Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383330303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a383330303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          OpGFpTa2SDYrELPhN40cs0SvxPp7pZyBzKzAoDPK3Wg=
Subject key identifier:   37:D9:6A:3B:2F:79:05:FD:E1:30:D8:03:0F:A0:7C:91:AB:1C:22:50
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       729968A4F6B4B89C6675C5F48589E2594EF0C98A
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383330303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:01 +0000
ROA not before:           Tue 05 Mar 2024 17:44:01 +0000
ROA not after:            Tue 04 Mar 2025 17:49:01 +0000
asID:                     61461
IP address blocks:        2803:d700:8300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:68:a4:f6:b4:b8:9c:66:75:c5:f4:85:89:e2:59:4e:f0:c9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:01 2024 GMT
            Not After : Mar  4 17:49:01 2025 GMT
        Subject: CN=37D96A3B2F7905FDE130D8030FA07C91AB1C2250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:6b:75:b7:3f:d8:4b:9e:48:04:41:db:fe:
                    88:43:a4:18:fd:d4:42:65:df:5a:2d:a9:a3:d4:ab:
                    e2:51:bb:3e:9a:a1:de:9d:f3:24:e1:15:b0:08:35:
                    c5:31:32:6e:94:14:8b:43:26:5e:22:4d:e0:d0:39:
                    bd:09:8b:43:84:55:d1:c0:ef:d5:8c:ee:44:ea:72:
                    cd:02:22:3c:8f:f5:2c:89:40:49:f9:7a:57:9b:a0:
                    0c:6f:56:04:8a:19:4c:fe:24:56:92:46:ea:f8:e2:
                    8b:b6:50:0b:19:03:d6:a5:04:c5:e1:ac:05:f9:dc:
                    0f:20:01:9c:d1:cb:63:a5:26:33:7c:ce:e7:ac:96:
                    99:3b:04:7c:d7:eb:07:95:cb:f5:f4:31:45:ad:53:
                    ee:0d:42:95:4b:f9:07:97:19:f8:55:d8:2c:c7:47:
                    08:a0:e1:ee:09:cc:3c:37:f6:10:ca:50:35:ed:46:
                    bf:8b:32:f1:a9:ce:6d:09:29:ec:52:68:49:5d:4c:
                    c1:23:da:86:4b:ad:05:4d:9b:48:02:44:dc:1a:86:
                    33:9f:e7:7e:c4:ed:9e:49:f4:ca:14:00:b5:a5:7b:
                    54:1e:87:18:fb:24:f6:6a:d2:4b:4f:3b:9e:2c:c1:
                    ff:65:04:7e:29:5c:81:7d:28:85:7b:a1:92:74:b1:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D9:6A:3B:2F:79:05:FD:E1:30:D8:03:0F:A0:7C:91:AB:1C:22:50
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383330303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:26:bd:8f:58:09:80:95:e6:8e:d6:40:3d:9c:48:2d:9a:
         6a:81:9c:75:aa:11:5b:83:c3:56:cd:ab:e9:a6:5e:a4:2f:57:
         c3:09:c3:c6:a4:5c:c5:21:27:d4:70:d6:29:be:62:01:ac:b9:
         da:59:2f:c8:e4:b6:b3:a7:68:7f:12:cc:fb:b9:c9:6d:a8:06:
         ba:2b:fa:46:51:b5:eb:7e:a8:65:17:ce:93:3e:13:87:df:e1:
         5e:03:bc:c6:c1:3e:34:9c:28:39:46:6c:ec:bf:23:88:49:a9:
         2e:ae:5c:a3:db:4d:3f:99:54:b8:6e:1b:90:2b:82:6c:7d:7c:
         7a:6c:0c:96:d3:09:5c:f0:23:8f:7e:0e:41:88:51:28:45:e3:
         e8:78:18:3b:72:cb:96:05:44:44:08:ab:57:26:24:af:5f:1d:
         8b:17:3f:fd:96:47:c4:b3:8a:a1:02:40:cc:4b:a1:88:17:ce:
         51:d2:ab:60:89:62:a7:5b:d7:e0:98:dd:c1:de:8f:7e:e7:a8:
         9a:56:25:20:f3:19:23:ce:2f:f9:6c:fd:09:dd:9a:14:75:7e:
         13:3f:fa:49:51:e9:e4:43:f9:b8:87:16:2b:2f:a4:7b:25:18:
         58:a4:3e:8c:10:c4:50:56:ce:44:02:b2:31:aa:96:ec:09:ce:
         10:a9:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org