Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393030303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a393030303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          FVVMUMry7nU0cxotyD7bq7zCELHJzDwCjMKmGWjCgDs=
Subject key identifier:   B2:1C:87:B0:F1:32:20:86:EC:D9:29:0A:AF:C7:AD:0B:7F:34:7A:EF
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       37EADB54ADC3757DE5DB4C8CD41484EBF6CEBD3E
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393030303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     61461
IP address blocks:        2803:d700:9000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ea:db:54:ad:c3:75:7d:e5:db:4c:8c:d4:14:84:eb:f6:ce:bd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=B21C87B0F1322086ECD9290AAFC7AD0B7F347AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:9e:12:2e:cb:f4:ad:32:a6:5c:04:b3:46:
                    ca:3a:bf:38:a1:e8:dd:d6:6d:55:e6:87:35:8b:cd:
                    4e:8b:0b:79:06:bd:01:19:65:1a:1c:61:43:9d:37:
                    bf:d6:af:9a:d4:e0:4c:c1:75:35:4f:81:56:33:e6:
                    e0:40:77:e7:9b:42:3b:3a:0d:88:e7:77:ed:86:29:
                    3c:84:f0:30:6f:6c:f0:32:cc:a0:a5:5c:22:3b:66:
                    cf:5a:70:2b:0b:98:e3:93:c0:b2:22:c4:43:39:ec:
                    6e:f6:8c:e3:98:39:31:84:0f:f3:b6:eb:7d:a7:4e:
                    fc:f6:43:ba:da:7b:e7:93:b5:10:94:2f:0b:73:aa:
                    28:c2:3b:48:c7:ec:4d:ea:7b:2f:8e:e9:fe:bd:39:
                    9e:e4:10:70:d2:f1:5a:7b:c4:e3:05:3f:da:0d:f5:
                    bf:12:af:0e:00:c1:84:d9:80:51:dd:5c:27:60:01:
                    22:c8:24:9f:1b:34:c0:f8:cf:fa:5d:a9:a8:11:66:
                    98:b4:0c:bd:ce:17:55:54:36:f3:df:79:12:8e:d1:
                    39:da:e4:de:04:9d:2f:2e:cf:51:3b:04:8e:0a:95:
                    f0:c7:8e:97:9c:bb:01:09:a3:ee:52:41:13:4a:c4:
                    1e:5f:b5:ec:99:28:75:fc:c6:4d:b9:58:08:ea:69:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1C:87:B0:F1:32:20:86:EC:D9:29:0A:AF:C7:AD:0B:7F:34:7A:EF
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393030303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         da:12:36:8e:2a:0e:68:ed:2a:83:80:7d:cb:17:37:85:2b:e8:
         de:fe:52:6d:f9:82:24:82:ed:9e:59:85:cd:da:2a:a0:cf:08:
         2b:a3:65:f6:85:a0:88:01:7e:9e:c5:bc:bf:77:57:c5:18:2a:
         13:e9:82:2b:e5:20:75:5e:e9:92:26:a3:f9:68:a4:14:2c:fc:
         2c:7f:2c:97:a3:e8:93:a4:f4:86:5b:eb:b2:ab:b0:88:21:ff:
         57:af:25:d9:05:ef:2a:7d:b4:81:05:09:22:46:e5:3e:74:27:
         8f:a9:bc:4a:2c:d0:ea:2b:68:1c:c7:b8:ed:77:2e:32:60:0b:
         9c:2f:dc:03:9a:7c:3d:69:ae:77:70:d8:6c:5f:31:bf:4d:2c:
         24:19:84:bb:a6:ef:d1:87:94:ac:e8:68:75:14:42:14:d8:9a:
         60:41:4c:4f:65:d5:52:96:b4:5e:b0:39:2c:3f:6b:5b:28:88:
         b8:62:8f:a8:ef:17:cb:27:e5:62:11:8d:41:c3:67:c1:18:83:
         1a:b3:1c:33:c8:98:1e:59:e3:60:7c:0d:93:d7:ad:d6:b1:13:
         f2:10:9a:e6:c6:a1:60:9e:57:ca:6a:a2:71:37:dc:37:46:35:
         65:75:04:20:49:db:3f:f0:cc:3f:3e:4e:47:b1:79:c6:d9:07:
         9e:8d:89:85
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUN+rbVK3DdX3l20yM1BSE6/bOvT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNDAzMDUxNzQ0MTBaFw0yNTAzMDQxNzQ5MTBaMDMxMTAvBgNV
BAMTKEIyMUM4N0IwRjEzMjIwODZFQ0Q5MjkwQUFGQzdBRDBCN0YzNDdBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAJ4SLsv0rTKmXASzRso6vzih
6N3WbVXmhzWLzU6LC3kGvQEZZRocYUOdN7/Wr5rU4EzBdTVPgVYz5uBAd+ebQjs6
DYjnd+2GKTyE8DBvbPAyzKClXCI7Zs9acCsLmOOTwLIixEM57G72jOOYOTGED/O2
632nTvz2Q7rae+eTtRCULwtzqijCO0jH7E3qey+O6f69OZ7kEHDS8Vp7xOMFP9oN
9b8Srw4AwYTZgFHdXCdgASLIJJ8bNMD4z/pdqagRZpi0DL3OF1VUNvPfeRKO0Tna
5N4EnS8uz1E7BI4KlfDHjpecuwEJo+5SQRNKxB5fteyZKHX8xk25WAjqaak9AgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUshyHsPEyIIbs2SkKr8etC380eu8wHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMyMzgzMDMzM2E2NDM3MzAzMDNhMzkz
MDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPXAJAwDQYJKoZIhvcNAQELBQADggEBANoSNo4qDmjtKoOAfcsXN4Ur6N7+
Um35giSC7Z5Zhc3aKqDPCCujZfaFoIgBfp7FvL93V8UYKhPpgivlIHVe6ZImo/lo
pBQs/Cx/LJej6JOk9IZb67KrsIgh/1evJdkF7yp9tIEFCSJG5T50J4+pvEos0Oor
aBzHuO13LjJgC5wv3AOafD1prndw2GxfMb9NLCQZhLum79GHlKzoaHUUQhTYmmBB
TE9l1VKWtF6wOSw/a1soiLhij6jvF8sn5WIRjUHDZ8EYgxqzHDPImB5Z42B8DZPX
rdaxE/IQmubGoWCeV8pqonE33DdGNWV1BCBJ2z/wzD8+TkexecbZB56NiYU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org