Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139362e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3139362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          X2zgiPTvNw70vih5+YsIWSnrArbCbK9hXtBCWBVqAVw=
Subject key identifier:   DD:C0:5C:F3:48:61:5F:43:09:41:96:E7:71:3E:EA:37:6A:7B:C8:AC
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       06EA95658BC42F71F301799E699E574396EA30F7
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139362e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:33 +0000
ROA not before:           Tue 05 Mar 2024 18:03:33 +0000
ROA not after:            Tue 04 Mar 2025 18:08:33 +0000
asID:                     4995
IP address blocks:        200.2.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ea:95:65:8b:c4:2f:71:f3:01:79:9e:69:9e:57:43:96:ea:30:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:33 2024 GMT
            Not After : Mar  4 18:08:33 2025 GMT
        Subject: CN=DDC05CF348615F43094196E7713EEA376A7BC8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:7d:cc:69:77:0e:b4:d3:75:1d:65:bc:a3:
                    2e:6b:ea:e1:75:6b:bf:98:0c:a8:96:57:e3:cc:9d:
                    e4:84:fe:b6:bb:63:32:c8:b9:72:78:70:5b:d5:81:
                    aa:2e:a8:04:e4:18:93:66:8a:72:07:87:60:9d:11:
                    98:14:18:80:46:f3:22:67:d2:51:2d:72:d9:98:26:
                    27:84:50:0a:e2:14:92:b6:8c:88:45:29:a2:ac:40:
                    0d:f1:e5:06:3c:ce:59:08:1b:ac:23:8c:1c:68:d1:
                    69:f0:49:40:54:c9:d7:ee:88:85:18:d2:bd:9d:49:
                    af:b3:6f:ef:94:fc:90:3a:e9:f2:ef:5d:58:d5:bf:
                    49:a9:f1:d0:34:15:e8:36:10:8e:71:d1:f4:1f:9e:
                    90:2b:34:8e:5f:e5:a6:56:91:e4:88:f7:46:e2:42:
                    e4:49:9e:e2:e7:1c:92:87:b6:c6:ad:85:32:20:87:
                    b0:36:82:4e:b2:07:31:7a:01:4b:bf:47:5e:9c:5f:
                    83:1e:dc:d1:4e:6d:7f:a2:88:f6:1b:25:fa:9e:aa:
                    5c:55:28:63:dc:05:d3:3e:12:e8:ff:a2:de:fb:7a:
                    4b:c5:67:53:9d:1b:fd:16:20:9e:ec:98:d0:1d:1c:
                    49:d4:b4:3b:86:30:c1:97:f0:d1:7e:24:15:f7:24:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C0:5C:F3:48:61:5F:43:09:41:96:E7:71:3E:EA:37:6A:7B:C8:AC
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139362e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:7a:ab:1b:e7:67:64:18:c1:b1:1c:3d:a1:57:a4:89:16:
         79:2a:13:b9:52:52:a1:c1:00:fc:cf:ed:45:4e:42:cd:c9:d3:
         64:a6:6e:1a:f6:0c:c3:4a:cb:f8:9f:65:ab:79:81:a7:b7:7a:
         63:33:86:45:58:f0:25:c3:28:3e:91:04:2e:1f:00:a8:ed:28:
         c2:a8:8b:f4:35:1e:38:82:23:9b:04:13:28:ed:c0:2e:8c:e0:
         41:56:55:6f:fe:5e:f8:83:54:bf:6f:e6:d4:43:21:37:84:6c:
         c7:09:1b:e4:7c:08:d4:b4:0d:4f:60:ea:2d:3d:74:7c:d9:04:
         74:e3:7c:d5:64:8a:c0:e8:ee:15:8c:6d:64:0b:4d:f6:bb:8c:
         83:e6:7c:c2:32:e1:f1:f1:a8:81:ed:a4:7f:76:c7:6d:57:e4:
         96:d7:65:3b:e1:d1:c0:db:56:0c:eb:f4:9e:c8:5b:54:ff:fc:
         d9:b4:e2:c2:7e:47:bc:63:c0:ec:4d:71:fd:fa:cf:97:8f:91:
         44:48:6c:c6:f7:52:fa:71:92:f9:5b:e0:2e:8e:da:2b:81:5d:
         58:9f:65:cd:39:2d:de:12:25:99:82:c8:59:fa:82:d9:36:c4:
         60:12:4b:d1:c3:bc:cf:3f:31:f5:f4:f5:6c:c3:16:4e:24:ae:
         12:53:ac:0c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUBuqVZYvEL3HzAXmeaZ5XQ5bqMPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNDAzMDUxODAzMzNaFw0yNTAzMDQxODA4MzNaMDMxMTAvBgNV
BAMTKEREQzA1Q0YzNDg2MTVGNDMwOTQxOTZFNzcxM0VFQTM3NkE3QkM4QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNH3MaXcOtNN1HWW8oy5r6uF1
a7+YDKiWV+PMneSE/ra7YzLIuXJ4cFvVgaouqATkGJNminIHh2CdEZgUGIBG8yJn
0lEtctmYJieEUAriFJK2jIhFKaKsQA3x5QY8zlkIG6wjjBxo0WnwSUBUydfuiIUY
0r2dSa+zb++U/JA66fLvXVjVv0mp8dA0Feg2EI5x0fQfnpArNI5f5aZWkeSI90bi
QuRJnuLnHJKHtsathTIgh7A2gk6yBzF6AUu/R16cX4Me3NFObX+iiPYbJfqeqlxV
KGPcBdM+Euj/ot77ekvFZ1OdG/0WIJ7smNAdHEnUtDuGMMGX8NF+JBX3JIWRAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU3cBc80hhX0MJQZbncT7qN2p7yKwwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIyZTMxMzkzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyALEMA0GCSqG
SIb3DQEBCwUAA4IBAQBshnqrG+dnZBjBsRw9oVekiRZ5KhO5UlKhwQD8z+1FTkLN
ydNkpm4a9gzDSsv4n2WreYGnt3pjM4ZFWPAlwyg+kQQuHwCo7SjCqIv0NR44giOb
BBMo7cAujOBBVlVv/l74g1S/b+bUQyE3hGzHCRvkfAjUtA1PYOotPXR82QR043zV
ZIrA6O4VjG1kC032u4yD5nzCMuHx8aiB7aR/dsdtV+SW12U74dHA21YM6/SeyFtU
//zZtOLCfke8Y8DsTXH9+s+Xj5FESGzG91L6cZL5W+AujtorgV1Yn2XNOS3eEiWZ
gshZ+oLZNsRgEkvRw7zPPzH19PVswxZOJK4SU6wM
-----END CERTIFICATE-----
Generated at Mon May 6 06:25:06 2024 by rpki-client on console-fra.rpki-client.org