Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa
File:                     323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa (raw, json)
Hash identifier:          PTX1AnuWVq6PgfqG0shB2MFjUNbkEZ5GlN7/mduopS8=
Subject key identifier:   E8:B9:88:66:96:55:C0:AB:B6:C2:D6:DD:B1:17:EE:1E:C0:DB:6C:23
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       3337952B7EE3A00EC97960B96ADA7C1378AD565A
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa
Signing time:             Sat 14 Feb 2026 19:30:36 +0000
ROA not before:           Sat 14 Feb 2026 19:25:36 +0000
ROA not after:            Sat 13 Feb 2027 19:30:36 +0000
asID:                     272373
IP address blocks:        2806:419:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:37:95:2b:7e:e3:a0:0e:c9:79:60:b9:6a:da:7c:13:78:ad:56:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: Feb 14 19:25:36 2026 GMT
            Not After : Feb 13 19:30:36 2027 GMT
        Subject: CN=E8B988669655C0ABB6C2D6DDB117EE1EC0DB6C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:ab:fb:b1:34:8e:46:27:1a:5f:00:a2:1b:
                    e6:d9:98:25:a0:e3:68:c2:84:bb:d3:ce:c6:e1:ca:
                    37:f2:22:13:b8:d1:3e:7d:22:3e:7b:17:88:99:80:
                    ca:01:d2:be:1e:4d:09:18:c7:74:0a:8b:59:05:01:
                    2b:7a:8e:a3:2c:7c:9b:40:97:7e:cc:8f:54:f0:0d:
                    d1:94:79:6c:50:9e:98:9a:18:e2:b1:a6:12:b3:f2:
                    c3:42:1a:e2:b4:b6:52:57:89:d3:05:2c:61:87:60:
                    f6:de:4d:78:48:b4:eb:fd:ff:0b:91:13:fc:f7:71:
                    4f:e4:6d:0b:84:df:09:88:52:89:a3:af:63:e6:75:
                    27:36:a7:e0:6a:c7:7e:55:d0:73:c1:36:86:b6:70:
                    29:98:55:14:a4:06:03:90:8c:5b:b7:de:2b:f0:56:
                    00:5b:b3:50:aa:0a:55:da:77:af:29:db:d9:cf:a1:
                    d8:01:4c:d0:39:57:c6:54:0b:89:57:b5:78:8b:73:
                    3f:41:ed:fd:0d:d7:cb:5a:1a:dc:74:e9:ec:fc:eb:
                    7e:09:08:a1:6a:d0:5c:a6:07:59:81:5c:4f:2d:3a:
                    fe:7e:86:2a:13:cb:3a:c0:c6:15:c2:01:ad:fb:03:
                    16:74:36:3a:d9:fb:f7:16:b6:b3:76:e2:46:14:84:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B9:88:66:96:55:C0:AB:B6:C2:D6:DD:B1:17:EE:1E:C0:DB:6C:23
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a323a3a2f34382d3438203d3e20323732333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:5a:66:94:d2:f9:43:ae:8e:0a:ff:6b:fb:fb:91:d2:1d:e7:
         22:c9:6e:f4:6f:38:73:67:bd:06:08:f5:72:45:f2:71:c5:ba:
         8f:68:98:89:cc:28:b1:e3:e2:9f:69:35:3f:6d:ec:2e:38:71:
         06:63:c0:af:06:1d:7e:f3:e5:ba:38:08:dd:91:d6:e0:ff:72:
         84:20:39:c4:45:e0:5e:1c:5a:f3:5d:fe:a2:c5:71:4f:39:95:
         58:af:3a:64:2f:17:93:7f:71:08:db:02:80:61:b6:0f:06:9f:
         86:3e:68:8e:93:62:06:86:35:9e:07:b6:89:26:4b:c9:a3:f3:
         71:d7:3a:16:1a:03:8e:13:1d:44:d2:ba:04:5d:ca:08:66:0b:
         bb:97:45:13:0c:39:ac:6d:2e:9a:ec:20:18:07:97:7f:b7:af:
         a0:12:93:b5:88:5a:97:84:08:0d:6a:be:f6:10:39:e2:59:ae:
         26:91:dd:c0:1b:91:12:db:a2:14:ac:59:85:a4:b3:c2:91:d7:
         9d:ec:23:72:32:6b:c6:87:93:8a:ac:7f:f2:52:30:82:17:dd:
         bc:5c:51:b3:84:b2:5a:6d:7d:41:65:10:05:ac:f0:51:4e:b3:
         7c:7a:93:3f:b5:54:88:84:42:69:f0:b7:b9:11:6c:88:42:8f:
         fa:8a:13:6d
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUMzeVK37joA7JeWC5atp8E3itVlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyMEJDMzAxMTgzNzQ2Q0FFODJFMEJDQUUzNTNCNkJD
OUEyNDU2ODAeFw0yNjAyMTQxOTI1MzZaFw0yNzAyMTMxOTMwMzZaMDMxMTAvBgNV
BAMTKEU4Qjk4ODY2OTY1NUMwQUJCNkMyRDZEREIxMTdFRTFFQzBEQjZDMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVF6v7sTSORicaXwCiG+bZmCWg
42jChLvTzsbhyjfyIhO40T59Ij57F4iZgMoB0r4eTQkYx3QKi1kFASt6jqMsfJtA
l37Mj1TwDdGUeWxQnpiaGOKxphKz8sNCGuK0tlJXidMFLGGHYPbeTXhItOv9/wuR
E/z3cU/kbQuE3wmIUomjr2PmdSc2p+Bqx35V0HPBNoa2cCmYVRSkBgOQjFu33ivw
VgBbs1CqClXad68p29nPodgBTNA5V8ZUC4lXtXiLcz9B7f0N18taGtx06ez8634J
CKFq0FymB1mBXE8tOv5+hioTyzrAxhXCAa37AxZ0NjrZ+/cWtrN24kYUhF1vAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQU6LmIZpZVwKu2wtbdsRfuHsDbbCMwHwYDVR0j
BBgwFoAUeyC8MBGDdGyuguC8rjU7a8miRWgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDZENjRDQUU3NTdFMjk3QzA5N0Y3Qjc5ODFCRDY2NEEx
OUQyOTA0MjQxRENBQUMxMzU3NEYyNTY0RUJCOTNGLzAvN0IyMEJDMzAxMTgzNzQ2
Q0FFODJFMEJDQUUzNTNCNkJDOUEyNDU2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjIwQkMzMDExODM3NDZDQUU4
MkUwQkNBRTM1M0I2QkM5QTI0NTY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQ2RDY0Q0FFNzU3RTI5N0MwOTdGN0I3OTgxQkQ2NjRBMTlEMjkwNDI0
MURDQUFDMTM1NzRGMjU2NEVCQjkzRi8wLzMyMzgzMDM2M2EzNDMxMzkzYTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNzMyMzMzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAYE
GQACMA0GCSqGSIb3DQEBCwUAA4IBAQCzWmaU0vlDro4K/2v7+5HSHeciyW70bzhz
Z70GCPVyRfJxxbqPaJiJzCix4+KfaTU/bewuOHEGY8CvBh1+8+W6OAjdkdbg/3KE
IDnEReBeHFrzXf6ixXFPOZVYrzpkLxeTf3EI2wKAYbYPBp+GPmiOk2IGhjWeB7aJ
JkvJo/Nx1zoWGgOOEx1E0roEXcoIZgu7l0UTDDmsbS6a7CAYB5d/t6+gEpO1iFqX
hAgNar72EDniWa4mkd3AG5ES26IUrFmFpLPCkded7CNyMmvGh5OKrH/yUjCCF928
XFGzhLJabX1BZRAFrPBRTrN8epM/tVSIhEJp8Le5EWyIQo/6ihNt
-----END CERTIFICATE-----
Generated at Wed Feb 18 21:40:08 2026 by rpki-client