Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139322e302f31392d3234203d3e203130373738.roa
File:                     3230302e322e3139322e302f31392d3234203d3e203130373738.roa (raw, json)
Hash identifier:          KBgBxQQc+DmF4+BtFlzMgr/Qx2Nv52a0lyElVpLtsLY=
Subject key identifier:   A3:41:FE:26:A0:3D:E0:CE:B2:02:53:75:C6:EC:E9:B8:3A:14:74:51
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       373E526445C770F31DC7D4C2EB2C5C3CC1B7187D
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139322e302f31392d3234203d3e203130373738.roa
Signing time:             Tue 04 Feb 2025 20:03:33 +0000
ROA not before:           Tue 04 Feb 2025 19:58:33 +0000
ROA not after:            Tue 03 Feb 2026 20:03:33 +0000
asID:                     10778
IP address blocks:        200.2.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3e:52:64:45:c7:70:f3:1d:c7:d4:c2:eb:2c:5c:3c:c1:b7:18:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:33 2025 GMT
            Not After : Feb  3 20:03:33 2026 GMT
        Subject: CN=A341FE26A03DE0CEB2025375C6ECE9B83A147451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:94:b6:3c:7a:0d:77:9c:03:76:5a:18:21:
                    24:d0:19:67:a1:d2:e1:2d:5d:9c:08:61:55:57:dd:
                    c5:2c:20:d2:6d:31:91:a7:6d:ec:03:96:38:8c:95:
                    a5:4e:68:01:b4:b1:ca:3c:5f:50:32:ab:7c:c0:65:
                    cb:ac:bb:48:18:53:b9:c5:4d:b1:65:45:0f:45:cb:
                    06:48:10:97:a8:49:76:6a:74:4b:74:ae:86:d1:15:
                    49:d9:58:4e:28:bc:4b:ed:75:b2:5f:42:2e:ff:38:
                    6d:cf:36:9a:ce:d4:a4:da:32:c1:55:66:22:97:0d:
                    9e:1c:ab:72:62:a2:27:30:b9:dc:44:f9:e1:b8:48:
                    29:59:d8:0e:9c:2a:34:8b:30:fe:77:e9:41:2a:32:
                    4b:2c:11:17:c5:23:ed:0a:1a:c3:af:7f:80:83:33:
                    4c:15:b1:35:b6:75:3c:ea:2c:7c:3c:4b:b1:18:93:
                    6c:1e:00:10:85:24:b4:dd:16:c7:be:b7:87:66:af:
                    02:94:56:83:14:6d:a0:33:e0:54:92:f0:7a:bd:f4:
                    de:80:2a:f9:a7:2d:a9:35:96:56:fe:cc:17:90:f0:
                    ed:77:5c:e3:d7:1c:0a:c1:f6:1d:9d:91:3f:7c:de:
                    fa:11:bb:9e:d2:11:ca:32:65:65:18:93:0a:40:d6:
                    5b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:FE:26:A0:3D:E0:CE:B2:02:53:75:C6:EC:E9:B8:3A:14:74:51
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139322e302f31392d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:df:04:84:63:65:78:a9:27:06:3d:fa:fe:42:a2:41:07:
         de:31:fb:81:4e:e2:e2:98:05:eb:9e:39:ca:8b:e4:6a:3f:ab:
         a8:f7:1b:a9:07:5d:4f:be:a5:4b:1b:d9:2f:7a:bc:ab:7a:d7:
         a6:56:f8:75:83:8a:0e:7d:2d:e3:0e:95:31:19:6d:12:69:87:
         2e:cd:0b:01:f8:c9:22:d5:a5:00:4e:73:e2:b8:31:24:c2:f8:
         a2:c2:22:fb:46:c3:80:7b:95:d7:2c:f5:2f:93:73:a0:01:c1:
         5c:b1:95:a2:51:c9:9e:2f:a2:6a:84:e3:c6:37:7f:2e:f7:00:
         f4:33:bd:22:0d:da:9f:79:fe:e3:38:72:75:83:cd:83:ef:62:
         45:72:7a:3b:ee:24:fb:9b:65:75:9f:dd:63:f1:dd:65:8d:7b:
         62:f2:fa:fb:d9:02:87:a1:8e:76:23:37:b3:9a:19:02:5f:54:
         85:71:bb:2e:14:a3:29:5c:65:69:54:ac:d1:ab:47:16:cb:b8:
         89:3c:96:f9:40:80:d7:f6:a8:05:79:1f:77:71:bd:20:90:f0:
         7d:ec:83:d9:3b:a5:dc:71:10:d0:9d:18:12:48:33:a5:73:de:
         b4:97:41:b0:96:cd:cb:1c:4e:be:c0:59:dc:c5:3a:3d:6b:4e:
         04:0b:68:97
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNz5SZEXHcPMdx9TC6yxcPMG3GH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzNaFw0yNjAyMDMyMDAzMzNaMDMxMTAvBgNV
BAMTKEEzNDFGRTI2QTAzREUwQ0VCMjAyNTM3NUM2RUNFOUI4M0ExNDc0NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK5S2PHoNd5wDdloYISTQGWeh
0uEtXZwIYVVX3cUsINJtMZGnbewDljiMlaVOaAG0sco8X1Ayq3zAZcusu0gYU7nF
TbFlRQ9FywZIEJeoSXZqdEt0robRFUnZWE4ovEvtdbJfQi7/OG3PNprO1KTaMsFV
ZiKXDZ4cq3JioicwudxE+eG4SClZ2A6cKjSLMP536UEqMkssERfFI+0KGsOvf4CD
M0wVsTW2dTzqLHw8S7EYk2weABCFJLTdFse+t4dmrwKUVoMUbaAz4FSS8Hq99N6A
KvmnLak1llb+zBeQ8O13XOPXHArB9h2dkT983voRu57SEcoyZWUYkwpA1lv9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUo0H+JqA94M6yAlN1xuzpuDoUdFEwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIyZTMxMzkzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzAzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIAsAwDQYJ
KoZIhvcNAQELBQADggEBAHO63wSEY2V4qScGPfr+QqJBB94x+4FO4uKYBeueOcqL
5Go/q6j3G6kHXU++pUsb2S96vKt616ZW+HWDig59LeMOlTEZbRJphy7NCwH4ySLV
pQBOc+K4MSTC+KLCIvtGw4B7ldcs9S+Tc6ABwVyxlaJRyZ4vomqE48Y3fy73APQz
vSIN2p95/uM4cnWDzYPvYkVyejvuJPubZXWf3WPx3WWNe2Ly+vvZAoehjnYjN7Oa
GQJfVIVxuy4UoylcZWlUrNGrRxbLuIk8lvlAgNf2qAV5H3dxvSCQ8H3sg9k7pdxx
ENCdGBJIM6Vz3rSXQbCWzcscTr7AWdzFOj1rTgQLaJc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 19:58:13 2025 by rpki-client