Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6430303a3a2f34302d3430203d3e20323635363035.roa
File:                     323830363a3336313a6430303a3a2f34302d3430203d3e20323635363035.roa (raw, json)
Hash identifier:          r9Dip9t2l6SISXXS+PDz7wUjoBJPoClim80HUUuAyBk=
Subject key identifier:   3A:BD:B9:DE:BE:07:CF:3F:B5:D5:20:FA:39:1B:3B:6E:7E:CE:54:C7
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       7A09DD0F1499B9732D938045C682EB668A432B5C
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6430303a3a2f34302d3430203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:08 +0000
ROA not before:           Fri 06 Feb 2026 18:45:08 +0000
ROA not after:            Fri 05 Feb 2027 18:50:08 +0000
asID:                     265605
IP address blocks:        2806:361:d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:09:dd:0f:14:99:b9:73:2d:93:80:45:c6:82:eb:66:8a:43:2b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:08 2026 GMT
            Not After : Feb  5 18:50:08 2027 GMT
        Subject: CN=3ABDB9DEBE07CF3FB5D520FA391B3B6E7ECE54C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:4e:b4:d7:ce:77:fb:e8:57:dc:e1:5a:c4:
                    e3:32:75:cc:81:d2:fd:31:9f:5d:6c:bd:be:e7:41:
                    77:c9:37:1d:ad:b0:cb:7d:c5:9e:d4:0b:8f:9a:2d:
                    d8:c7:0c:6f:4e:88:1d:fe:26:bb:c6:18:d2:24:f9:
                    01:03:b4:aa:df:a5:31:f7:80:a5:e7:2e:be:c9:04:
                    a0:99:31:65:fb:6c:5e:04:d6:d7:84:76:2a:5a:9d:
                    90:f2:c3:b8:70:96:a8:77:d8:62:ea:b3:7c:7d:d9:
                    e0:25:e4:17:b5:aa:b5:ef:52:27:04:57:f8:8c:bb:
                    46:0b:18:ba:99:71:11:72:a3:04:d9:ee:da:da:9b:
                    0f:25:d0:67:5f:b3:27:f1:58:5a:ad:ef:8c:7b:f1:
                    92:6c:79:d7:f4:98:c2:10:a3:77:79:e6:b8:26:0e:
                    8a:ef:c8:53:9a:65:f4:3c:17:48:5c:1b:ea:17:6f:
                    9f:d3:7c:09:e4:05:12:88:40:b8:96:bc:a7:58:a7:
                    0e:c3:1b:85:54:e9:44:f8:33:a1:54:55:86:16:01:
                    a2:54:a5:36:43:c1:2f:9b:a3:b6:63:2b:56:53:a2:
                    c5:40:3e:d1:57:b5:20:bc:7c:07:9a:ef:1a:db:f7:
                    a3:c2:5e:ac:7e:ed:98:b3:07:d0:f6:f3:15:13:24:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BD:B9:DE:BE:07:CF:3F:B5:D5:20:FA:39:1B:3B:6E:7E:CE:54:C7
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6430303a3a2f34302d3430203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:b0:0e:60:03:66:8f:23:2c:83:ec:f8:3c:72:38:d8:14:
         08:a0:f7:45:b3:f1:40:02:9d:7e:d7:e8:ac:d3:b6:2e:44:b5:
         f5:50:73:a6:6b:e1:aa:d3:80:30:ab:b9:16:7b:c7:be:76:1d:
         f2:62:85:3c:f0:19:63:29:33:02:3a:9e:63:2c:4c:6a:5a:75:
         32:c3:a0:48:39:ac:71:49:5d:4d:eb:ff:84:bd:99:f9:5f:50:
         aa:1a:4b:99:7a:31:ea:52:db:16:dc:6b:68:97:b4:06:c5:3d:
         e6:f8:3a:0f:23:a2:61:48:b0:d4:33:c6:58:97:05:5e:05:6a:
         77:b9:55:5e:59:82:08:5b:0b:7e:4a:2f:2b:04:eb:cf:59:22:
         9f:27:f7:9a:a1:c2:13:1e:96:01:cc:ae:b7:1f:b5:79:8e:e6:
         d5:8f:ca:eb:b2:08:cd:d2:1f:41:6e:6d:e2:2d:9e:ef:9a:16:
         3c:5a:c0:eb:81:29:c5:e9:2d:dd:cf:df:24:57:2e:0a:8a:63:
         de:d8:e1:32:28:73:e0:45:f0:3b:67:b5:4e:a4:ae:2a:3a:e6:
         18:b6:f2:37:12:40:81:23:be:81:6d:1c:de:db:62:9c:1b:a5:
         91:10:60:fa:ea:c2:80:c8:87:2e:83:8e:bf:5d:f5:76:57:dd:
         75:f1:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:28 2026 by rpki-client