Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6130303a3a2f34302d3430203d3e20323635363035.roa
File:                     323830363a3336313a6130303a3a2f34302d3430203d3e20323635363035.roa (raw, json)
Hash identifier:          qcf/J7y9dblMSbjeVdEShELHukCG8WaVUgGK4+M45AY=
Subject key identifier:   D6:EC:68:39:12:EB:12:D6:5C:6D:E4:F1:F4:6A:06:AC:90:D4:01:CA
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       226E0DA0F7ADFD535183784E0370FCB2BDD856CD
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6130303a3a2f34302d3430203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:10 +0000
ROA not before:           Fri 06 Feb 2026 18:45:10 +0000
ROA not after:            Fri 05 Feb 2027 18:50:10 +0000
asID:                     265605
IP address blocks:        2806:361:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6e:0d:a0:f7:ad:fd:53:51:83:78:4e:03:70:fc:b2:bd:d8:56:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:10 2026 GMT
            Not After : Feb  5 18:50:10 2027 GMT
        Subject: CN=D6EC683912EB12D65C6DE4F1F46A06AC90D401CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:9f:7c:fd:67:8a:00:31:04:07:1d:f4:d7:
                    84:47:4f:f8:38:8a:61:37:1e:cd:98:3d:6c:24:4b:
                    38:8d:a7:de:08:eb:51:3f:9a:c5:a6:f2:41:ad:57:
                    96:95:1f:ba:e9:1c:4f:32:7d:3d:e7:7d:c0:86:3d:
                    8a:00:b8:78:e3:16:b0:45:9b:09:6f:89:e1:aa:55:
                    12:e8:a1:e9:69:30:62:35:01:b4:e7:2d:46:74:65:
                    73:36:2a:70:c6:dc:ad:0d:63:46:f9:2c:49:95:b2:
                    07:21:54:a3:ec:09:47:10:b3:94:32:84:cb:24:66:
                    05:f5:58:63:68:9c:f7:bb:40:9f:d6:c9:60:7b:9c:
                    64:96:48:98:fc:5e:a9:63:3f:26:98:0f:65:2f:6a:
                    5a:bf:f1:20:a6:b1:58:0f:ca:b6:b1:ea:bb:6a:32:
                    81:20:80:7c:85:bf:12:04:03:fa:c9:f9:be:52:14:
                    72:4a:52:b5:fa:ff:62:1f:81:ad:14:6b:a8:23:04:
                    1b:05:ef:1f:ed:97:70:06:7f:71:7c:e6:19:c6:fa:
                    dd:69:d1:ba:fa:8e:74:0d:11:fe:26:bb:1f:86:a1:
                    c6:72:6b:56:7d:97:15:e2:47:51:38:7d:d4:3f:eb:
                    1e:7a:77:05:bb:cb:e3:4f:9e:3c:08:54:76:e6:b7:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:68:39:12:EB:12:D6:5C:6D:E4:F1:F4:6A:06:AC:90:D4:01:CA
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6130303a3a2f34302d3430203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:6d:9d:26:ce:ba:18:94:82:c1:f1:5c:02:a9:29:57:b2:
         f1:44:ad:c8:07:eb:63:ff:55:b3:3f:cc:c9:a6:dd:60:d4:f0:
         cd:2d:6f:46:bf:28:cd:1f:6a:66:e4:4f:36:ae:5c:47:bc:f8:
         60:0a:f1:6d:54:70:4c:e5:cf:06:3e:93:04:5e:d6:ec:92:82:
         1d:51:7e:56:20:bf:b0:04:82:9f:0d:90:ce:13:3c:13:5b:27:
         54:0c:ac:4e:c0:4e:59:e3:9e:a1:0c:fa:71:1d:6e:8d:92:ae:
         b8:4c:49:7f:d5:4e:f9:b6:a1:95:04:3d:26:48:19:c6:86:34:
         12:fe:d8:30:6f:62:6d:89:80:ae:98:8f:0d:85:14:16:75:2c:
         e2:d0:60:66:79:42:14:37:19:a5:7c:c0:43:2d:8c:5e:1a:7a:
         aa:01:cd:af:0b:cf:6f:6c:8e:d6:f3:94:6b:2f:c4:44:d9:74:
         a0:c1:7e:50:ea:f3:38:6c:8e:3d:a4:25:df:18:94:be:ab:3d:
         bb:3d:38:a0:8b:ed:22:a0:9c:52:bd:5b:e5:9d:64:c0:a7:7c:
         f0:56:7f:d1:34:ec:b7:b0:d8:4e:96:44:ae:04:50:8a:5a:2f:
         72:f4:c7:10:8d:3a:f8:fc:50:d6:a5:10:94:74:c7:7d:69:aa:
         4e:fc:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:28 2026 by rpki-client