Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          ZaEc1fJwM69XYxhEmw2o2XsjiH+pXkzBeOvpixJtwqY=
Subject key identifier:   D6:96:6A:A9:3B:3D:13:66:AE:C9:9E:3F:27:CD:DA:2B:57:59:ED:2A
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       7CD4B02DF7BFD81A2F7A0DB5063EF94E70B1EA99
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:09 +0000
ROA not before:           Tue 05 Mar 2024 17:44:09 +0000
ROA not after:            Tue 04 Mar 2025 17:49:09 +0000
asID:                     61461
IP address blocks:        2803:d700:8200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d4:b0:2d:f7:bf:d8:1a:2f:7a:0d:b5:06:3e:f9:4e:70:b1:ea:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:09 2024 GMT
            Not After : Mar  4 17:49:09 2025 GMT
        Subject: CN=D6966AA93B3D1366AEC99E3F27CDDA2B5759ED2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:ef:5a:d0:b5:5b:80:c2:d3:01:8d:5d:0a:
                    b1:2b:78:5c:22:97:9a:5f:be:c0:1c:fa:39:b4:a6:
                    47:99:4f:6a:e0:72:90:af:22:1f:09:16:89:f3:85:
                    a2:5e:0e:eb:49:d3:b5:8f:37:90:98:93:97:b7:6a:
                    91:04:37:3a:23:a6:dd:80:b7:8f:cc:99:f7:99:45:
                    74:1c:a7:69:66:1e:ea:cf:dd:fe:ab:fb:bc:af:a1:
                    d9:e2:5d:c2:6e:4f:06:54:0c:ca:f8:5f:7a:56:b4:
                    25:bd:8d:f2:d4:f4:70:c5:5e:2e:02:e2:49:66:fd:
                    6f:e0:09:c1:a8:6e:4f:01:e9:e9:d4:e8:63:93:9d:
                    25:c7:a4:02:9d:64:9b:1d:e1:64:e8:f5:47:dd:5f:
                    73:2c:f9:57:f7:84:55:ca:43:70:b3:9f:ce:79:13:
                    9d:e3:fa:96:d3:8b:45:5a:51:cd:0d:e2:df:30:fa:
                    9c:a1:2b:60:32:0f:8d:ce:77:ef:ac:93:5c:fd:6a:
                    d1:0f:d5:c6:33:1c:c7:b6:d0:05:95:43:b4:40:9a:
                    f5:f0:35:ef:3f:0d:39:28:f9:dc:bb:b9:34:8f:28:
                    09:93:f4:c6:6f:49:59:78:a1:3c:0c:47:e9:60:70:
                    1b:44:94:e2:ff:eb:20:23:16:29:57:18:36:61:f8:
                    09:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:6A:A9:3B:3D:13:66:AE:C9:9E:3F:27:CD:DA:2B:57:59:ED:2A
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383230303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:4f:4d:88:bb:9b:7b:67:89:d5:72:96:71:8e:92:b5:22:
         7d:bb:ff:0f:2b:ae:d5:e8:10:bc:05:87:72:c0:8e:19:21:eb:
         70:d4:57:c7:8f:10:5d:e8:6e:c1:3b:40:38:be:0c:0b:8e:a9:
         83:74:ab:4b:ac:db:12:a2:72:4d:69:88:94:d8:39:1b:7a:10:
         16:a7:f1:84:35:de:c2:43:fe:d3:53:fc:f4:70:29:bb:6b:9c:
         11:b1:48:7b:f0:99:bc:42:2e:cf:0d:96:9b:99:ef:9e:8d:0e:
         b7:34:51:86:55:da:1b:33:fa:cb:3c:8e:f7:e7:a9:66:1b:ba:
         a0:4d:8b:82:b6:2b:71:9a:0f:7f:c5:00:33:72:95:36:67:3f:
         03:ba:13:da:c2:c5:0d:a5:81:5d:99:34:ad:8a:c0:2e:86:33:
         95:d7:5a:26:9e:ba:28:40:d0:65:ec:3c:7a:22:80:2b:ce:43:
         4c:d7:8f:40:09:15:24:b0:e8:ce:e3:9a:f3:76:84:e3:06:f3:
         81:11:3d:17:7c:b5:32:54:01:60:76:b5:c7:70:18:e2:21:6a:
         39:4e:37:b3:22:95:56:f4:ab:11:52:d3:e4:41:61:ed:66:9a:
         c1:48:8b:e7:b3:f9:52:d2:19:b8:a7:c7:23:fe:75:b6:8c:f0:
         c5:5d:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 22:22:36 2024 by rpki-client on console-ams.rpki-client.org