Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646430303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a646430303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          2xRLOOGwEcCp9ozfIa9vckr2Onb5XHBKxwb/6zve2CU=
Subject key identifier:   C4:4A:28:96:43:FE:DE:F2:B0:E1:11:7A:07:3A:FE:99:95:42:D7:03
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       0E5EAF2041746856A7EAA53DDA6096617B4D7F61
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646430303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:14:51 +0000
ROA not before:           Tue 04 Feb 2025 18:09:51 +0000
ROA not after:            Tue 03 Feb 2026 18:14:51 +0000
asID:                     61461
IP address blocks:        2803:d700:dd00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5e:af:20:41:74:68:56:a7:ea:a5:3d:da:60:96:61:7b:4d:7f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Feb  4 18:09:51 2025 GMT
            Not After : Feb  3 18:14:51 2026 GMT
        Subject: CN=C44A289643FEDEF2B0E1117A073AFE999542D703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:f8:bd:f0:ed:8c:57:ff:75:eb:5d:4a:e1:
                    22:59:d3:3f:08:4b:f4:d0:b0:b6:35:73:31:8d:10:
                    34:4f:96:1a:c0:ef:cf:39:69:80:97:ab:f8:fc:b4:
                    7c:24:b0:53:0e:2e:e4:2f:4a:c5:1c:e8:6c:3e:32:
                    b3:29:31:2b:9b:2b:0c:63:20:36:49:de:79:68:e6:
                    5a:09:32:68:d7:ef:e1:f4:5d:a1:03:40:b6:45:8d:
                    7a:39:b6:8d:90:df:b6:12:81:e1:dc:db:df:5b:f3:
                    dd:61:99:14:c1:82:e9:2a:0a:ec:06:13:74:b7:1b:
                    17:e8:38:c1:4e:13:d0:3d:61:ec:d1:02:f8:19:a1:
                    a1:ab:75:e5:5c:6c:ca:53:b1:f2:55:a7:93:55:6e:
                    30:3b:ab:9c:a2:d9:d2:9c:47:d5:0d:f3:07:05:b9:
                    8b:5a:09:e0:90:d4:21:52:a2:41:2e:3e:2e:37:50:
                    12:f1:86:a5:6e:4d:26:1b:1b:db:01:59:c2:3d:25:
                    88:c9:0e:a7:90:09:2a:63:56:61:d0:9d:28:d3:15:
                    59:cb:71:39:59:73:6b:ae:3b:01:b9:0e:9a:d5:f7:
                    2f:53:ff:15:4a:c2:2d:e0:f2:ff:79:e4:31:94:be:
                    57:74:8a:55:0d:48:d1:32:04:78:25:2f:80:d4:34:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:28:96:43:FE:DE:F2:B0:E1:11:7A:07:3A:FE:99:95:42:D7:03
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646430303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:dd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:51:a6:9a:b9:fc:e0:cd:a8:c8:c8:e0:e3:09:f7:e0:a5:03:
         2a:88:3b:3e:e7:12:af:35:aa:fb:e5:ca:e5:bc:3d:62:6f:56:
         be:a4:4c:66:e4:68:b5:dc:68:c6:e2:df:ac:5c:0d:11:5a:12:
         73:09:37:31:cd:be:0d:67:77:1c:8c:db:d5:20:67:58:e0:7c:
         d2:f9:0b:91:d0:84:8f:86:ca:03:34:c6:1c:6e:b3:d2:18:e0:
         e5:d6:c4:52:65:30:12:52:02:2b:bf:ed:1d:40:3d:e3:69:e6:
         07:4f:a1:d2:e3:81:81:a2:c7:de:83:d4:18:22:6c:fc:46:71:
         08:d9:4f:10:3d:cd:09:92:d6:2d:87:de:b6:20:01:17:27:10:
         d4:e5:51:82:e7:b5:a9:c7:42:0b:42:d0:53:cf:bd:3f:5f:ad:
         f0:7c:ea:55:86:79:09:86:f1:ab:5e:c2:06:0e:c0:d0:5d:bd:
         4e:7b:9c:d3:b5:97:70:73:48:66:10:fa:c1:7d:c9:2d:57:17:
         d7:1b:2e:20:54:5d:84:e1:56:0d:00:33:92:3b:b2:ca:2c:06:
         35:cc:fc:ac:01:95:b2:bd:7c:19:7f:96:6f:88:d0:90:f6:41:
         1f:33:58:d5:1b:8e:db:5b:a6:f2:2d:b0:7c:bc:f0:0b:ef:c6:
         7a:5a:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:37 2025 by rpki-client