Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3430303a3a2f34302d3430203d3e20323635363035.roa
File:                     323830363a3336313a3430303a3a2f34302d3430203d3e20323635363035.roa (raw, json)
Hash identifier:          9GugdbnBD2AaEwZ4mMGVJPgOgANs+QNYWX6kIwCzF7k=
Subject key identifier:   77:81:71:A9:67:BE:9C:D8:F2:32:56:97:3A:E4:11:64:E0:D8:86:A5
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       2D7C3BFD8F8A16A8B5AADA14A23ADFF0F5501C56
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3430303a3a2f34302d3430203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:09 +0000
ROA not before:           Fri 06 Feb 2026 18:45:09 +0000
ROA not after:            Fri 05 Feb 2027 18:50:09 +0000
asID:                     265605
IP address blocks:        2806:361:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7c:3b:fd:8f:8a:16:a8:b5:aa:da:14:a2:3a:df:f0:f5:50:1c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:09 2026 GMT
            Not After : Feb  5 18:50:09 2027 GMT
        Subject: CN=778171A967BE9CD8F23256973AE41164E0D886A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:65:3d:61:32:c5:ec:fc:88:0a:e9:e2:2b:
                    af:25:61:82:ca:c8:77:05:fe:f8:92:80:e6:8d:c2:
                    1d:a5:f0:60:16:38:8a:2e:30:a2:60:b5:bd:88:fc:
                    19:ec:4e:75:d0:41:99:47:f8:e2:44:a5:4d:d4:7a:
                    c8:99:b9:d2:f7:66:5a:97:b9:79:4d:3a:9d:ba:b4:
                    f5:20:22:85:7e:f0:75:12:b5:7f:3a:d9:68:de:58:
                    64:d2:e3:7a:47:5a:b1:42:03:69:e0:de:0c:df:84:
                    af:b9:a5:97:9e:ff:5c:b0:1a:18:c5:ea:db:18:6a:
                    a7:85:7b:3f:4e:53:f9:b0:0a:67:ec:82:1b:63:f5:
                    a0:fa:6b:ab:79:0e:76:9b:70:87:82:f9:68:54:fb:
                    3f:cc:46:2a:fa:03:c4:9a:b3:69:52:8a:b7:f0:05:
                    b4:1f:5f:e4:3c:ae:e0:fa:b1:3e:d7:e0:1d:aa:54:
                    c6:9b:4b:4a:47:15:3f:b8:12:ee:09:3e:97:d0:45:
                    71:dc:d5:21:ba:c2:52:83:07:3c:d2:2f:07:92:4f:
                    81:a8:94:d3:d9:76:4f:96:96:d0:5f:70:1c:e7:8d:
                    1d:2a:b0:45:90:02:5c:a5:15:2a:95:e7:cc:dc:01:
                    a9:4c:18:92:12:ee:98:8b:b0:a6:0b:2b:81:99:a2:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:71:A9:67:BE:9C:D8:F2:32:56:97:3A:E4:11:64:E0:D8:86:A5
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3430303a3a2f34302d3430203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:e8:c4:64:5b:1e:da:23:b2:c5:07:03:df:b5:d8:7a:b2:
         2c:ad:74:34:7b:a4:e9:23:d1:58:68:6b:b4:b5:7c:28:d3:c3:
         ad:e2:07:00:86:a4:51:10:5d:b5:f0:a8:de:90:f8:88:ec:04:
         2e:dc:3d:94:a6:07:70:70:58:c4:73:65:23:c4:ea:f6:eb:19:
         21:d0:be:80:ba:30:2a:db:52:74:e4:3f:c2:20:e7:ac:aa:db:
         62:5d:d2:73:51:f3:8b:e3:e3:c7:59:02:3c:70:f2:4a:7e:69:
         64:9b:11:ca:bd:68:80:97:d3:fb:9e:f9:af:8d:17:d6:35:97:
         76:18:18:14:3f:55:1b:75:cb:c7:dc:aa:2c:9c:b6:17:15:cb:
         12:ee:a0:00:d7:47:98:fa:93:b7:bd:f0:42:81:1d:e7:34:bc:
         90:71:f3:a1:ea:b6:ff:5a:9b:e1:0e:28:5e:f5:b6:98:4a:75:
         17:5f:ae:29:5d:cd:25:86:f7:49:ab:44:87:bb:5d:a4:d3:4f:
         a9:2f:13:1a:78:2d:ab:c2:2d:8f:bb:65:8a:2b:97:2a:6c:5e:
         0d:37:a4:d9:1c:4a:b1:c1:81:32:dc:a8:f6:bf:42:e1:92:13:
         30:25:b1:e4:50:d9:cf:2e:58:a6:47:04:d0:f1:71:21:52:6e:
         25:b8:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:29 2026 by rpki-client