Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646530303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a646530303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          h3HfjodEFN4Rq7nN1zhizrDytFqPUokhZx0J8RI11uk=
Subject key identifier:   77:A6:00:1D:CD:75:75:B4:9D:55:33:53:AC:0A:62:0B:CD:96:C6:78
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       5C550F296C3F9B5982D7AF09168C59336435730A
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646530303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     61461
IP address blocks:        2803:d700:de00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:55:0f:29:6c:3f:9b:59:82:d7:af:09:16:8c:59:33:64:35:73:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=77A6001DCD7575B49D553353AC0A620BCD96C678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:51:ca:fb:d5:89:4a:6c:6c:63:9c:9f:7c:
                    2d:e0:f4:b4:28:25:d7:1e:e3:24:24:d1:1d:70:45:
                    f0:3a:bb:6f:89:d1:93:ca:70:7d:4d:28:13:38:2b:
                    5d:e8:6b:64:bc:f8:18:87:00:08:e6:6e:1d:39:8c:
                    6c:fd:a3:9b:02:20:21:fb:6c:8e:3a:bd:97:26:75:
                    56:53:f2:66:81:1b:b7:1c:12:6f:b2:e5:25:21:8b:
                    ae:05:69:5d:40:75:62:87:c0:56:14:4d:87:cd:76:
                    b4:22:34:88:65:7e:4e:d1:7c:09:e8:9e:44:b1:53:
                    4a:f6:e2:5d:f2:48:8b:35:41:82:13:19:68:95:90:
                    00:9d:e3:19:12:cb:85:3b:73:a8:19:c7:f3:b7:ca:
                    b7:d3:dd:b7:82:31:32:b6:86:2f:1d:69:7b:f7:d4:
                    44:f6:3c:2c:a2:c2:6a:9d:22:e6:8a:9a:e2:f5:dc:
                    e7:e2:8e:97:f4:6b:fb:45:d5:a8:4d:51:3b:ac:f5:
                    ce:11:d2:3f:73:4d:32:c4:c4:70:46:63:5b:3c:8d:
                    15:5b:79:37:47:4b:91:ff:02:07:d4:14:d3:ce:a7:
                    c8:88:cc:93:10:3a:37:c0:60:d9:f5:d5:7a:c1:53:
                    75:22:5e:75:4e:17:79:04:a1:8f:b8:0a:cd:9f:27:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:00:1D:CD:75:75:B4:9D:55:33:53:AC:0A:62:0B:CD:96:C6:78
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646530303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:29:1c:b4:68:e8:64:e9:d8:f0:5b:41:42:b0:0c:37:de:f7:
         9e:8b:55:ed:f6:da:2d:21:15:e2:42:fd:b3:33:b7:79:c3:6e:
         26:bc:c1:89:a1:f4:aa:59:79:4e:b9:a6:7f:a4:16:8d:34:18:
         99:79:f9:cc:34:7e:72:db:bf:19:e9:ce:ee:0c:62:0a:81:91:
         7f:21:6e:b7:9a:58:a2:68:95:62:a7:25:89:c5:8c:04:10:9c:
         ac:c7:f7:c1:de:11:78:a0:52:ec:b1:c8:eb:3a:de:dc:34:28:
         94:09:f0:63:c7:65:1e:f2:c0:6a:5b:aa:10:a5:3e:d5:48:64:
         45:54:21:fe:0f:b8:18:1a:d1:ac:67:48:2e:38:37:3c:2b:bb:
         58:47:92:4f:04:0f:74:ca:2e:ae:56:ac:2f:17:b6:fc:e0:9b:
         ca:3d:c2:89:7c:9c:2d:85:6e:92:4e:06:02:b4:80:16:5d:4d:
         c6:8e:96:33:0c:49:71:6e:ba:ad:3a:c2:ab:fe:f8:e2:74:52:
         b4:46:db:48:ca:8a:fd:b6:b1:aa:6b:4c:75:4f:15:05:27:1a:
         01:f0:3f:32:d4:17:97:91:03:a1:4a:d2:84:25:4a:d5:54:bb:
         86:c5:04:65:32:70:98:68:f5:8a:df:4f:62:53:0e:6f:40:3d:
         70:91:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 22:22:36 2024 by rpki-client on console-ams.rpki-client.org