Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a373030303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a373030303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          bqTio6XlJ+DBnaLC9tBmSoleWrGTNLNhudCyBu5KvzI=
Subject key identifier:   22:66:F3:C9:63:3B:55:C5:72:87:B4:7C:2E:D6:61:9F:E1:78:69:91
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       5CDE7057EC28635E2F415303FEF8613C68228292
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a373030303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:54 +0000
ROA not before:           Tue 04 Feb 2025 18:09:54 +0000
ROA not after:            Tue 03 Feb 2026 18:14:54 +0000
asID:                     61461
IP address blocks:        2803:d700:7000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:de:70:57:ec:28:63:5e:2f:41:53:03:fe:f8:61:3c:68:22:82:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:54 2025 GMT
            Not After : Feb  3 18:14:54 2026 GMT
        Subject: CN=2266F3C9633B55C57287B47C2ED6619FE1786991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:e8:c4:75:8c:f2:f3:dd:7a:bc:7e:7c:83:
                    93:b5:36:0c:5b:f2:62:71:17:61:5b:85:71:0c:79:
                    95:e0:7e:ef:c3:f2:05:e5:6e:39:72:84:04:46:ed:
                    fb:ff:24:23:bc:9a:b9:9b:c2:78:c6:4d:1a:9b:de:
                    d5:bf:3c:c0:5e:bb:58:ab:e9:75:ea:66:c9:cd:79:
                    1a:6e:54:66:e1:fc:ba:3d:55:42:e1:4e:aa:03:42:
                    a8:75:6e:66:07:8a:dc:ba:c2:de:f7:8c:95:a4:3a:
                    8b:61:2b:7e:9c:79:3d:82:64:af:11:d2:c2:a4:f8:
                    2b:b4:9d:a2:54:8c:d0:51:3b:af:ef:ea:dc:d7:b4:
                    86:5e:6a:1b:98:6c:ba:2c:4c:2b:00:db:75:96:70:
                    87:e7:60:18:3a:9b:ec:7e:48:a7:60:24:8e:42:26:
                    f6:29:73:c6:58:e4:84:92:b9:4d:87:56:83:bd:08:
                    d8:1f:80:27:de:a4:25:70:f0:6e:19:5f:fd:80:9d:
                    cb:c9:0d:bc:0a:d9:9e:f3:d0:a3:22:67:a4:e6:41:
                    4b:0b:ec:65:53:ba:48:ec:30:bc:68:de:b6:3b:4f:
                    b0:79:d6:aa:09:9b:70:9b:5a:66:0c:f5:6a:76:4b:
                    e1:97:d0:cf:c8:a3:da:d5:d8:36:ee:c8:dd:c5:a8:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:66:F3:C9:63:3B:55:C5:72:87:B4:7C:2E:D6:61:9F:E1:78:69:91
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a373030303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:84:16:68:36:e1:a1:9d:91:83:6c:9d:d5:27:8f:2c:a7:
         e4:25:2e:6e:16:0a:eb:71:78:8a:8b:94:30:36:25:65:f2:ae:
         7e:98:08:f5:3a:30:e9:73:9e:18:ae:ed:ba:92:f8:17:e8:47:
         41:8d:3c:a6:36:1b:e2:03:86:18:99:e5:24:0e:6d:43:c5:7b:
         11:a7:1d:85:6c:31:e8:50:c7:9a:b0:37:98:d0:1c:28:55:b9:
         24:00:f3:e2:aa:bc:d3:3a:d8:b5:62:78:b0:fa:49:cf:b7:71:
         03:17:de:aa:6f:da:d3:73:7c:1f:3b:45:88:e4:93:36:a6:c0:
         c5:f0:06:5b:4a:bf:eb:2d:9c:4c:3d:7e:be:a3:a3:bb:07:0f:
         53:71:f4:1c:6c:9d:e9:ae:b3:c6:af:8c:c4:73:48:b1:e1:ae:
         23:2a:43:7d:a3:08:6b:52:34:d0:e2:a2:ac:43:4e:08:fe:44:
         d5:db:73:60:aa:63:d2:cb:71:b3:0c:56:2d:9e:79:67:7f:5c:
         ce:37:97:bc:7e:ca:cf:05:46:09:51:3b:2e:c5:53:30:1b:52:
         e4:ad:b5:c1:98:e1:fc:7d:37:e0:67:f7:9c:7f:34:53:9a:29:
         93:ed:36:cf:e6:1c:bf:10:62:62:b7:86:c1:ec:5b:c6:f4:36:
         01:3a:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:41 2025 by rpki-client