Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383730303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a383730303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          jDCxR2rR/xSHTwYE7+iKdExHG7C5wRjKTjBan9lhTJw=
Subject key identifier:   6E:63:70:20:7A:F6:BC:30:F4:EB:64:48:57:C0:03:18:61:88:FC:67
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       0484F27992C77675E9B168984A644971A1D023E7
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383730303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:45 +0000
ROA not before:           Tue 04 Feb 2025 18:09:45 +0000
ROA not after:            Tue 03 Feb 2026 18:14:45 +0000
asID:                     61461
IP address blocks:        2803:d700:8700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:f2:79:92:c7:76:75:e9:b1:68:98:4a:64:49:71:a1:d0:23:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:45 2025 GMT
            Not After : Feb  3 18:14:45 2026 GMT
        Subject: CN=6E6370207AF6BC30F4EB644857C003186188FC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:dd:c7:93:4d:e9:0a:e4:45:a4:d7:66:72:
                    bb:76:76:b8:40:df:00:7a:49:d6:d0:d3:29:1e:e2:
                    65:a9:27:c4:d9:9d:26:91:46:d3:e6:0b:5d:17:38:
                    d7:ee:a9:c3:a8:30:01:44:3d:25:05:f3:ed:cf:82:
                    ec:b1:9e:dd:a7:3f:06:70:24:d8:64:74:81:4b:1d:
                    2e:7d:89:34:33:61:5b:a5:99:13:b8:a9:26:19:e2:
                    5d:eb:45:86:97:80:ee:39:d8:0e:bc:e1:a8:5a:a7:
                    47:64:36:21:b0:e9:66:87:98:6c:6c:d1:a8:90:20:
                    ff:37:8f:38:0b:14:89:80:00:41:df:a1:39:68:96:
                    68:c3:19:8a:23:37:74:53:83:9f:e6:1c:2c:6a:00:
                    a4:ce:82:13:a8:80:12:1d:b9:80:c0:f7:b7:cf:ac:
                    9d:9d:52:e8:0d:18:9e:87:f3:e8:65:79:2e:27:8b:
                    f1:47:33:8d:18:01:f5:7a:f6:11:87:c5:4d:2f:22:
                    f1:8a:48:40:17:62:e2:dd:c1:f4:cd:f3:2e:dd:5b:
                    3c:1f:25:14:c9:4c:25:1d:7a:32:28:63:34:62:c4:
                    33:27:cd:62:80:a2:e8:0a:ef:35:db:aa:09:9d:2d:
                    d3:3c:14:af:71:20:08:5c:81:13:1e:f1:ce:85:48:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:63:70:20:7A:F6:BC:30:F4:EB:64:48:57:C0:03:18:61:88:FC:67
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a383730303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:bb:92:98:e9:1e:7e:19:82:91:10:d2:46:db:9f:5e:32:3f:
         4e:76:82:7e:88:9a:96:92:b3:de:a9:b9:ca:c8:37:6c:ba:28:
         bc:a5:05:fa:02:dc:e8:b8:b9:c4:73:97:0c:cb:e4:be:63:1d:
         01:12:71:7c:d5:54:f9:49:f5:14:e7:73:c7:6b:70:ab:dc:db:
         3a:c7:c2:64:85:d4:56:86:16:58:55:bb:49:39:39:7e:a1:59:
         cc:e1:23:d6:ce:37:e8:f4:07:75:34:f2:79:90:0d:ef:32:09:
         15:18:ce:6b:70:0e:81:8b:9a:08:de:49:49:d1:84:5b:59:4c:
         8c:ff:5d:f6:58:3d:42:36:9a:4e:14:34:65:aa:11:ad:c3:aa:
         43:14:98:22:f7:3a:34:cd:64:e9:bb:b2:c6:25:70:d7:67:53:
         2a:b9:b5:02:dd:66:25:0d:ff:c9:d0:da:53:b3:68:86:31:c4:
         0b:0e:f4:d3:33:db:7f:e7:b5:9b:7b:f4:80:23:26:d9:00:b6:
         85:ab:4b:ee:5f:e4:92:41:e2:3f:b4:b3:e9:13:c8:b2:39:68:
         f2:12:19:d7:da:ae:ec:75:1d:92:26:14:a6:92:c3:3b:22:f0:
         ca:9e:01:7f:b9:c0:91:16:1a:b9:48:ec:60:c8:37:5e:97:c4:
         d2:ac:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:08:02 2025 by rpki-client