Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139392e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3139392e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          m7o/x5nSQXeaCK8YBODJM6DkeOZiIlU4uDypuGkrgig=
Subject key identifier:   92:E6:FD:52:E4:54:88:9B:E4:B9:82:7E:39:98:DF:07:FD:C4:A8:AC
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       32E4CDBB2018E0D7336DEB61A8EC4F11904553D8
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139392e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:26 +0000
ROA not before:           Tue 05 Mar 2024 18:03:26 +0000
ROA not after:            Tue 04 Mar 2025 18:08:26 +0000
asID:                     4995
IP address blocks:        200.2.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e4:cd:bb:20:18:e0:d7:33:6d:eb:61:a8:ec:4f:11:90:45:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:26 2024 GMT
            Not After : Mar  4 18:08:26 2025 GMT
        Subject: CN=92E6FD52E454889BE4B9827E3998DF07FDC4A8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:1f:71:0f:44:91:4e:41:dd:41:52:80:33:
                    25:69:81:fe:58:c3:5d:f7:5f:19:6e:3c:08:a4:73:
                    79:a7:7e:67:17:37:0f:64:c6:bb:2c:ec:8b:3d:3d:
                    76:75:24:ad:6c:b8:54:5f:7a:d5:c1:97:d7:70:52:
                    41:fd:59:f0:98:5f:35:cc:b6:e8:b3:e1:39:45:1a:
                    8e:7d:64:ed:d6:9c:2b:82:e5:44:a8:28:e4:ae:9d:
                    ea:44:41:2e:f5:fb:14:92:fd:13:e3:4a:7b:69:33:
                    77:b5:f6:f2:a5:69:f6:8a:3e:31:53:20:f0:ee:41:
                    28:60:9f:26:0d:4c:48:71:6b:de:29:34:85:c9:a4:
                    08:bd:70:92:74:60:31:45:1c:db:8d:93:58:23:82:
                    05:c8:e5:1a:ec:b9:25:1e:94:9a:9a:52:78:2f:0c:
                    17:6a:08:f6:dd:75:44:2a:23:79:95:af:8d:3a:75:
                    cd:1f:d5:1c:2a:72:d8:2d:a0:e7:14:7e:7d:f0:98:
                    07:9d:61:ff:f3:84:f6:d2:2c:5d:f8:25:3e:fd:3b:
                    de:ab:d6:33:92:84:89:35:0b:64:00:a7:63:fb:53:
                    07:68:38:60:6f:69:a3:0a:91:e2:69:2d:07:c7:3c:
                    ff:2e:ec:e3:56:ed:a8:cd:30:e2:15:7e:4e:18:3e:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:FD:52:E4:54:88:9B:E4:B9:82:7E:39:98:DF:07:FD:C4:A8:AC
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139392e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:9e:76:77:f9:0a:7a:b1:97:f1:e8:e7:c4:a1:5c:eb:9c:
         6b:fb:bb:f7:0c:90:15:c3:a7:93:ae:1c:cd:71:17:5d:19:e2:
         41:66:72:da:6b:65:99:90:e5:3c:dd:b7:cb:e2:1c:42:f9:06:
         5c:5f:44:6d:8d:44:9a:91:e2:64:a9:5b:79:b8:2b:4a:fa:27:
         2b:47:41:d8:c5:69:3e:e8:cf:53:26:17:55:15:1b:84:8f:17:
         8a:cb:4c:03:66:0a:03:30:47:b1:9a:04:31:00:5a:ad:7f:85:
         22:93:8c:8a:c9:98:90:86:74:9e:44:ea:3e:af:fe:5a:ab:8f:
         24:a1:ff:27:89:49:51:4b:44:a5:cb:0f:7d:ca:07:63:17:48:
         5a:8f:16:e3:5f:00:ea:52:a4:fa:87:55:f4:bc:54:4f:e2:ee:
         03:62:13:da:0e:8a:7a:07:b0:7b:8f:ad:81:b3:9f:7c:a3:db:
         b6:d2:31:fa:bc:ba:20:2d:3c:ee:e1:76:5e:07:60:13:87:f5:
         21:e1:f9:04:03:88:0d:da:38:72:71:bc:38:b5:3c:ed:8a:55:
         6f:e8:af:34:4d:df:a9:83:9c:c3:03:18:8c:87:36:34:c6:e3:
         48:c8:fe:fe:6f:7d:0e:88:9e:51:be:1f:b4:96:b3:ce:b6:2b:
         6c:6d:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org