Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386130303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a386130303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          Jh8VkzW1WoLkxDP6B0sgXNYY+a/B3qDQDb44qJXre6w=
Subject key identifier:   51:B4:37:B7:B2:58:02:D9:D5:27:76:07:57:EF:CE:A3:19:9E:24:56
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       4BC7CFAC446B5E8B5E7683FFBC61024FE62DC698
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386130303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:06 +0000
ROA not before:           Tue 05 Mar 2024 17:44:06 +0000
ROA not after:            Tue 04 Mar 2025 17:49:06 +0000
asID:                     61461
IP address blocks:        2803:d700:8a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:cf:ac:44:6b:5e:8b:5e:76:83:ff:bc:61:02:4f:e6:2d:c6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:06 2024 GMT
            Not After : Mar  4 17:49:06 2025 GMT
        Subject: CN=51B437B7B25802D9D527760757EFCEA3199E2456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:1b:29:0f:ea:92:7e:b4:fc:1b:b7:4b:1a:
                    68:ee:f8:9e:30:f2:f5:81:76:6a:1d:d5:bd:1c:9e:
                    52:6b:32:e7:31:f5:d2:6b:6f:66:66:26:ed:d5:6c:
                    e7:d1:a8:fc:54:fc:77:54:3b:93:a6:52:79:d5:9d:
                    fc:e4:fd:53:98:a3:22:8d:9d:48:ec:3a:28:ea:f5:
                    e3:9b:8b:2b:69:e2:da:9c:c0:ae:b7:de:07:ee:ff:
                    e7:1c:fb:72:f5:b7:09:08:a8:39:27:40:2c:53:2c:
                    8d:4d:71:9e:f7:86:30:9b:4f:41:21:a0:41:f9:33:
                    8a:d8:ea:b2:67:dd:6c:a6:2d:f1:38:be:07:ec:5c:
                    ca:56:ce:70:b7:8b:85:02:53:fa:93:e8:80:ac:8d:
                    20:17:d9:bf:56:72:26:d4:ec:a8:c8:d4:25:a4:1e:
                    99:24:fa:94:f2:14:10:ce:a9:b7:fc:c1:e8:93:3d:
                    71:74:72:05:d2:05:b4:a2:ca:bb:66:dc:a6:28:0f:
                    79:20:5b:53:f7:40:8c:f6:d3:1b:a4:d1:66:a1:c6:
                    21:54:6e:57:53:0b:8d:46:c2:09:41:3a:52:04:2e:
                    50:1c:3c:d7:4b:37:47:14:98:97:01:19:f8:44:b5:
                    77:7b:99:f8:3d:52:9f:b5:d4:b6:b1:8e:16:a6:62:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:37:B7:B2:58:02:D9:D5:27:76:07:57:EF:CE:A3:19:9E:24:56
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386130303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:e5:26:67:e5:cb:3c:40:5f:70:13:0f:59:65:57:58:7c:
         a6:9a:0f:69:74:22:2b:21:9f:0f:e0:9d:dc:f6:79:de:c3:b4:
         be:5d:d9:3e:d3:49:e2:21:97:2c:cc:6a:49:7c:cf:f9:29:b4:
         f1:56:2b:e5:30:a0:e3:eb:6f:12:46:aa:62:76:c6:a9:84:f4:
         b8:5b:73:5f:fc:fe:4d:df:86:d2:51:44:2b:68:84:a2:34:fb:
         bd:e2:41:87:aa:7a:8d:51:fd:2b:04:68:25:51:03:cb:b4:5c:
         6c:4d:a0:97:3b:bc:b1:17:d6:94:3c:36:77:71:cc:a5:39:b8:
         6a:0b:29:a2:57:77:75:50:f1:2f:79:4b:29:d0:9a:19:48:56:
         43:ad:31:e9:46:b7:39:fb:38:21:ae:c3:21:8a:a7:01:1f:ed:
         76:b6:03:88:56:64:5c:46:d3:10:6f:d6:7f:a2:73:b4:1d:0d:
         fa:0d:c9:58:a6:db:b8:2d:89:4a:9a:3d:d8:c9:54:cb:56:07:
         b8:11:be:9d:5d:60:9f:0a:34:e7:91:c1:e6:64:20:c3:bd:28:
         78:36:0b:eb:84:02:15:b0:b7:ab:6a:a5:8b:c4:07:df:9e:d1:
         8e:2a:1c:eb:d4:ef:ed:00:a5:73:60:25:78:a1:fc:a9:b9:4e:
         a4:e3:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org