:78:be:9b:49:4a:db:2a:7f:36:ed:17:c9:
                    3e:b2:71:59:d2:b2:18:6b:b9:a4:19:78:67:10:34:
                    54:0f:77:4f:49:ed:b1:a4:7b:16:4e:17:5a:8e:3b:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:46:FF:FF:88:3A:A4:99:44:31:09:C6:42:64:36:03:6C:74:A7:93
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e35382f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.58/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:e8:4c:d1:78:04:20:1e:41:aa:8e:00:e1:8f:f1:50:cd:03:
         43:61:3e:91:91:32:50:07:88:0d:c1:45:0c:40:7b:b4:20:90:
         a8:cc:b1:6d:aa:09:0c:1d:0f:b1:4b:39:d6:4a:78:13:5d:04:
         64:f4:42:cf:d3:0c:3c:63:c2:e3:67:71:94:23:c3:8c:e1:bc:
         04:4a:63:4d:af:97:3d:55:fa:7b:92:28:ab:23:cf:c3:1f:9d:
         67:f5:b5:68:e4:01:12:d7:b7:77:7b:9f:91:67:97:25:af:7e:
         24:04:94:b9:83:13:13:b2:28:af:a0:b9:0f:8b:b0:7d:c9:0a:
         92:8f:f1:bb:00:76:3d:31:b4:84:17:2a:27:83:7b:21:e3:37:
         33:44:e0:39:03:38:b9:3e:5c:23:10:fe:d7:f7:2d:89:94:e1:
         bd:94:e2:56:d9:af:f5:50:3b:f3:b9:89:b3:2f:e8:6b:89:61:
         5a:8a:a5:13:ff:2c:49:4c:e4:2d:34:1f:e4:1a:b2:66:36:22:
         1b:61:48:af:d8:97:5b:81:0a:43:23:67:34:0f:9b:23:bf:23:
         9c:cd:91:b1:98:2f:8f:e3:e9:4b:6b:80:88:2c:5c:f2:7b:fd:
         36:4c:4b:d0:1b:a0:f8:42:e0:32:85:38:8f:3c:12:38:dc:e2:
         3b:d8:dc:f8
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUDmwWmXKfeyW50oC7tIb/wjTcSa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjAyMTgxOTUwMDNaFw0yNzAyMTcxOTU1MDNaMDMxMTAvBgNV
BAMTKDU2NDZGRkZGODgzQUE0OTk0NDMxMDlDNjQyNjQzNjAzNkM3NEE3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcI791GPNAuSOZivT359O+DfDN
FJZ+XCuCWoqT3Sy9Gq8/lwMMwW+duBwLJjLEK+iBN+oM3rrpaj3o2i9t9Y6eDpDj
ybqN6gWofo/gZhRE/NPgRJwaXCVaflDJyEfOX0bNX/n6cGRHSu4nfI07JA/fw1Ry
xJibO3G5T0/w4XuA7FihNgaJNXtdawXi5QkLUs98XQVutQ7y0osBV5YJGqiE/OBQ
1LSCuaRAQ0Vu1bkuRypXqp2v4FifpIK0X6DyooaADP7aP3WG/NHul11ZAKGbkxI1
c3i+m0lK2yp/Nu0XyT6ycVnSshhruaQZeGcQNFQPd09J7bGkexZOF1qOO/IZAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUVkb//4g6pJlEMQnGQmQ2A2x0p5MwHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTM1MzgyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/w6MA0GCSqGSIb3DQEBCwUAA4IBAQDR6EzReAQgHkGqjgDhj/FQzQNDYT6RkTJQ
B4gNwUUMQHu0IJCozLFtqgkMHQ+xSznWSngTXQRk9ELP0ww8Y8LjZ3GUI8OM4bwE
SmNNr5c9Vfp7kiirI8/DH51n9bVo5AES17d3e5+RZ5clr34kBJS5gxMTsiivoLkP
i7B9yQqSj/G7AHY9MbSEFyong3sh4zczROA5Azi5PlwjEP7X9y2JlOG9lOJW2a/1
UDvzuYmzL+hriWFaiqUT/yxJTOQtNB/kGrJmNiIbYUiv2JdbgQpDI2c0D5sjvyOc
zZGxmC+P4+lLa4CILFzye/02TEvQG6D4QuAyhTiPPBI43OI72Nz4
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:48 2026 by rpki-client