Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139382e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3139382e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          rYnq/dI6eJ7AIzRm97Z/xD411Pkc30m9qYJXEN2QTik=
Subject key identifier:   79:19:25:F3:F3:A8:91:E9:85:2D:84:1A:A2:D9:7B:1B:A2:3A:A4:1C
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       0754D44EC97750589D737D68737D3BC90BA72DA7
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139382e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:24 +0000
ROA not before:           Tue 05 Mar 2024 18:03:24 +0000
ROA not after:            Tue 04 Mar 2025 18:08:24 +0000
asID:                     4995
IP address blocks:        200.2.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:54:d4:4e:c9:77:50:58:9d:73:7d:68:73:7d:3b:c9:0b:a7:2d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:24 2024 GMT
            Not After : Mar  4 18:08:24 2025 GMT
        Subject: CN=791925F3F3A891E9852D841AA2D97B1BA23AA41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4b:16:68:95:78:ad:aa:07:b1:e9:35:b7:53:
                    70:95:97:5f:37:52:05:5e:47:2d:c5:7b:e6:eb:38:
                    15:8a:ea:d6:85:82:89:89:88:ea:79:2a:d1:4d:fa:
                    ff:bc:65:e1:8f:13:1b:85:ce:cd:8b:77:59:f2:85:
                    8e:10:90:77:ac:fa:88:1d:cd:b8:ad:31:5c:ff:95:
                    7d:c5:af:33:1e:77:30:3d:ea:ac:63:8f:7d:cc:91:
                    f6:b5:96:b5:4b:41:b4:61:f4:8b:e0:c0:0e:a9:d8:
                    54:76:66:5e:45:27:7e:e9:0f:e7:06:90:ce:41:da:
                    29:38:23:68:0c:72:04:17:98:52:10:7f:51:29:50:
                    d3:62:6b:2f:72:23:56:05:a4:e6:38:83:e5:1e:ac:
                    5b:c7:0b:38:f3:c2:4f:27:ff:1b:ea:64:f5:09:00:
                    47:3b:09:59:f7:e6:8b:fa:36:1c:7f:12:96:96:85:
                    52:4c:0c:e2:a9:ec:b5:84:2a:dc:d0:04:e4:bd:d4:
                    1c:15:b2:46:2c:f0:dd:5a:fe:3f:59:32:45:14:37:
                    00:16:37:4d:8f:ad:7f:9d:97:6c:55:2e:a0:65:1b:
                    93:b0:a1:ab:30:35:0f:8e:3a:76:27:0d:df:14:d6:
                    a3:15:c5:58:72:f8:5c:7d:5c:90:61:22:1a:66:02:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:19:25:F3:F3:A8:91:E9:85:2D:84:1A:A2:D9:7B:1B:A2:3A:A4:1C
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139382e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:df:9f:29:b9:13:22:5c:66:b0:15:99:14:0e:cc:b6:6f:
         52:24:b3:ca:fe:18:12:9d:aa:57:52:f4:14:28:a3:d2:6a:f5:
         2e:e9:60:f3:ee:a5:73:65:b2:9d:ec:4c:09:54:8a:84:c6:b7:
         a5:ed:97:69:a4:17:69:88:68:2c:01:ad:6d:8b:6c:a7:b9:57:
         d4:ef:9f:12:da:bf:a0:1a:66:00:77:7a:71:94:cb:e6:fe:d0:
         04:b5:d5:67:de:44:0b:9a:4e:4f:0a:ff:02:9d:af:a5:9a:60:
         ee:48:ca:3e:f6:fb:74:5e:3a:97:b0:5f:98:2f:6e:e3:65:3c:
         bc:64:d4:f3:01:3a:1e:7b:19:f8:dd:0f:3b:5b:8d:66:23:c6:
         bd:ae:ca:32:c2:04:63:b1:d1:a2:0a:6a:70:3a:cc:9b:91:e0:
         cb:a8:59:48:32:54:d7:b8:97:1d:21:96:18:18:f6:d6:84:4b:
         35:91:94:a9:1c:1d:66:bf:2a:7c:86:68:06:0d:f5:8e:2b:4c:
         bc:7d:f5:83:e3:aa:05:b3:f0:a4:6a:89:3e:1f:7c:83:75:80:
         0e:37:14:8f:2f:6d:b9:1a:a6:bf:5c:0a:e3:35:c7:f3:df:d1:
         9f:7e:b3:ed:83:4e:3f:37:87:94:3b:58:c8:46:ce:3f:2f:4e:
         c1:57:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org