Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          01AOyk2UqqmaIFg8fVEOHSPp6UX3DTir40fPwNC4k0Q=
Subject key identifier:   17:B7:C9:BC:D1:FC:38:6B:82:45:93:B1:75:42:6C:48:0C:A7:ED:AB
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       13691D2C4F0EE9BFD2DCCDB797F5A929561BA514
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:03 +0000
ROA not before:           Tue 05 Mar 2024 17:44:03 +0000
ROA not after:            Tue 04 Mar 2025 17:49:03 +0000
asID:                     61461
IP address blocks:        2803:d700:8f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:69:1d:2c:4f:0e:e9:bf:d2:dc:cd:b7:97:f5:a9:29:56:1b:a5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:03 2024 GMT
            Not After : Mar  4 17:49:03 2025 GMT
        Subject: CN=17B7C9BCD1FC386B824593B175426C480CA7EDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:97:a7:eb:36:35:0f:49:77:9d:c2:1c:47:
                    66:1b:7c:51:f8:a0:dd:c9:e5:cf:32:dd:aa:2b:26:
                    05:69:0f:2b:b1:33:51:f7:b5:93:0f:d0:54:cf:60:
                    4b:6b:6b:10:b6:bb:b1:15:78:a5:95:55:20:ba:1a:
                    41:21:5a:c7:ac:e6:cd:07:4c:15:8e:72:bc:c9:51:
                    ad:95:d9:09:f8:6f:23:7d:de:3b:2c:ac:04:53:cd:
                    29:d8:ec:7a:79:44:31:a2:e5:07:99:7e:af:f4:f0:
                    d5:b4:7f:16:cb:50:d9:7a:56:f0:6a:11:29:b1:ff:
                    4b:b6:00:c3:43:cf:5d:c8:01:a6:ec:5c:10:14:a1:
                    6c:c7:e9:2f:e7:eb:66:2e:33:1f:84:8a:a2:fc:fe:
                    b6:9f:41:57:41:61:38:51:b6:2c:df:bd:5b:6b:53:
                    b2:b8:fd:6c:34:ed:c3:be:7e:cd:c0:ee:bd:04:d7:
                    c3:7b:d6:fd:5d:20:38:d3:fd:54:d3:85:ea:d8:be:
                    c9:74:d0:62:a1:1d:91:b4:60:a7:58:67:26:9f:03:
                    8a:b4:ec:5d:70:a6:40:c8:74:ef:c0:dd:ae:29:fa:
                    bf:4f:0a:b9:28:a0:b2:fd:43:00:aa:0a:6c:21:d9:
                    33:37:5c:28:eb:5e:50:85:03:f1:39:d4:fb:05:1e:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B7:C9:BC:D1:FC:38:6B:82:45:93:B1:75:42:6C:48:0C:A7:ED:AB
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a386630303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:96:7e:67:99:83:76:f7:e4:2e:6d:af:c5:f0:9e:4a:35:a2:
         3d:33:c2:9f:7b:7e:99:0f:47:8a:06:2f:78:76:8a:af:09:c6:
         61:82:73:3d:e9:37:49:c1:6f:13:d1:40:d9:26:4d:ab:fe:de:
         d3:af:83:34:c5:fc:c2:38:09:ee:2c:d6:58:c4:3f:72:1b:74:
         34:b5:ce:77:3c:d7:3d:c7:0f:b1:43:35:fa:54:ee:06:de:1c:
         87:d3:28:80:53:f4:1f:93:47:bd:50:98:78:ae:b8:a0:6f:1f:
         1b:2a:67:06:29:d3:28:6a:8f:19:51:6a:ac:e0:19:29:c5:3a:
         9b:01:34:d4:9d:ca:8d:5b:50:13:d0:21:42:51:59:73:8f:8d:
         5c:86:b5:ce:53:e7:ab:27:ee:1b:bb:57:aa:f8:97:63:e9:2b:
         64:3d:09:14:a4:00:7d:cc:0e:b6:df:77:b2:d0:74:05:02:48:
         f3:84:d2:bd:34:44:d3:dc:74:8b:cf:a3:f8:fa:e5:10:5c:90:
         ee:a3:1c:ae:fd:ca:52:4d:5c:4c:39:6a:5a:9a:d4:f7:61:79:
         4e:b4:79:0f:62:ce:d9:ba:77:a9:dc:2d:22:c6:e3:63:b9:73:
         1e:75:7d:8a:11:c2:e7:a9:37:2f:9e:7f:b5:ee:0e:a0:f0:6b:
         f3:9f:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 22:22:36 2024 by rpki-client on console-ams.rpki-client.org