Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6530303a3a2f34302d3430203d3e20323635363035.roa
File:                     323830363a3336313a6530303a3a2f34302d3430203d3e20323635363035.roa (raw, json)
Hash identifier:          15Vnaqk9l10LUTsYu7fM3Wph7exmhPnDNbZhvMf0JSE=
Subject key identifier:   7C:7F:6A:0E:9C:2D:4F:50:C3:D6:B7:A5:3A:11:DB:6E:5F:8F:CA:B8
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       712AA7EFA451EDEEAE61472CAFC32E8B7012A26F
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6530303a3a2f34302d3430203d3e20323635363035.roa
Signing time:             Fri 06 Feb 2026 18:50:07 +0000
ROA not before:           Fri 06 Feb 2026 18:45:07 +0000
ROA not after:            Fri 05 Feb 2027 18:50:07 +0000
asID:                     265605
IP address blocks:        2806:361:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2a:a7:ef:a4:51:ed:ee:ae:61:47:2c:af:c3:2e:8b:70:12:a2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  6 18:45:07 2026 GMT
            Not After : Feb  5 18:50:07 2027 GMT
        Subject: CN=7C7F6A0E9C2D4F50C3D6B7A53A11DB6E5F8FCAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:2e:8f:90:c2:b4:b2:dc:96:b0:22:2e:9a:
                    b1:7b:70:20:86:79:bb:fd:e1:66:e3:6e:44:cb:07:
                    56:c5:26:36:91:2a:d2:e4:74:75:da:0a:e9:58:45:
                    3a:57:04:1b:a4:33:35:96:ad:29:2c:39:a8:d8:3a:
                    79:07:06:6c:6f:4c:ba:2c:4c:c1:84:b7:94:e6:85:
                    60:30:f0:01:44:00:61:44:54:fe:65:f9:34:ae:01:
                    45:5b:1e:ab:6d:af:8c:32:3f:19:b5:22:4c:7f:ca:
                    68:4e:0f:f8:0f:c2:b8:93:61:fb:a6:6e:c9:1f:f2:
                    a5:12:a3:e7:97:e9:96:2f:b5:6d:54:2c:6e:fb:d2:
                    86:86:ad:09:e4:ba:c2:87:a2:2f:11:fb:9c:f5:bb:
                    91:c7:2d:18:ff:dc:15:5c:a1:04:82:b4:7b:f2:68:
                    2a:bd:8a:57:f5:90:17:9f:76:a6:f5:f8:f2:e9:22:
                    8d:63:3a:4e:09:e5:bd:da:37:36:db:56:2b:2e:0d:
                    d7:a6:a1:19:73:8d:d5:af:ce:fe:da:a6:81:4c:56:
                    40:7f:f9:51:a7:80:61:6f:50:81:be:1a:33:a4:99:
                    6f:3f:aa:d0:1b:46:38:bb:f9:6a:0a:21:2a:f4:31:
                    b5:9f:82:3e:1b:e7:ca:48:28:4c:3d:11:5e:11:22:
                    ca:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7F:6A:0E:9C:2D:4F:50:C3:D6:B7:A5:3A:11:DB:6E:5F:8F:CA:B8
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/323830363a3336313a6530303a3a2f34302d3430203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:78:7f:02:db:3f:f2:d1:96:90:b5:ab:7d:88:72:84:00:
         d4:f4:ff:17:84:47:59:3a:d0:bf:ca:f2:47:c8:7a:a0:0b:4a:
         06:a1:d3:11:5c:70:2f:33:16:24:ea:e4:08:11:76:7f:6e:b0:
         16:cc:30:50:ca:6e:4c:be:23:ac:f5:6f:90:31:ba:28:85:73:
         43:2c:ba:d1:88:16:23:75:1c:af:c8:ce:73:6c:03:30:e5:15:
         d0:05:b4:2c:7f:d6:5b:bf:fa:90:0f:0e:80:9d:5e:cc:44:8f:
         b0:fd:9c:05:da:cf:5b:de:ae:bc:4c:4e:3c:02:a5:b0:0d:c3:
         db:92:19:c6:29:fe:b9:ed:71:d6:56:80:0e:96:56:03:af:dc:
         12:c6:74:08:e0:33:d1:94:c6:0d:52:56:fc:70:6b:f9:a4:56:
         c6:c1:c6:d0:aa:61:3a:08:eb:c4:d0:ba:e8:7f:87:6b:3c:79:
         f2:e0:63:98:c6:a8:ce:c3:70:62:c2:5f:bb:96:81:9b:e3:9f:
         c8:3a:91:10:ff:d6:24:03:34:b5:66:28:d5:63:2f:c6:8d:c5:
         29:f2:65:56:00:67:ae:1b:c8:aa:9e:bc:d5:88:27:ae:c9:0b:
         be:cd:c4:75:3b:df:7d:85:f1:1a:81:01:4f:f6:15:c1:6e:42:
         e9:82:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:29 2026 by rpki-client