Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31323a3a2f34382d3438203d3e20323635363035.roa
File:                     323830363a3336313a31323a3a2f34382d3438203d3e20323635363035.roa (raw, json)
Hash identifier:          0lGO7FOUaj/edPfHVzv9jvHpKyHb/9qA0QRIe569S+I=
Subject key identifier:   F3:E7:42:86:1C:84:89:EC:D3:FD:A2:6E:A7:EE:8F:1C:5C:AB:4E:8B
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       72FC424CD9F1A73567C36F79D8D5064FE10C5FD7
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31323a3a2f34382d3438203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:02 +0000
ROA not before:           Fri 06 Feb 2026 18:45:02 +0000
ROA not after:            Fri 05 Feb 2027 18:50:02 +0000
asID:                     265605
IP address blocks:        2806:361:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fc:42:4c:d9:f1:a7:35:67:c3:6f:79:d8:d5:06:4f:e1:0c:5f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:02 2026 GMT
            Not After : Feb  5 18:50:02 2027 GMT
        Subject: CN=F3E742861C8489ECD3FDA26EA7EE8F1C5CAB4E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:44:87:72:03:22:e0:75:0d:27:64:ec:93:
                    55:29:37:0d:16:08:94:da:4e:d7:8b:36:22:a8:c9:
                    fb:72:8d:5d:59:7c:d0:d0:ad:74:2f:11:59:f9:26:
                    86:03:26:a9:83:b4:35:cf:93:c7:9c:e2:63:79:04:
                    41:a3:ed:50:d4:c2:1d:a5:01:d5:26:a8:a7:aa:b0:
                    55:76:18:7f:f7:68:81:2e:14:50:51:2c:fc:73:8f:
                    f1:29:f6:e4:dc:1c:18:4a:2e:f3:60:00:fe:51:cf:
                    c5:22:72:e0:62:51:68:df:ce:ba:de:90:4b:2b:3e:
                    d8:91:34:46:f2:f3:ff:69:d1:af:bb:6b:f1:aa:1f:
                    b8:8e:c1:35:92:3c:ec:fa:56:54:0b:cb:23:73:40:
                    8f:7a:50:c5:52:f5:00:43:f2:4a:34:81:ff:bf:cd:
                    88:c1:dc:26:7f:5f:e8:df:56:21:8e:79:19:48:c0:
                    1a:69:a7:4d:d9:fe:b1:81:65:15:c1:28:38:6f:4f:
                    4f:b8:bc:06:78:8a:e2:03:58:7e:b4:92:eb:99:35:
                    b6:9a:4d:75:c6:c4:3b:40:75:cc:ba:6d:79:a6:89:
                    ac:68:39:e2:ee:f9:55:05:65:20:48:ad:2b:4c:67:
                    31:6e:4a:95:5b:57:19:f4:09:ce:a1:9b:04:fe:f7:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E7:42:86:1C:84:89:EC:D3:FD:A2:6E:A7:EE:8F:1C:5C:AB:4E:8B
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a31323a3a2f34382d3438203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:4e:d8:4e:22:5c:2c:4d:1c:3a:17:89:2e:48:c4:0a:b1:
         98:30:a4:3e:d9:c5:0f:cd:ef:f9:fc:23:2e:06:7a:cb:46:0d:
         b3:89:18:5b:66:de:f9:90:80:6a:7c:e3:a6:82:3a:9a:2e:fa:
         95:64:df:a1:23:35:e3:0f:d2:72:fb:1a:ff:b8:73:65:0b:ca:
         76:5f:ca:1f:71:d2:13:e5:01:f8:11:be:25:b3:56:08:53:d0:
         9c:33:65:1c:17:93:41:65:91:56:ee:0c:a2:c1:a9:f4:36:b2:
         e5:2e:57:fa:36:fe:26:89:4c:d6:12:12:28:e4:d2:52:bc:dd:
         1e:04:ba:76:46:b9:ea:3c:02:3b:f6:32:02:fb:11:3f:ff:bf:
         b0:3a:0f:9b:fd:5b:26:51:45:96:b2:ca:5f:e3:c6:96:7c:47:
         0c:b0:b3:02:f4:c0:b7:dc:b4:77:06:71:25:12:9c:2d:df:b4:
         e1:29:c1:00:0b:79:1d:8d:b7:c5:c4:df:bb:c8:9c:81:f3:08:
         a7:aa:a5:68:f5:ef:94:6c:6c:49:3e:8c:4f:fd:d0:7b:7b:94:
         c2:16:df:27:12:61:7f:c8:71:c0:00:2d:d6:83:3c:18:5d:0c:
         1d:c5:dd:63:2b:92:bd:08:15:42:95:b6:a1:da:ba:e4:8e:98:
         c2:14:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:28 2026 by rpki-client