Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          Yfok4D0GJfvkOBYXcl5YTCFS/JHMwoxBE01DI3cAWMQ=
Subject key identifier:   FA:7E:8F:BD:2C:AE:9C:60:C7:43:EC:48:64:88:3E:2F:AC:0E:C8:AB
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       33006E631C13330017150DDF040AD3215B18E5EA
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:48:58 +0000
ROA not before:           Tue 05 Mar 2024 17:43:58 +0000
ROA not after:            Tue 04 Mar 2025 17:48:58 +0000
asID:                     61461
IP address blocks:        2803:d700:9a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:6e:63:1c:13:33:00:17:15:0d:df:04:0a:d3:21:5b:18:e5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:43:58 2024 GMT
            Not After : Mar  4 17:48:58 2025 GMT
        Subject: CN=FA7E8FBD2CAE9C60C743EC4864883E2FAC0EC8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:a4:a6:10:f5:3a:9e:71:01:7f:04:af:a9:
                    5b:1c:06:74:e4:00:20:da:aa:59:1e:f9:5b:17:2c:
                    8b:ab:23:ba:0f:47:35:10:b1:07:af:e8:95:76:88:
                    15:b2:9b:14:b7:0d:d1:bf:6a:7f:2f:bb:43:05:43:
                    94:8b:11:4e:e3:8e:a2:57:e9:24:36:97:5b:03:44:
                    52:f9:60:26:1f:b2:08:cb:fb:22:65:40:1b:10:c2:
                    a3:cb:af:b8:f2:05:5a:3f:ff:95:e7:56:19:be:c4:
                    83:5f:d8:21:70:95:e6:5f:91:6a:1d:19:6c:10:bc:
                    7f:7e:77:fd:9d:e5:be:f3:2c:a6:53:4c:df:0b:aa:
                    5a:eb:a8:3c:76:f1:a1:38:7c:53:cc:ef:ee:4e:5c:
                    c0:f4:a0:07:bd:2c:2b:31:90:0f:86:bc:4e:ce:f9:
                    c8:2a:90:0a:97:43:d7:5d:29:e0:b7:9c:66:47:6b:
                    3b:31:c1:7c:07:4c:88:56:b6:e7:53:d6:43:5f:24:
                    55:f9:f6:40:df:10:c8:09:13:25:65:6c:7a:a9:3b:
                    7c:18:36:36:32:56:f7:c1:5f:dd:a1:d4:15:e4:86:
                    bc:89:db:87:de:1f:65:f0:7d:f1:75:95:e9:5e:39:
                    fc:30:e3:76:95:81:69:20:01:7a:04:93:8a:f0:33:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7E:8F:BD:2C:AE:9C:60:C7:43:EC:48:64:88:3E:2F:AC:0E:C8:AB
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396130303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:79:08:ae:38:6d:25:3b:b3:14:a3:0d:7f:67:18:6b:22:40:
         48:4a:f7:a5:c9:39:8c:33:93:d4:56:af:3a:41:42:a5:13:b5:
         a4:57:e1:e9:de:69:65:ca:ba:a3:bf:e9:61:08:1f:55:71:8f:
         7b:ba:9b:70:56:f8:8a:37:5d:3d:65:d9:a0:88:4f:78:59:3e:
         cb:42:02:3d:f1:41:ef:c2:5c:e7:7d:51:be:95:d0:66:3c:4c:
         d8:63:64:bc:6c:63:22:09:bd:53:6e:53:35:78:4d:c5:91:5e:
         71:44:70:b3:75:58:c7:6d:54:ea:cd:bc:c5:d1:3e:f2:fa:d0:
         1d:d9:a9:9b:2e:bf:a8:95:8d:d3:9e:c8:23:d0:67:74:48:8c:
         d2:a1:7a:78:61:05:b1:73:aa:69:10:57:04:f0:e9:7c:f4:5b:
         19:e2:79:d2:40:aa:88:4b:f9:9e:bc:63:5e:65:1a:c9:2d:3e:
         9c:eb:ab:31:53:a9:74:55:11:5c:2f:93:ce:14:35:48:75:47:
         4c:8d:c6:6d:f6:fb:9c:fa:30:9b:ea:ff:51:ec:42:7e:0f:b4:
         fd:aa:1a:7d:16:33:bf:b2:8f:66:9c:27:cd:81:90:8a:85:28:
         cd:2a:64:ef:14:79:b7:4d:44:c3:fd:43:75:cb:64:de:9e:d0:
         f7:d6:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org