Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          ZY6F/Pxpzi2IMRjz0qCUA/8/XCNTni+1r4Tl5lPd9TY=
Subject key identifier:   90:17:D2:9A:95:56:7D:58:C0:01:E5:CB:64:2A:2B:36:CB:6D:60:22
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       2E164D4D2E85647B25963877908820FE4A0BE0D4
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:51 +0000
ROA not before:           Tue 04 Feb 2025 18:09:51 +0000
ROA not after:            Tue 03 Feb 2026 18:14:51 +0000
asID:                     61461
IP address blocks:        2803:d700:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:4d:4d:2e:85:64:7b:25:96:38:77:90:88:20:fe:4a:0b:e0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:51 2025 GMT
            Not After : Feb  3 18:14:51 2026 GMT
        Subject: CN=9017D29A95567D58C001E5CB642A2B36CB6D6022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:15:5b:e6:a1:c6:4a:8f:10:30:72:c3:ba:
                    db:09:3d:08:7e:7f:13:99:0c:f9:d4:4b:91:c8:5e:
                    75:13:c7:3c:3d:5d:90:3d:5b:c6:37:3c:87:e8:58:
                    b2:af:70:37:f5:7a:4e:e3:c0:90:83:45:51:72:c6:
                    64:33:86:bf:f9:10:10:84:cb:d6:1e:56:63:a1:bf:
                    0e:c5:52:de:f5:5d:28:23:e7:22:d2:20:d2:ce:95:
                    72:31:30:8d:b8:b5:75:40:f6:53:30:22:05:70:52:
                    f4:95:b1:d8:3b:18:88:1f:8f:fe:34:97:6a:e8:91:
                    84:85:36:d2:80:ec:9e:65:98:42:0d:dd:a8:34:1e:
                    fd:3a:ad:cc:e2:d2:10:86:e3:6f:0a:cc:78:61:57:
                    e6:02:a1:24:a6:59:de:80:95:08:a3:11:11:0d:d8:
                    9b:bd:c9:e6:d8:cb:b4:fb:3b:3c:b3:25:12:18:25:
                    c1:d2:29:1d:7b:87:7a:66:91:e1:67:a6:31:00:53:
                    96:9f:8d:7f:0a:31:e3:8f:db:f9:48:29:b8:22:41:
                    24:07:e4:82:b3:00:ff:5e:aa:d4:31:cd:ad:05:f4:
                    9d:41:78:ff:61:58:77:42:cb:12:fa:cf:2f:c1:16:
                    86:9f:16:44:42:5a:1a:7d:ea:47:26:13:fa:76:50:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:17:D2:9A:95:56:7D:58:C0:01:E5:CB:64:2A:2B:36:CB:6D:60:22
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a343030303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:74:3f:5d:bd:83:bd:85:b1:5b:7b:9b:04:69:5c:ed:bb:b4:
         5d:0a:5f:1d:7f:c8:0d:b6:c4:bc:3b:1e:72:5c:59:e8:62:99:
         1d:73:84:41:25:31:83:58:31:5d:bd:0b:d3:59:d5:4e:d1:24:
         20:c4:33:cd:37:bd:f3:b3:56:da:c8:71:ee:81:f4:11:ac:a3:
         76:19:26:97:1f:07:4a:37:35:cc:b0:e1:5a:31:a3:69:42:08:
         20:30:45:fc:ac:e8:eb:ec:6e:fd:74:43:64:b1:0f:ba:e8:2b:
         f8:2a:b5:0b:1c:03:9a:7f:1e:6e:8b:38:27:e3:87:c1:3f:5c:
         fd:ed:8a:ac:9d:08:59:5f:9d:d0:5f:0b:1d:04:35:c0:00:ac:
         ff:55:8e:ae:91:fc:94:57:f3:0b:78:b1:b0:ec:02:a1:15:ce:
         ab:6d:71:a5:ab:e6:f4:3b:c4:72:5b:3b:6a:0f:c9:91:e6:0a:
         e0:ed:2e:e7:dd:25:0b:a9:10:18:cb:58:94:cf:b5:48:b1:89:
         99:2c:c5:82:4d:76:8d:66:9d:a5:10:2a:a1:26:c4:00:f9:48:
         69:11:bb:5a:3a:34:e3:16:39:6e:59:71:41:09:6a:3d:9d:b5:
         94:be:39:66:f7:b7:e6:cc:cf:ff:50:ac:53:4c:1b:64:76:4b:
         e6:25:f6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:49 2025 by rpki-client