Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          W2I0BoX6tWQw2Nm5kc3fztcRTOjYcNYLt+X+eN2xOqM=
Subject key identifier:   8C:1E:E3:54:DC:1A:D7:86:44:C6:09:5D:90:DE:AC:71:1B:39:2F:29
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       32705155394A214B72B6A548A81A0230C2DC617B
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:05 +0000
ROA not before:           Tue 05 Mar 2024 17:44:05 +0000
ROA not after:            Tue 04 Mar 2025 17:49:05 +0000
asID:                     61461
IP address blocks:        2803:d700:dc00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:70:51:55:39:4a:21:4b:72:b6:a5:48:a8:1a:02:30:c2:dc:61:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:05 2024 GMT
            Not After : Mar  4 17:49:05 2025 GMT
        Subject: CN=8C1EE354DC1AD78644C6095D90DEAC711B392F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:a6:c8:88:83:d9:f3:bf:88:81:c0:5e:a6:
                    f5:e3:a2:af:76:81:76:88:54:32:80:9b:35:a9:9f:
                    69:74:61:95:07:51:dd:99:b1:e2:3f:79:e0:b9:d1:
                    f1:29:87:5e:02:c7:cd:ca:20:32:c9:45:6f:70:4d:
                    84:e3:49:a8:66:01:b9:41:f8:69:8c:a6:0a:65:dc:
                    0e:d7:3c:a0:44:41:36:61:28:a9:c1:31:a5:82:07:
                    61:4a:a1:e8:61:1d:24:14:13:61:35:b0:f2:c6:1a:
                    f4:b7:e2:f8:6a:5c:af:25:80:8e:2a:14:ca:75:71:
                    5d:aa:70:70:b9:8e:69:d2:9c:b1:5d:79:86:5a:4e:
                    33:35:f6:b1:ea:0a:b8:db:2d:74:cd:8a:95:41:7c:
                    79:20:fa:00:02:65:fa:6b:27:81:79:71:00:56:2f:
                    cf:65:d3:2d:b3:6d:55:5d:94:97:0a:cd:06:2f:b3:
                    2f:ec:fb:ad:6b:68:7f:0d:10:be:49:a7:23:46:b7:
                    41:ca:4e:b7:09:98:fc:dc:3e:31:08:50:8c:ad:3a:
                    76:31:2b:8d:09:fb:81:f2:b2:59:dd:1f:5f:30:c7:
                    47:5c:6b:19:20:0a:9e:2e:2b:f5:cd:ae:ab:54:90:
                    c4:f1:7a:16:2b:21:d5:87:2c:3e:2e:dc:07:5d:9b:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1E:E3:54:DC:1A:D7:86:44:C6:09:5D:90:DE:AC:71:1B:39:2F:29
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646330303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:dc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:64:71:58:2c:1b:c3:40:5b:51:98:27:e3:5c:b1:06:07:48:
         36:94:c0:97:ce:d5:a7:02:4a:03:36:72:27:94:87:f3:5f:86:
         b6:28:78:cf:e5:b8:70:a6:df:b1:ac:84:31:c3:37:74:c0:95:
         1b:26:a4:7a:a5:fa:af:75:91:c3:19:17:62:50:ef:4e:42:77:
         a4:bb:63:1a:97:c4:16:bf:00:ef:a0:65:57:9d:45:e7:e5:fa:
         b2:1d:1e:82:c9:a8:c0:9d:6d:a9:96:89:b0:41:55:09:73:34:
         3e:b2:d4:d1:51:b1:32:a6:17:42:18:df:4e:35:10:f3:94:08:
         2b:92:3d:74:62:51:a3:33:ae:be:44:ea:d7:83:b5:f1:a8:5f:
         82:ce:43:df:62:61:57:ce:10:d0:b9:45:48:1a:2b:90:6d:f3:
         52:21:ed:8f:9b:cc:06:d3:3b:f1:c3:e6:90:c6:fc:ff:5c:d7:
         1a:a4:1b:66:93:b6:b1:db:b8:93:6d:de:9d:6d:b5:5d:22:e9:
         8d:79:43:50:78:73:3f:3d:3a:fa:f0:80:8e:e5:2d:b4:b2:3d:
         b9:2f:d1:91:fb:e3:a1:e9:a9:11:df:99:28:43:02:fd:46:c3:
         97:45:a1:bb:6d:02:d3:e0:39:d0:80:4a:4b:3d:0f:63:59:be:
         dd:3c:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org