Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          wYKq2V7p4+tF5nJ3Mxgc1RJFPKQaRcwLHxpCOzN7k1A=
Subject key identifier:   36:A2:E7:E1:C3:34:C6:10:E9:D2:C1:BB:80:1B:D0:CD:84:26:71:E3
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       75C7687FD456A7D6BBC1D33468423D2E0C5860F5
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:09 +0000
ROA not before:           Tue 05 Mar 2024 17:44:09 +0000
ROA not after:            Tue 04 Mar 2025 17:49:09 +0000
asID:                     61461
IP address blocks:        2803:d700:9200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c7:68:7f:d4:56:a7:d6:bb:c1:d3:34:68:42:3d:2e:0c:58:60:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:09 2024 GMT
            Not After : Mar  4 17:49:09 2025 GMT
        Subject: CN=36A2E7E1C334C610E9D2C1BB801BD0CD842671E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:62:20:24:5e:28:5a:05:ce:a4:f0:19:61:
                    0e:a2:0d:49:e4:1f:1b:a8:bf:7e:58:76:e0:e7:8c:
                    65:8a:ca:6d:63:0f:01:9f:45:e6:d4:2e:21:b2:46:
                    40:3e:59:9b:d8:55:f8:e9:b7:1b:34:f6:02:7d:1a:
                    3b:5b:ef:38:7d:34:1d:4c:47:60:6e:e1:c6:1d:b0:
                    2d:b0:dc:1d:5f:c0:93:74:ca:e6:a5:42:39:3d:fe:
                    60:45:05:74:83:a9:93:a2:b5:97:cb:9a:33:3d:b5:
                    ad:05:01:53:82:a7:e6:95:2c:82:27:06:ea:c2:df:
                    14:38:24:8b:2c:c0:80:d0:89:ff:11:64:c9:70:03:
                    af:52:14:d0:23:fa:35:d4:6b:46:b6:a7:53:43:18:
                    73:7b:eb:84:6c:6c:a5:8e:c5:39:69:71:e6:c9:bc:
                    1b:25:cb:99:58:b0:b0:0e:2e:fc:eb:f8:05:7a:64:
                    ab:36:a0:d2:ff:b0:0f:80:76:29:7d:b8:27:d9:2f:
                    db:38:33:9b:9f:f5:85:e7:36:33:71:e3:57:7d:bf:
                    bc:54:15:60:83:5c:09:1e:5c:60:53:5c:bf:cf:7b:
                    c4:6e:18:35:40:73:0a:2c:20:14:c1:27:be:12:94:
                    00:6c:c6:13:cc:33:e3:22:97:41:e2:41:60:c9:19:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:E7:E1:C3:34:C6:10:E9:D2:C1:BB:80:1B:D0:CD:84:26:71:E3
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a393230303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:0a:eb:23:33:43:ba:c1:1e:5d:3e:b2:ce:fd:48:15:0a:
         bb:b8:6e:f3:4e:3b:1b:0b:24:f6:8c:95:98:3f:d0:c5:61:13:
         3b:53:2f:f3:86:f6:07:70:bc:5b:fb:7a:bf:c0:04:44:84:8d:
         17:35:37:97:b6:2b:71:af:4c:45:8f:88:59:9c:0e:23:00:76:
         8d:79:84:d0:44:27:a1:0c:45:29:9f:0c:bf:c9:b5:f1:eb:13:
         34:2c:be:c8:ea:a5:c4:75:7f:40:ef:44:81:9b:3d:06:77:78:
         35:d1:1a:3f:22:ad:75:03:36:d1:8a:b8:1e:0e:b7:f5:11:26:
         15:69:59:26:cd:c2:b6:55:17:80:05:b3:7d:69:26:df:f6:da:
         71:9d:e8:1a:9f:cc:2d:9f:27:05:ae:7c:6a:a5:d7:bc:8d:3b:
         7b:1f:ac:b0:01:d1:44:2e:f6:b0:83:b2:17:15:da:b1:0d:8a:
         6a:99:cc:da:c9:ef:92:8e:fc:cb:cc:fc:46:3f:42:56:22:ed:
         09:f3:b4:69:c4:35:f6:b0:5e:6e:84:cc:c4:26:77:fd:20:2a:
         3d:05:07:7c:ea:d4:d8:61:d3:dc:f5:9d:20:b5:35:a2:db:d3:
         60:9c:88:d5:f4:e2:20:f9:78:99:cf:2e:1f:c3:77:17:82:51:
         39:a7:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org