Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          XGU1EMxPG0h8SfU61Ez45/VUcOtLyTEoudp6c6hmjYs=
Subject key identifier:   1C:EB:A6:18:60:BC:EB:57:15:37:4B:41:27:71:C0:2E:8D:86:FF:12
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       7337A0E59E9E9496358FB814563B09A2A26272F7
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:02 +0000
ROA not before:           Tue 05 Mar 2024 17:44:02 +0000
ROA not after:            Tue 04 Mar 2025 17:49:02 +0000
asID:                     61461
IP address blocks:        2803:d700:db00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:37:a0:e5:9e:9e:94:96:35:8f:b8:14:56:3b:09:a2:a2:62:72:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:02 2024 GMT
            Not After : Mar  4 17:49:02 2025 GMT
        Subject: CN=1CEBA61860BCEB5715374B412771C02E8D86FF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:bb:d5:e7:bf:05:06:a8:53:f9:af:e8:a4:
                    fc:12:2c:b6:35:6d:02:11:a3:cb:85:a8:0d:3d:17:
                    30:40:24:94:7c:58:4b:6c:a6:5b:e9:24:9f:65:b1:
                    1d:f0:3b:68:54:5e:d8:31:d8:40:11:17:91:0e:ed:
                    ad:ea:89:09:6c:21:8e:a7:46:ad:9c:7e:8a:28:28:
                    81:a7:0a:e5:ac:20:8d:77:92:99:2e:a4:29:47:ca:
                    f2:f3:22:da:8b:0b:8a:a2:15:4d:88:d8:0a:0f:1a:
                    bb:55:1b:6b:16:77:b9:82:77:b3:e4:c1:ed:4f:8e:
                    1b:98:54:5f:96:84:80:08:5a:e9:07:2f:7e:1c:35:
                    e3:f7:aa:5a:77:00:f4:1e:00:b4:03:26:f9:c5:e2:
                    63:ea:bf:e2:c6:13:a5:6c:3a:fd:f4:c1:83:89:69:
                    fc:56:1d:7c:89:9e:42:03:93:bf:ff:b3:f5:4f:42:
                    71:df:be:fd:6c:b1:47:39:05:55:07:8d:07:06:d4:
                    b7:7a:44:26:7d:fe:b6:fa:d0:98:d8:9b:a9:47:d4:
                    69:35:62:eb:7d:fa:53:81:8c:c6:7c:ef:34:d9:3a:
                    2c:b3:40:07:fe:0c:d4:1d:fd:b0:5f:61:e4:cd:f1:
                    48:c8:cb:25:6f:9e:6a:82:99:18:66:7b:0a:2c:77:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:A6:18:60:BC:EB:57:15:37:4B:41:27:71:C0:2E:8D:86:FF:12
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646230303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:af:a3:1c:ec:ef:09:9a:0a:a6:da:aa:6b:3a:eb:fd:25:
         ca:7c:3b:d6:44:f7:47:72:b2:5e:d4:05:c5:9a:a8:45:69:37:
         25:13:c9:e4:72:8f:07:fd:5b:be:79:8e:80:9a:6a:cc:01:a3:
         ab:ac:ca:f3:6b:e3:6b:4b:f2:fa:5c:d2:d6:28:63:b0:72:2f:
         1e:2b:7f:a1:f0:55:4e:fa:a2:55:0d:5f:22:4c:1d:66:01:17:
         99:ee:f0:10:2f:85:58:e6:30:7c:1d:7e:c6:c0:42:ea:da:4c:
         7f:b7:25:ca:81:d5:ac:2e:65:ef:ee:9b:1c:cb:86:87:87:bb:
         c8:68:73:e7:9d:53:4d:9a:9b:8c:9a:f2:c2:72:ba:e5:04:a1:
         13:73:ee:f0:d0:8e:57:19:2d:49:d3:95:23:26:1e:0c:64:2b:
         1a:89:a0:8e:2b:a7:ac:10:04:60:85:73:08:ff:7a:7e:15:8b:
         b6:39:93:d2:f5:90:bc:da:08:76:41:14:95:38:29:c3:5e:65:
         aa:a9:b3:03:5a:be:7c:ac:24:ec:ce:d7:37:07:64:e0:e4:c3:
         04:d4:b6:61:25:6e:2e:0b:71:84:a8:9d:2e:1f:71:40:92:d5:
         37:97:9f:5b:d7:84:21:52:1b:e7:ad:99:a0:ca:25:7b:6d:d6:
         33:1c:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org