Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a373a3a2f34382d3438203d3e20323635363035.roa
File:                     323830363a3336313a373a3a2f34382d3438203d3e20323635363035.roa (raw, json)
Hash identifier:          MQhLoQsYuhyMoubrYjfDUsF0AgiHT/fV0CwZpX1Cu6Q=
Subject key identifier:   54:33:3B:87:F0:5B:F5:FC:5A:5B:61:91:EF:E5:07:70:00:C7:0B:5C
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       0471CD79FFC4A302DE13ED8CB90EAA07F96441A4
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a373a3a2f34382d3438203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:01 +0000
ROA not before:           Fri 06 Feb 2026 18:45:01 +0000
ROA not after:            Fri 05 Feb 2027 18:50:01 +0000
asID:                     265605
IP address blocks:        2806:361:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:cd:79:ff:c4:a3:02:de:13:ed:8c:b9:0e:aa:07:f9:64:41:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:01 2026 GMT
            Not After : Feb  5 18:50:01 2027 GMT
        Subject: CN=54333B87F05BF5FC5A5B6191EFE5077000C70B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:35:c3:b1:5a:12:05:f9:eb:7b:7b:cf:1c:
                    33:d4:6a:01:e9:22:ed:0a:6b:a0:8e:70:36:26:b5:
                    be:f6:70:75:1f:07:fc:25:4b:dc:44:9e:69:a6:80:
                    9b:d9:43:b8:d5:f6:0c:85:8f:82:4e:c0:7e:93:d5:
                    2c:06:54:89:f6:db:d9:24:20:dc:e3:4d:c0:cb:5d:
                    e0:64:d1:e1:fa:31:96:94:25:ef:ea:72:62:0b:94:
                    c0:e6:64:ad:a0:f2:9a:72:7c:09:4f:3b:4f:8d:ca:
                    ae:b7:65:a7:4e:62:19:ae:ff:f7:ac:70:28:00:33:
                    28:ed:93:3d:19:95:a2:8c:bd:d8:79:89:05:8c:2d:
                    04:9c:8f:bb:02:be:73:fe:e3:6d:79:f0:8c:f7:6b:
                    f8:35:83:d2:07:a5:c6:92:4b:a1:f4:64:bc:9e:32:
                    63:c8:c0:9f:b7:6e:21:93:78:db:20:57:55:27:69:
                    23:9b:fb:1e:ec:b6:2f:f6:2e:e0:87:5e:8d:98:ab:
                    17:9f:41:23:50:7f:82:f4:b8:69:88:0b:d0:fd:c6:
                    02:6f:a7:0b:3d:90:b7:eb:11:4a:6d:0d:94:bc:bb:
                    82:aa:b0:22:4c:68:55:7e:67:43:57:04:db:16:21:
                    81:3a:7f:d4:e0:ab:26:a7:70:e6:3e:36:48:91:d4:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:3B:87:F0:5B:F5:FC:5A:5B:61:91:EF:E5:07:70:00:C7:0B:5C
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a373a3a2f34382d3438203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:39:d6:14:b1:b2:70:0d:b5:9e:fb:d1:da:00:3e:a7:2d:29:
         85:da:78:9a:c4:f9:30:a8:ac:8c:16:17:e1:fc:d7:2a:55:28:
         b6:6e:4c:da:3d:0c:b1:92:89:3f:d5:fc:5e:e7:a9:d2:23:d1:
         53:78:45:40:06:1e:67:06:f8:ee:e1:f5:1c:fd:4c:cc:a5:10:
         80:f3:c9:0b:b8:82:4d:5f:e9:67:1b:86:aa:7e:7c:e5:40:ca:
         9d:78:e2:b5:29:c4:73:27:02:84:71:2e:7b:59:ab:8b:8c:1b:
         32:bf:bd:5e:bd:86:a1:15:57:b4:59:a7:67:f6:aa:14:e0:bb:
         eb:00:7e:93:38:46:2e:a7:28:9f:0b:e5:1c:bd:e8:d4:de:b1:
         82:39:f4:df:32:06:18:cc:0b:06:fa:be:7d:de:2e:b6:ec:09:
         6d:84:a4:14:5c:40:dd:a5:1c:18:2a:f5:08:42:32:dd:2c:f5:
         83:21:5e:86:12:82:19:45:ef:c4:c7:5b:c6:5b:11:74:2f:f7:
         98:e9:e0:ee:ec:1b:50:6d:37:e0:42:a5:6c:a9:0f:e2:b6:9e:
         66:18:48:3f:bd:33:b3:f1:69:98:29:90:6a:3f:a5:27:0b:99:
         ba:4a:55:f0:63:d4:1d:13:61:94:39:fb:da:68:5c:2a:78:6f:
         ca:35:8f:1c
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUBHHNef/EowLeE+2MuQ6qB/lkQaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I4RDFFNDFEMUQ4RkMyN0ZGMTE0OUEyMUFENzA3NjU2
QzgyNzkzNjAeFw0yNjAyMDYxODQ1MDFaFw0yNzAyMDUxODUwMDFaMDMxMTAvBgNV
BAMTKDU0MzMzQjg3RjA1QkY1RkM1QTVCNjE5MUVGRTUwNzcwMDBDNzBCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmzXDsVoSBfnre3vPHDPUagHp
Iu0Ka6COcDYmtb72cHUfB/wlS9xEnmmmgJvZQ7jV9gyFj4JOwH6T1SwGVIn229kk
INzjTcDLXeBk0eH6MZaUJe/qcmILlMDmZK2g8ppyfAlPO0+Nyq63ZadOYhmu//es
cCgAMyjtkz0ZlaKMvdh5iQWMLQScj7sCvnP+42158Iz3a/g1g9IHpcaSS6H0ZLye
MmPIwJ+3biGTeNsgV1UnaSOb+x7sti/2LuCHXo2YqxefQSNQf4L0uGmIC9D9xgJv
pws9kLfrEUptDZS8u4KqsCJMaFV+Z0NXBNsWIYE6f9TgqyancOY+NkiR1H9bAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUVDM7h/Bb9fxaW2GR7+UHcADHC1wwHwYDVR0j
BBgwFoAUe40eQdHY/Cf/EUmiGtcHZWyCeTYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MjIwMjJDQkE2Njg4QkRCQzBDQ0IzNDI4MUNCQjE1QTg0
RDc2QjJDRjVFMjgxNURGN0U5RjE0RUUxNjYyRjcwLzAvN0I4RDFFNDFEMUQ4RkMy
N0ZGMTE0OUEyMUFENzA3NjU2QzgyNzkzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjhEMUU0MUQxRDhGQzI3RkYx
MTQ5QTIxQUQ3MDc2NTZDODI3OTM2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzIyMDIyQ0JBNjY4OEJEQkMwQ0NCMzQyODFDQkIxNUE4NEQ3NkIyQ0Y1
RTI4MTVERjdFOUYxNEVFMTY2MkY3MC8wLzMyMzgzMDM2M2EzMzM2MzEzYTM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM1MzYzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAYD
YQAHMA0GCSqGSIb3DQEBCwUAA4IBAQCaOdYUsbJwDbWe+9HaAD6nLSmF2niaxPkw
qKyMFhfh/NcqVSi2bkzaPQyxkok/1fxe56nSI9FTeEVABh5nBvju4fUc/UzMpRCA
88kLuIJNX+lnG4aqfnzlQMqdeOK1KcRzJwKEcS57WauLjBsyv71evYahFVe0Wadn
9qoU4LvrAH6TOEYupyifC+UcvejU3rGCOfTfMgYYzAsG+r593i627AlthKQUXEDd
pRwYKvUIQjLdLPWDIV6GEoIZRe/Ex1vGWxF0L/eY6eDu7BtQbTfgQqVsqQ/itp5m
GEg/vTOz8WmYKZBqP6UnC5m6SlXwY9QdE2GUOfvaaFwqeG/KNY8c
-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:28 2026 by rpki-client