Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          IwxHN/1x+fhFegZ0s4gmbKgqi4t/hWnhsd1u4vd/Gyg=
Subject key identifier:   C2:85:EF:72:17:FF:5A:13:37:0E:27:97:80:3E:B6:BF:23:DD:0D:08
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       3CAC3E00F5CA6E43BE8E2573E67D8122011A66AB
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:51 +0000
ROA not before:           Tue 04 Feb 2025 18:09:51 +0000
ROA not after:            Tue 03 Feb 2026 18:14:51 +0000
asID:                     61461
IP address blocks:        2803:d700:8600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ac:3e:00:f5:ca:6e:43:be:8e:25:73:e6:7d:81:22:01:1a:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:51 2025 GMT
            Not After : Feb  3 18:14:51 2026 GMT
        Subject: CN=C285EF7217FF5A13370E2797803EB6BF23DD0D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:0c:9e:38:2f:e3:b3:13:1b:42:4f:c9:d8:
                    1d:87:84:ff:27:6d:45:9c:1b:07:2e:fa:84:d1:f0:
                    e4:11:9c:f4:24:88:91:2d:21:70:e8:58:d6:b5:cf:
                    a2:f9:c0:fd:c8:93:f3:2f:07:30:c0:fc:46:92:e2:
                    cc:b4:fa:6c:07:71:87:d1:a9:68:95:ee:78:90:b6:
                    00:71:31:22:d7:02:d2:76:81:72:18:02:aa:c6:b6:
                    8f:6a:0d:3b:a3:c1:c8:c7:13:6b:e0:c7:64:9c:c0:
                    bb:27:04:a2:bb:28:49:3e:e9:a2:f8:75:d5:c4:b5:
                    f0:7b:ae:bf:ba:1f:7b:af:d1:5d:40:c4:2c:3a:03:
                    48:ea:59:2c:57:53:35:04:fa:a7:5a:2d:86:e4:f5:
                    02:f8:ea:66:62:91:12:ba:b1:9b:9f:0e:47:72:4e:
                    eb:31:4b:c1:4b:dd:f0:9b:30:13:f0:72:6e:f7:d9:
                    20:21:11:d7:72:d1:d0:d6:db:2a:7f:c1:5f:e5:de:
                    f3:7f:b9:89:3c:4c:b0:e7:d1:93:95:c4:37:40:4b:
                    6b:f8:f2:68:67:c6:a7:ff:77:e2:4f:78:46:a5:d7:
                    6c:2c:b2:04:6d:f8:4a:6b:1a:f5:30:a2:bc:cc:36:
                    be:81:d3:e4:59:f5:0c:f6:06:7d:66:a5:70:2e:b6:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:85:EF:72:17:FF:5A:13:37:0E:27:97:80:3E:B6:BF:23:DD:0D:08
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383630303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:32:a1:e8:4f:0c:c0:ac:1a:e8:19:ad:2f:d8:00:a4:40:
         86:61:91:89:d0:99:95:2f:90:df:56:32:c0:dc:d9:53:37:4b:
         cb:b9:76:e4:74:90:08:c4:c6:1d:86:5c:94:5a:fd:94:a4:7e:
         02:26:9a:43:62:cc:05:9d:26:da:9a:28:cd:68:25:ad:37:bc:
         a7:20:31:51:ea:57:a0:35:b2:8b:e3:b5:3c:8c:8e:5a:48:e2:
         0a:10:d5:2a:5c:f7:00:d8:df:f1:93:ac:df:22:db:0f:2f:c9:
         33:96:d9:fe:83:ed:5a:8b:28:00:2e:cd:8b:05:f5:bc:d4:5f:
         a3:d2:b7:92:18:01:3e:17:84:c9:b0:e4:95:f7:3b:89:c0:25:
         e4:c5:ca:98:b3:a8:14:0a:26:c4:f5:bd:2f:51:b9:ab:8e:dc:
         5f:8d:e1:e3:b3:b3:ce:ae:c4:49:e6:47:aa:90:15:c7:b0:c2:
         3b:61:03:65:15:a0:69:8d:b7:4a:14:8b:90:83:38:1c:6a:c2:
         b9:45:e4:7f:d6:ff:92:dc:f7:06:a0:d3:69:28:65:96:98:bb:
         dd:aa:bd:5e:fa:a1:95:94:49:29:54:99:10:47:d5:7a:1c:19:
         10:d8:14:bc:bd:73:19:3e:74:c6:a5:24:22:a7:7c:0e:c2:a4:
         c7:8d:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:33 2025 by rpki-client