Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31303a3a2f34382d3438203d3e20323635363035.roa
File:                     323830363a3336313a31303a3a2f34382d3438203d3e20323635363035.roa (raw, json)
Hash identifier:          MDmAWxJYvpOlXdLMQyVud0oefxWYdj9qkiPT5S22N6Y=
Subject key identifier:   DE:45:6B:5B:F4:80:ED:93:FD:A9:B4:93:2A:BA:0F:61:C7:C3:4A:36
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       1C8DA6CEDFBBB1235F88B8FB4C9D3A95DAD27C37
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31303a3a2f34382d3438203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:01 +0000
ROA not before:           Fri 06 Feb 2026 18:45:01 +0000
ROA not after:            Fri 05 Feb 2027 18:50:01 +0000
asID:                     265605
IP address blocks:        2806:361:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8d:a6:ce:df:bb:b1:23:5f:88:b8:fb:4c:9d:3a:95:da:d2:7c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:01 2026 GMT
            Not After : Feb  5 18:50:01 2027 GMT
        Subject: CN=DE456B5BF480ED93FDA9B4932ABA0F61C7C34A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b7:52:c1:58:30:37:f9:af:ae:b1:1a:bb:43:
                    d1:84:46:18:fb:8b:79:46:5d:f5:42:f4:22:13:92:
                    cc:67:20:b3:12:d3:37:ff:02:85:65:dd:68:55:02:
                    f3:ed:99:b1:bf:2b:b8:3c:96:cc:c0:e4:57:de:ba:
                    2e:71:9f:08:78:6d:ca:f4:e4:f2:f2:97:98:39:92:
                    ce:b9:14:90:1a:96:28:2d:f8:9a:07:1c:2d:1b:92:
                    0a:93:b0:23:57:f8:3f:12:98:d6:93:00:12:88:f5:
                    36:27:b8:6f:5f:c1:a6:23:4b:ed:6f:9f:ee:fe:36:
                    e3:9f:23:2e:ad:f5:96:4e:e4:2c:fb:dd:bb:b3:b3:
                    1d:8e:80:37:17:52:c0:a7:e8:aa:27:b0:16:36:57:
                    10:12:66:9d:22:e3:b0:64:72:d2:d0:59:9c:9b:33:
                    6a:15:42:21:af:6b:9a:4a:b6:33:28:a4:69:75:37:
                    f6:73:d7:58:55:7f:f5:3b:36:be:69:17:46:e9:9b:
                    0a:f8:f9:67:42:83:38:7e:24:b9:6c:69:bb:22:32:
                    9e:09:1f:3b:13:bc:8b:c8:19:8a:a2:85:9c:10:c1:
                    f2:dd:9b:8e:ee:e4:e7:36:de:8c:0d:fd:9f:42:83:
                    e7:c3:f8:7c:b1:16:70:64:89:a0:4f:f4:5e:3b:12:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:45:6B:5B:F4:80:ED:93:FD:A9:B4:93:2A:BA:0F:61:C7:C3:4A:36
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31303a3a2f34382d3438203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:9d:29:4a:96:73:67:e0:8a:3c:fc:22:b3:db:2f:c6:34:
         e7:6a:23:8f:7e:8c:d9:fc:a2:d2:c3:55:55:87:5c:f3:87:30:
         1d:ec:85:0e:8c:11:8b:69:c4:e8:50:c1:87:91:36:8c:d0:df:
         e3:c4:37:97:9a:60:7d:68:0f:8e:e0:dd:e0:1e:53:74:f2:f7:
         61:a1:f5:ee:c9:aa:69:fa:d9:39:93:7a:fa:5e:df:00:34:42:
         bb:8f:d1:a6:0e:21:db:17:79:f2:32:88:63:3f:33:98:46:ef:
         8d:9b:84:5e:42:62:51:1a:26:3a:27:ef:7c:3d:a5:a5:7e:98:
         7d:39:80:8e:ca:36:20:66:c8:7b:26:ff:80:75:ca:5f:99:2f:
         8c:ec:93:07:35:72:bb:69:11:8e:b8:24:a8:0e:a1:65:10:43:
         e5:dd:51:d3:2f:c2:1e:6e:e7:15:c3:16:27:79:86:6d:f7:79:
         68:e2:c3:64:93:d6:f4:be:9a:1d:ad:35:0f:35:4e:d3:5b:77:
         1b:0c:f7:85:b2:a2:8c:18:b9:80:24:7a:d1:98:95:cf:ac:76:
         89:4d:ab:ec:8d:29:92:0a:9f:c5:68:ec:04:80:a1:89:13:64:
         77:82:ba:dd:42:2d:a0:02:7c:25:cc:16:06:33:cd:88:a4:31:
         f7:57:3f:c7
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUHI2mzt+7sSNfiLj7TJ06ldrSfDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I4RDFFNDFEMUQ4RkMyN0ZGMTE0OUEyMUFENzA3NjU2
QzgyNzkzNjAeFw0yNjAyMDYxODQ1MDFaFw0yNzAyMDUxODUwMDFaMDMxMTAvBgNV
BAMTKERFNDU2QjVCRjQ4MEVEOTNGREE5QjQ5MzJBQkEwRjYxQzdDMzRBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzt1LBWDA3+a+usRq7Q9GERhj7
i3lGXfVC9CITksxnILMS0zf/AoVl3WhVAvPtmbG/K7g8lszA5Ffeui5xnwh4bcr0
5PLyl5g5ks65FJAaligt+JoHHC0bkgqTsCNX+D8SmNaTABKI9TYnuG9fwaYjS+1v
n+7+NuOfIy6t9ZZO5Cz73buzsx2OgDcXUsCn6KonsBY2VxASZp0i47BkctLQWZyb
M2oVQiGva5pKtjMopGl1N/Zz11hVf/U7Nr5pF0bpmwr4+WdCgzh+JLlsabsiMp4J
HzsTvIvIGYqihZwQwfLdm47u5Oc23owN/Z9Cg+fD+HyxFnBkiaBP9F47EvN1AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU3kVrW/SA7ZP9qbSTKroPYcfDSjYwHwYDVR0j
BBgwFoAUe40eQdHY/Cf/EUmiGtcHZWyCeTYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MjIwMjJDQkE2Njg4QkRCQzBDQ0IzNDI4MUNCQjE1QTg0
RDc2QjJDRjVFMjgxNURGN0U5RjE0RUUxNjYyRjcwLzAvN0I4RDFFNDFEMUQ4RkMy
N0ZGMTE0OUEyMUFENzA3NjU2QzgyNzkzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjhEMUU0MUQxRDhGQzI3RkYx
MTQ5QTIxQUQ3MDc2NTZDODI3OTM2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzIyMDIyQ0JBNjY4OEJEQkMwQ0NCMzQyODFDQkIxNUE4NEQ3NkIyQ0Y1
RTI4MTVERjdFOUYxNEVFMTY2MkY3MC8wLzMyMzgzMDM2M2EzMzM2MzEzYTMxMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzUzNjMwMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
BgNhABAwDQYJKoZIhvcNAQELBQADggEBAG2JnSlKlnNn4Io8/CKz2y/GNOdqI49+
jNn8otLDVVWHXPOHMB3shQ6MEYtpxOhQwYeRNozQ3+PEN5eaYH1oD47g3eAeU3Ty
92Gh9e7Jqmn62TmTevpe3wA0QruP0aYOIdsXefIyiGM/M5hG742bhF5CYlEaJjon
73w9paV+mH05gI7KNiBmyHsm/4B1yl+ZL4zskwc1crtpEY64JKgOoWUQQ+XdUdMv
wh5u5xXDFid5hm33eWjiw2ST1vS+mh2tNQ81TtNbdxsM94WyoowYuYAketGYlc+s
dolNq+yNKZIKn8Vo7ASAoYkTZHeCut1CLaACfCXMFgYzzYikMfdXP8c=
-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:26 2026 by rpki-client