Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a636530303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a636530303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          +nMRWah9Qf/NpUhl+/sShBWxGpWfpumcynrDeW9PwQ4=
Subject key identifier:   A9:2F:1B:CC:96:C7:F9:D0:D7:2E:22:E1:33:28:7E:CB:72:B0:E1:10
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       6F6C6BB70BEF0D97840A624FC053113E31604E0C
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a636530303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:46 +0000
ROA not before:           Tue 04 Feb 2025 18:09:46 +0000
ROA not after:            Tue 03 Feb 2026 18:14:46 +0000
asID:                     61461
IP address blocks:        2803:d700:ce00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6c:6b:b7:0b:ef:0d:97:84:0a:62:4f:c0:53:11:3e:31:60:4e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:46 2025 GMT
            Not After : Feb  3 18:14:46 2026 GMT
        Subject: CN=A92F1BCC96C7F9D0D72E22E133287ECB72B0E110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:40:b0:60:36:ff:f3:10:60:e9:50:1f:bf:
                    69:9b:f3:b8:fe:66:72:4e:ac:49:44:3c:4c:77:92:
                    55:eb:30:bc:b5:9c:c2:08:a4:f0:aa:91:25:1e:2e:
                    6f:8f:46:0a:00:6f:bf:70:33:2f:4e:a8:1b:da:58:
                    30:45:e3:22:d1:d7:d1:5f:e7:81:93:18:e5:bc:c6:
                    cc:14:98:4c:d5:e7:3c:6e:bc:37:13:c1:30:ff:37:
                    29:83:e6:ae:0d:74:69:f3:07:3a:0e:21:b8:54:3f:
                    44:d3:39:d5:fe:aa:46:bb:79:15:67:58:0e:9f:d2:
                    33:91:f8:c1:25:41:b7:ea:f4:1e:a7:ed:d2:b5:2c:
                    5e:d5:ad:c8:0a:02:98:05:0b:f1:56:5b:7f:d3:a2:
                    30:43:54:46:7a:8c:76:8c:bf:54:cb:45:6e:a8:d3:
                    03:f8:36:9a:d5:c4:8a:b3:86:35:ad:ae:37:aa:07:
                    62:67:28:ce:07:86:71:20:6e:00:70:1f:29:44:8f:
                    8f:f3:5b:d2:b3:8d:01:96:5e:6d:3f:01:27:ac:70:
                    20:6b:12:5c:21:15:28:f6:f9:4b:0c:93:94:1c:75:
                    4a:a7:92:f2:89:96:57:be:b9:92:5c:55:d9:f4:f6:
                    ec:02:56:84:31:52:5a:9d:84:7d:52:4f:83:84:86:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2F:1B:CC:96:C7:F9:D0:D7:2E:22:E1:33:28:7E:CB:72:B0:E1:10
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a636530303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:48:19:c2:ed:05:7e:dc:0b:54:48:22:21:6a:3b:f7:ab:bd:
         43:f4:f7:b6:d2:9f:52:88:f3:34:95:9e:92:83:b5:48:0a:ee:
         f3:85:83:76:5d:42:0e:de:5b:dc:10:5c:0d:09:55:76:1e:41:
         58:e0:fb:a5:d4:59:49:4d:f9:e7:c5:b3:61:bf:ee:fe:20:19:
         13:88:dd:90:1d:a5:50:99:05:27:6b:1c:34:3e:a3:39:64:d9:
         0a:4c:79:92:71:e6:fb:62:b9:ef:08:72:2e:ae:1f:9a:e1:76:
         59:4c:c8:2d:df:fd:b8:7a:bb:96:be:0d:c8:83:8e:99:87:62:
         d3:21:10:67:06:80:22:74:74:3d:81:90:46:39:3e:b1:ef:4f:
         bd:cf:a5:cf:4d:af:1b:62:df:20:95:53:7b:0f:c6:9b:de:b6:
         f0:26:bc:1d:18:a1:f4:fd:02:33:02:d8:7a:72:ac:8c:e4:2a:
         a5:7d:dc:ff:e1:6d:db:1b:8b:d6:d5:2e:a4:c9:f0:c8:8c:b9:
         43:e8:ae:e6:bf:5d:15:20:66:76:7c:03:a9:68:4d:80:de:06:
         1c:58:b9:bc:37:1a:04:f2:7f:04:79:06:a0:ad:f4:e2:03:f8:
         73:4b:8d:24:67:6e:0e:a6:24:96:e3:bd:f3:1d:c3:18:b7:b6:
         c9:14:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:47:36 2025 by rpki-client