Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383430303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a383430303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          wNwPZ4RhFDkjsD5/dDz+YeBo08EEsjix6ZLpa4hFAFw=
Subject key identifier:   4B:A1:FD:43:B1:C1:68:6C:06:E7:92:F5:18:DF:AF:D0:1B:6C:B6:02
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       27A037CF358533AF59D494F3D96FC304B2AF6791
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383430303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:02 +0000
ROA not before:           Tue 05 Mar 2024 17:44:02 +0000
ROA not after:            Tue 04 Mar 2025 17:49:02 +0000
asID:                     61461
IP address blocks:        2803:d700:8400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a0:37:cf:35:85:33:af:59:d4:94:f3:d9:6f:c3:04:b2:af:67:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:02 2024 GMT
            Not After : Mar  4 17:49:02 2025 GMT
        Subject: CN=4BA1FD43B1C1686C06E792F518DFAFD01B6CB602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:ba:fd:b8:f7:97:a9:ab:1c:74:24:df:21:
                    42:91:37:f2:cd:bc:28:ab:dd:af:43:0e:16:c6:26:
                    5b:ff:ce:98:15:41:84:e9:fc:6b:e7:2f:bf:3f:7e:
                    3e:30:79:f3:05:60:ef:93:bf:ea:d0:a7:8b:a8:5f:
                    dd:23:63:d9:19:e7:83:b8:42:29:95:bf:1b:05:a7:
                    6e:ad:f9:46:26:6c:f3:02:d0:b9:b6:d6:86:d2:01:
                    ca:6f:35:00:4f:dc:fb:fc:39:bc:c5:cc:63:df:ad:
                    50:14:27:28:5b:e5:a9:eb:92:89:4e:5a:f7:45:d5:
                    82:28:6a:fc:69:2e:23:67:d6:55:9a:36:18:2a:77:
                    62:a7:04:e5:15:d1:84:cb:68:3c:08:59:85:5e:c1:
                    28:1e:b0:a9:b6:8e:b0:88:60:49:f6:86:a4:c9:3a:
                    80:c6:da:6d:46:76:e9:09:6e:de:3d:96:fc:6b:19:
                    53:83:12:a6:18:85:7e:b8:d1:fc:d9:1f:fb:f0:62:
                    63:14:40:a8:97:a9:95:c4:0a:ae:16:a1:76:e6:86:
                    16:a8:6e:b5:3a:54:17:71:da:b3:e7:27:45:0f:b7:
                    ba:4d:36:ca:5e:5e:1f:a8:73:ed:64:f8:c9:89:b6:
                    89:60:3f:b7:14:86:95:68:e9:ab:02:bc:b5:e7:24:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A1:FD:43:B1:C1:68:6C:06:E7:92:F5:18:DF:AF:D0:1B:6C:B6:02
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383430303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:87:62:43:16:ee:b9:fc:74:a0:a2:84:83:32:90:ee:19:
         94:49:77:46:28:dc:0b:ae:0b:df:0d:b8:19:ac:be:d7:d7:a3:
         f3:cb:a8:95:d0:97:e0:a6:bf:fe:89:bb:55:aa:a3:21:a0:e3:
         21:e4:4a:b5:fe:79:ac:87:ab:56:70:f3:33:d4:a2:25:1a:26:
         2c:88:54:c4:6c:14:59:24:a0:cc:96:79:90:6a:a2:86:50:48:
         05:1c:d4:29:5e:a8:b9:12:22:07:49:39:32:94:27:a7:e4:96:
         fe:20:af:57:e4:ec:9d:56:7a:66:ef:9f:81:bc:da:52:49:53:
         f1:f8:43:56:f5:c0:2b:f2:75:c4:d0:b6:8d:52:46:10:c6:e1:
         60:23:83:b6:f9:92:bc:91:5c:63:fc:fe:17:bb:9a:cc:d6:50:
         98:76:e0:07:79:6f:e6:37:66:6e:7e:b5:ae:b7:5f:5f:6c:21:
         44:df:c5:87:7c:3b:ba:a2:3e:dc:f8:7c:85:22:de:b1:8a:a4:
         57:48:1b:a8:7c:35:c5:1c:61:72:da:f9:d6:4a:c6:93:e1:1f:
         2f:ab:79:97:d1:d3:1b:71:39:98:42:6d:02:2d:06:25:60:40:
         6c:4e:28:20:af:ba:46:db:12:d9:02:94:87:07:74:22:b0:27:
         4d:da:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org