Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31313a3a2f34382d3438203d3e20323635363035.roa
File:                     323830363a3336313a31313a3a2f34382d3438203d3e20323635363035.roa (raw, json)
Hash identifier:          R/WQPeno1ZXrfvZizM3dOMGXTMSAd0/c027shGkQxb8=
Subject key identifier:   39:1E:E3:AC:CB:6C:E0:65:34:55:5A:2B:08:35:A2:26:14:0F:7D:E5
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       1011CD316C2270AE4841D0F9F52E532669648D3B
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31313a3a2f34382d3438203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:03 +0000
ROA not before:           Fri 06 Feb 2026 18:45:03 +0000
ROA not after:            Fri 05 Feb 2027 18:50:03 +0000
asID:                     265605
IP address blocks:        2806:361:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:cd:31:6c:22:70:ae:48:41:d0:f9:f5:2e:53:26:69:64:8d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:03 2026 GMT
            Not After : Feb  5 18:50:03 2027 GMT
        Subject: CN=391EE3ACCB6CE06534555A2B0835A226140F7DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:03:67:17:7c:e9:ab:6e:f4:1f:bd:79:c0:
                    db:0a:f0:9b:4e:0f:20:ff:ee:54:cc:eb:50:ae:32:
                    4d:61:98:21:39:ce:57:1c:66:a7:63:a9:7b:e3:8b:
                    00:9d:02:c2:5e:a1:ed:dd:51:5d:ea:41:b0:fb:5d:
                    59:ad:95:16:6f:0c:ba:1f:e2:d5:51:45:b9:74:22:
                    c1:62:c3:9f:fd:74:ae:e2:e5:ff:c2:6a:4d:5c:b0:
                    85:7f:4d:7b:53:8c:e1:28:3c:f5:0d:e5:77:a3:48:
                    c6:8e:80:4d:9d:a3:79:b3:50:aa:15:4f:18:0a:30:
                    0d:d4:b7:97:7b:71:12:ad:13:9b:90:59:7d:74:93:
                    2f:84:87:77:4e:5f:4f:9a:c4:85:e4:14:f6:ce:88:
                    37:5d:c6:f4:e5:97:de:b9:a9:60:99:a3:d6:45:2c:
                    c5:b9:80:12:dc:c7:6b:a2:00:e8:e6:b0:12:bc:65:
                    3b:ee:74:8a:80:b4:73:19:21:fc:26:cd:79:6e:14:
                    24:6c:ef:81:83:25:82:55:76:fc:8e:3b:df:a6:a9:
                    97:95:5e:46:18:8d:00:49:32:ee:8a:a8:eb:90:7e:
                    20:76:9f:f8:cd:e4:4b:c0:18:54:9d:2a:fe:a0:ac:
                    c4:a7:11:7f:9d:68:7f:34:7d:63:da:fb:bd:61:a2:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1E:E3:AC:CB:6C:E0:65:34:55:5A:2B:08:35:A2:26:14:0F:7D:E5
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31313a3a2f34382d3438203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:60:64:f9:c2:a5:65:c4:13:88:db:0b:20:0c:8e:50:1f:ef:
         b0:a9:50:80:5c:e1:88:c4:b3:2d:63:e1:70:d9:cc:95:f3:6e:
         25:80:4e:50:c9:64:f0:59:14:81:b7:b7:2c:08:45:63:d7:0f:
         38:32:9a:e8:24:74:5c:e0:66:d1:f2:ca:99:62:8c:b0:ff:4f:
         71:1b:5c:33:24:b5:36:d0:95:5f:4d:dd:0c:8e:71:90:fa:61:
         69:39:e5:56:e5:72:5f:a8:71:9c:20:4c:08:4b:9b:47:c9:df:
         dc:36:c4:58:ab:9e:e7:bf:b5:33:fe:37:40:e3:82:1a:01:27:
         f0:51:ef:34:f7:2a:b7:70:44:e6:9e:8b:f1:85:e1:79:d6:f7:
         cc:cd:d1:36:1e:7d:33:fd:c0:d0:83:b8:ee:81:1c:35:6b:17:
         e0:19:d2:74:9a:6d:22:de:00:67:3b:5e:4a:47:5c:da:8f:9f:
         1e:a9:d5:ba:ab:fa:5b:e0:3e:d7:80:d1:69:c7:c9:84:7a:c6:
         b5:95:d7:36:b7:44:6f:79:bf:f1:45:ba:08:63:e7:86:23:2b:
         dc:5b:19:a8:84:6f:0a:a9:78:5f:c3:42:2e:ef:57:dc:b2:2f:
         cb:6d:92:34:99:5f:07:96:b6:2f:27:bc:4e:85:67:c4:b9:d0:
         68:e1:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:28 2026 by rpki-client