Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646630303a3a2f34302d3430203d3e203631343631.roa
File:                     323830333a643730303a646630303a3a2f34302d3430203d3e203631343631.roa (raw, json)
Hash identifier:          2qbuXDjEAebZCjp46qRhFuKLclFbzBM4k9ygMZvtIME=
Subject key identifier:   86:DB:24:F2:D4:DA:BA:96:BB:B8:EE:72:04:AB:1F:55:CD:71:D9:8F
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       57B503FA3AC25ADE131D4D9F5BF5004ACFC6473E
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646630303a3a2f34302d3430203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 17:48:59 +0000
ROA not before:           Tue 05 Mar 2024 17:43:59 +0000
ROA not after:            Tue 04 Mar 2025 17:48:59 +0000
asID:                     61461
IP address blocks:        2803:d700:df00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b5:03:fa:3a:c2:5a:de:13:1d:4d:9f:5b:f5:00:4a:cf:c6:47:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Mar  5 17:43:59 2024 GMT
            Not After : Mar  4 17:48:59 2025 GMT
        Subject: CN=86DB24F2D4DABA96BBB8EE7204AB1F55CD71D98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:87:41:12:b6:20:91:96:a6:2b:25:47:c1:
                    0a:6b:87:9f:8a:43:f2:bb:52:69:e2:6b:87:8b:11:
                    31:21:86:10:6b:a9:47:9c:b0:0d:fc:72:78:be:23:
                    3d:05:e3:4c:d8:63:3d:e7:2a:5e:9e:f0:d6:ad:92:
                    28:c7:3c:e3:03:33:78:04:13:51:a2:aa:4f:70:8a:
                    f5:4e:40:50:07:f4:31:4f:98:76:d2:ef:94:c7:0c:
                    0d:82:09:c8:2d:e2:61:52:fc:31:7f:a3:51:94:f2:
                    69:88:0f:b4:93:4f:47:b7:67:5c:64:58:56:8e:95:
                    5f:dd:e5:2e:44:14:16:f9:37:3d:3f:e7:44:9b:94:
                    43:63:ce:f6:d5:37:4a:57:ad:58:0f:b3:d9:35:dd:
                    0e:db:4a:fe:9f:27:07:76:86:5c:de:de:85:86:4e:
                    f7:83:7e:f0:a4:6d:19:ca:a5:af:56:53:72:4f:8b:
                    a9:fb:21:04:fe:fe:5b:9f:f7:0a:55:3e:11:8f:ff:
                    2b:fe:25:0c:17:3c:0f:c1:ce:c3:3c:8c:4b:c3:23:
                    e6:cd:41:4e:cd:04:d8:f2:57:c8:31:7e:c8:7f:1d:
                    3c:17:2b:4e:13:81:ba:d5:5f:02:fd:65:e5:ea:ce:
                    2b:4e:4d:6e:83:d9:5d:d6:fb:0f:9f:63:8e:5c:b8:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DB:24:F2:D4:DA:BA:96:BB:B8:EE:72:04:AB:1F:55:CD:71:D9:8F
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/323830333a643730303a646630303a3a2f34302d3430203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:df00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:24:87:bb:9f:9b:3e:80:94:c3:6e:74:90:e7:5e:6c:4e:
         fa:ed:24:33:fc:11:22:cd:b0:f1:ca:97:aa:6a:81:0c:8b:75:
         13:68:eb:92:5f:e8:7d:33:b1:fb:10:e4:81:d7:8f:2a:c5:78:
         d0:e9:1a:71:9c:e4:a9:54:0f:e5:9f:a4:84:cb:01:6e:73:08:
         2e:31:25:9f:ff:3a:a1:fd:56:3b:d8:57:5a:22:1e:aa:c6:68:
         81:9b:08:52:d4:bf:a0:31:91:24:c4:70:64:ae:a3:c4:46:a5:
         e9:a5:68:e5:6a:2d:c4:34:e5:48:e9:48:1a:c1:16:91:b0:a3:
         66:08:db:fd:cc:be:41:e5:02:52:15:7c:0f:64:67:29:0a:b3:
         c2:0c:ba:2f:13:fc:42:04:95:6e:cb:19:ab:09:78:4f:b4:7b:
         13:8b:cb:ea:36:57:ab:e7:37:49:7e:bd:18:e4:c2:bd:7d:97:
         a8:2d:60:2f:a5:c9:b8:a2:28:0c:50:d7:d2:08:35:db:ff:53:
         2d:cc:65:8d:d1:cd:f1:68:b5:de:27:8d:1f:7e:b5:d9:67:78:
         2a:ed:fc:c5:07:3d:9b:37:4a:93:40:6d:c0:e2:e6:a0:fe:d5:
         9c:cf:63:1b:e1:5b:d5:7c:19:ed:70:c0:cd:7f:65:79:30:31:
         33:a5:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org