Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3930303a3a2f34302d3430203d3e20323635363035.roa
File:                     323830363a3336313a3930303a3a2f34302d3430203d3e20323635363035.roa (raw, json)
Hash identifier:          ccDse0zL73tRMl6PZ5DGMc8I/MPDFPLF5tEPvsJqu3Y=
Subject key identifier:   4B:1B:C7:58:4D:A2:8E:D1:3C:5A:6A:61:51:B7:DB:86:6B:26:D9:BF
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       46D00F050595A4EB6E867E831ADB3909F1E643B2
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3930303a3a2f34302d3430203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:05 +0000
ROA not before:           Fri 06 Feb 2026 18:45:05 +0000
ROA not after:            Fri 05 Feb 2027 18:50:05 +0000
asID:                     265605
IP address blocks:        2806:361:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d0:0f:05:05:95:a4:eb:6e:86:7e:83:1a:db:39:09:f1:e6:43:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:05 2026 GMT
            Not After : Feb  5 18:50:05 2027 GMT
        Subject: CN=4B1BC7584DA28ED13C5A6A6151B7DB866B26D9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:db:de:48:36:a4:d8:fe:8a:07:ee:1c:5c:
                    77:7c:07:fe:c2:c6:80:8e:44:c3:b0:c1:66:df:2e:
                    d5:40:3c:43:e3:af:84:da:df:51:2a:a0:3c:65:06:
                    f4:9f:39:f6:34:83:a9:13:47:c3:58:dc:e4:3d:cd:
                    43:40:e3:85:ae:1f:6c:34:2d:d3:9e:54:27:c4:a5:
                    28:a9:50:63:8a:88:6a:33:93:16:c6:58:69:1e:2c:
                    e8:b5:cd:51:57:3f:72:f3:33:53:a5:ff:67:7e:17:
                    1b:ea:41:07:00:46:7b:4b:df:75:9b:28:4d:43:ef:
                    31:ca:7f:05:51:51:51:c4:63:dc:aa:94:d2:6b:00:
                    e1:df:a3:d6:3a:65:9f:18:58:a4:17:fb:83:ae:b6:
                    75:8c:d2:32:54:d6:b4:01:b4:0b:2f:2a:6a:bc:3e:
                    e3:c0:6a:58:74:10:ac:a3:d4:fa:72:c5:ae:88:4f:
                    27:74:6b:4c:d4:22:3a:4e:e3:e3:83:db:79:3d:6e:
                    bc:c6:42:56:2b:f3:53:d4:2e:a6:1e:ee:d4:35:b6:
                    c9:7a:94:5e:22:d7:e5:47:f5:0d:21:5e:5a:71:8d:
                    22:52:1e:69:4e:16:43:c8:c3:9d:5e:eb:20:ba:41:
                    af:9e:4d:9a:fe:4f:8c:20:18:b7:64:7f:36:28:85:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1B:C7:58:4D:A2:8E:D1:3C:5A:6A:61:51:B7:DB:86:6B:26:D9:BF
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a3930303a3a2f34302d3430203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:4e:e6:15:d9:4c:b9:7b:06:d0:e4:c8:4e:da:80:54:bf:
         15:31:84:61:40:b6:2a:ea:37:0d:3f:b1:87:20:ab:25:ae:77:
         1d:0b:7a:76:e8:08:1d:d1:26:87:4d:2a:50:da:99:57:31:d4:
         f6:0e:88:f4:7d:26:85:e1:16:9a:cd:b2:e8:90:9e:8d:ad:93:
         ee:9b:1f:a2:01:5b:cd:38:ad:78:cf:61:cf:7b:d2:29:ed:db:
         57:c6:81:4a:1a:eb:e6:d5:fe:1a:3c:db:8f:97:e3:68:bb:ad:
         e7:9b:ac:ef:c7:f3:82:97:7a:b8:9f:ba:84:e0:28:36:49:3a:
         63:52:d7:15:4d:96:da:4e:9f:96:17:79:46:fc:6b:70:0f:7f:
         47:61:6f:33:91:84:ff:d0:ab:5a:a8:e3:61:bf:4a:a6:58:74:
         ac:3a:f3:5a:08:fe:92:91:0c:8a:8c:83:01:fc:70:3d:b0:2a:
         46:68:82:4b:da:bf:bd:10:5f:be:dd:df:09:63:f0:5d:13:da:
         d8:58:60:d4:36:93:a7:84:16:68:77:da:0f:e4:dc:64:e8:a4:
         d9:25:ab:21:5f:1b:fb:5f:44:e2:7f:d7:06:45:a3:c5:99:1c:
         ad:0f:d7:49:1d:79:fa:98:14:e7:60:34:5c:67:94:e3:51:68:
         13:55:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:27 2026 by rpki-client