Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          b4wCF3xuV2KD72dFr1jr9xa5bMEv/uLHPwIUO4jtiko=
Subject key identifier:   2C:0C:E6:3D:BF:7B:97:40:F7:DE:3C:21:E0:D8:65:7E:BC:E6:7F:34
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       6491AEA633A324FC3943E6A4DC604AA0A38C5214
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:02 +0000
ROA not before:           Tue 05 Mar 2024 17:44:02 +0000
ROA not after:            Tue 04 Mar 2025 17:49:02 +0000
asID:                     61461
IP address blocks:        2803:d700:9b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:91:ae:a6:33:a3:24:fc:39:43:e6:a4:dc:60:4a:a0:a3:8c:52:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:02 2024 GMT
            Not After : Mar  4 17:49:02 2025 GMT
        Subject: CN=2C0CE63DBF7B9740F7DE3C21E0D8657EBCE67F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:b7:6b:9b:31:46:d2:71:2f:9b:82:27:f3:
                    f4:3e:a2:b8:d3:c0:30:9d:52:d3:10:ad:74:3e:eb:
                    bf:2e:e6:32:d0:85:57:35:63:96:bd:99:1a:05:9e:
                    d5:9c:85:c3:a9:83:6a:3a:31:76:b9:0e:63:b8:6c:
                    96:d1:f4:a0:5a:28:25:fe:f1:7e:f6:82:f6:50:06:
                    50:af:7d:b1:05:4c:3c:d6:6e:42:9a:8a:d9:c0:c6:
                    46:21:61:30:05:dd:37:da:b6:5d:01:85:c4:2b:9a:
                    b7:5f:37:de:ae:54:62:8c:44:ca:e3:9c:81:fc:00:
                    89:f9:e6:6c:19:40:b8:63:61:13:3b:1d:ce:7d:20:
                    df:53:58:dd:97:21:5b:0e:9e:55:1d:78:94:8e:ca:
                    61:d8:d8:a3:5e:09:19:ea:2c:7a:b5:80:d6:cb:fb:
                    be:30:8c:a2:a8:99:34:ab:1e:4f:eb:78:71:d0:66:
                    fc:c9:41:b3:1e:38:50:5c:5d:d6:d7:ad:ec:a3:ec:
                    4d:c8:1c:ce:1e:4c:06:42:dd:fc:b4:65:5a:17:3b:
                    c3:99:83:bc:7b:3b:ae:fd:91:35:27:4c:7a:c9:19:
                    c1:66:a6:cf:49:37:95:e1:51:59:e8:c7:87:c1:09:
                    5c:75:be:7e:b5:db:60:58:e1:38:73:e3:0a:cc:86:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0C:E6:3D:BF:7B:97:40:F7:DE:3C:21:E0:D8:65:7E:BC:E6:7F:34
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a396230303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:67:91:3d:96:67:b8:0f:94:ab:ee:71:0e:e3:94:85:3e:3c:
         df:ef:ae:75:df:ca:45:0e:b5:44:f5:81:6c:be:66:dc:88:65:
         32:6e:33:8e:5d:5c:58:af:1f:d1:c0:63:cb:ba:b8:21:26:ba:
         0e:10:fc:6c:4b:10:59:2e:56:6a:40:55:6b:c7:f2:1f:37:67:
         41:87:03:a1:30:42:a7:09:2a:2b:d5:47:f3:6d:3f:e2:09:bd:
         90:f3:70:36:09:3e:fe:5f:d1:b2:af:64:9a:90:29:45:90:64:
         18:7e:9c:1a:e7:e4:6f:a9:fe:00:30:2a:b5:0f:25:77:48:19:
         a7:0e:58:05:14:b4:4e:00:56:f2:16:ce:16:e7:0d:bd:81:3b:
         b6:6c:4e:86:51:2e:61:d2:03:f4:a9:0f:3d:cb:73:39:d7:ae:
         b1:0e:c8:b9:9b:1d:cf:23:3c:2d:bb:55:7a:c6:5f:dc:6b:ba:
         c9:53:5f:79:6d:40:2d:fc:74:40:89:bf:69:bc:1d:c2:23:83:
         3a:f7:a4:d2:c9:e8:d2:ca:ee:5c:93:0b:32:8a:a2:73:5e:be:
         8e:b7:06:5b:48:11:79:ff:00:13:ec:47:1c:f2:97:86:3e:1e:
         35:a0:77:5d:0c:56:69:87:21:3c:a6:9c:1b:68:07:30:92:99:
         0a:d6:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 21:48:26 2024 by rpki-client on console-fra.rpki-client.org