Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3139372e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          m8wCWKLGSipj+p39PZnaVXkmDhpWOPUkCULJUz/G+/8=
Subject key identifier:   63:B1:41:F6:22:67:DC:89:66:00:A7:C9:23:E1:31:86:D4:37:99:DD
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       58DAC127D57A567117A2835CEAF615898A3ABB64
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:25 +0000
ROA not before:           Tue 05 Mar 2024 18:03:25 +0000
ROA not after:            Tue 04 Mar 2025 18:08:25 +0000
asID:                     4995
IP address blocks:        200.2.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:da:c1:27:d5:7a:56:71:17:a2:83:5c:ea:f6:15:89:8a:3a:bb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:25 2024 GMT
            Not After : Mar  4 18:08:25 2025 GMT
        Subject: CN=63B141F62267DC896600A7C923E13186D43799DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:0b:8f:de:77:8e:fc:6e:92:4d:e1:65:3f:
                    68:73:58:1d:74:97:c7:1d:fe:14:cb:01:58:02:02:
                    ff:c3:81:84:71:7b:59:f1:02:6c:49:2f:c9:78:62:
                    56:50:97:85:1b:40:1a:ba:30:29:3a:c7:1b:d5:c2:
                    8b:91:c8:5e:c3:52:7e:22:58:a8:08:f2:b2:fc:54:
                    8c:96:80:63:e3:da:eb:ee:7a:92:da:af:17:a4:8f:
                    f1:58:b6:3a:91:5e:e6:cb:ec:27:e5:f5:ba:8c:21:
                    8f:d8:ff:9d:58:33:69:6b:61:9e:15:3f:cb:b4:5f:
                    f2:53:19:7f:13:2d:c1:ed:aa:f0:3c:f4:9c:c0:88:
                    35:10:ca:37:5e:9c:a8:de:a4:e2:8b:43:7c:0e:8e:
                    1a:c7:65:dc:c3:5b:5e:0a:a6:b6:cf:0a:64:b0:00:
                    d0:26:28:62:a9:5c:42:03:47:08:71:3c:c2:4a:b3:
                    f4:04:f9:c5:dc:05:ae:d2:3e:1d:61:31:6e:74:34:
                    e0:80:0e:af:af:60:e4:9f:9f:86:ca:69:f1:38:94:
                    c6:cb:36:a7:5e:d2:69:f4:c8:04:f5:74:db:02:4c:
                    ea:e8:18:0d:25:63:d4:b8:ee:6d:cf:39:6d:5c:42:
                    6d:f3:f1:1c:11:71:a8:1b:e9:43:f3:ba:6d:34:c4:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:41:F6:22:67:DC:89:66:00:A7:C9:23:E1:31:86:D4:37:99:DD
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:c0:b1:33:cd:74:75:c8:01:8b:1a:25:a5:eb:f6:bf:21:db:
         f9:c9:16:45:e2:ae:8a:b6:78:8d:72:ed:b0:57:96:cb:1a:19:
         4f:b8:66:30:83:4b:d2:6b:67:78:e7:77:c8:1f:d2:df:a8:d7:
         a8:1c:c5:09:b3:3c:60:fa:f7:c6:b9:60:cc:72:41:77:f7:96:
         bf:c2:9e:31:93:24:00:84:30:a1:2e:7e:b6:08:9b:dd:36:ab:
         de:13:e4:42:be:af:34:fa:76:22:27:5f:62:57:a1:31:7e:5e:
         b4:f0:b9:03:0c:2f:82:1c:e5:ff:b8:18:36:b1:68:a3:b6:b1:
         e9:06:9a:9c:0f:7d:95:15:18:cb:4a:35:47:fd:95:c5:f6:1c:
         73:42:14:86:7e:95:4a:86:5e:2c:c3:42:35:ec:1a:84:1f:36:
         74:e2:62:03:a0:c5:fa:d1:60:9e:95:18:58:bf:0d:9e:14:fd:
         01:20:d9:ec:cd:16:8f:f1:40:a1:0e:81:6e:72:dc:9c:78:92:
         c5:f0:04:76:22:b9:c7:76:60:6c:63:3b:31:26:0e:cf:c3:f0:
         5c:c5:cc:03:90:6c:36:0f:0c:fc:73:b1:0f:ab:5f:20:e5:a9:
         05:07:2e:98:2d:5c:93:6a:bf:22:3e:91:96:ed:9b:10:b4:e8:
         b2:0b:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:46:20 2024 by rpki-client on console-fra.rpki-client.org