Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa
File:                     3230302e322e3230342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          AR8IsrzT2TKivz4HxVoQ7/iW2SZLTgBiZrKX3ibK6BU=
Subject key identifier:   F7:69:AD:82:5B:DB:25:FE:87:6F:98:01:4C:08:64:26:23:D9:28:0C
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       08A553C0EAC2D246D2D73C4CE962B6805F9FD917
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 05 Mar 2024 18:08:31 +0000
ROA not before:           Tue 05 Mar 2024 18:03:31 +0000
ROA not after:            Tue 04 Mar 2025 18:08:31 +0000
asID:                     20015
IP address blocks:        200.2.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a5:53:c0:ea:c2:d2:46:d2:d7:3c:4c:e9:62:b6:80:5f:9f:d9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:31 2024 GMT
            Not After : Mar  4 18:08:31 2025 GMT
        Subject: CN=F769AD825BDB25FE876F98014C08642623D9280C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:e7:fa:26:ff:78:e8:c8:be:38:91:b6:5d:
                    2a:77:2c:89:41:4f:3d:45:e6:37:78:b2:c0:b9:94:
                    fc:61:a3:a1:c8:4c:a9:eb:86:cd:bf:94:36:88:bd:
                    53:0e:60:12:5e:11:ac:cf:6e:8d:6b:3a:bf:54:7c:
                    89:1b:de:f6:ea:76:82:ff:f4:b5:55:c8:58:77:84:
                    9f:1f:e4:62:4d:08:31:b5:34:37:09:86:9b:82:df:
                    8d:17:cd:2b:d5:c5:4b:bc:f7:35:9f:1d:5e:e3:b7:
                    95:5a:51:96:aa:06:0f:d3:c5:f9:17:f0:4e:d0:b5:
                    20:30:fc:3a:52:cd:8f:c0:af:37:40:52:63:b8:de:
                    1b:6d:0e:e3:17:e7:bf:81:32:2a:6d:30:c7:f7:c6:
                    cb:11:73:3d:04:ac:5d:85:79:a9:89:b0:b0:0c:fd:
                    fe:c4:fa:18:b6:8c:31:98:b7:c7:ef:ae:94:7e:e9:
                    46:db:f8:de:73:5d:83:17:a4:4e:40:49:a8:20:8c:
                    87:76:b7:d2:19:e3:96:6d:72:78:d2:5a:d5:cf:62:
                    f6:e9:76:12:bd:bb:99:2a:4b:33:72:bb:0d:24:db:
                    6a:a7:3f:c8:3a:a7:e9:e8:74:68:70:07:bb:98:02:
                    13:16:97:0e:36:09:43:c6:9d:be:e2:90:42:a5:d2:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:AD:82:5B:DB:25:FE:87:6F:98:01:4C:08:64:26:23:D9:28:0C
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:6c:c0:c4:ac:d9:75:73:f1:d9:4d:90:66:b6:67:fb:82:
         2b:cb:34:95:06:cf:e6:b0:e4:21:f1:8b:35:08:68:f9:96:a1:
         d0:ef:cf:8b:df:4d:1d:dc:ed:f7:b6:42:bb:35:25:b4:64:2b:
         a1:09:a9:a5:2d:a4:39:21:cc:cd:61:31:57:65:b8:5f:34:94:
         ad:37:b6:d1:23:e5:dd:9b:2c:e4:3b:eb:92:15:7c:95:f2:61:
         41:fc:5c:e1:b2:86:73:fd:65:69:8f:c4:79:f3:24:bf:64:9c:
         4f:9b:64:72:db:4d:f1:2f:c4:ed:38:67:30:b7:a9:7a:7b:1d:
         d7:69:d1:6f:a3:d0:72:29:03:e5:f4:ba:91:6b:97:14:a9:72:
         d1:79:7d:c5:a8:8f:56:10:b9:b1:c8:75:7f:11:be:17:5b:aa:
         ed:67:9d:8e:37:cc:cc:df:04:16:21:9a:96:a2:a2:50:16:d5:
         7a:9d:e1:cd:40:00:63:48:6b:89:d6:da:39:97:44:1f:b2:90:
         ef:dd:7c:73:6f:9d:64:ec:cb:ba:c8:c9:a0:ba:8e:02:ee:12:
         25:76:b4:98:c7:dd:bf:ce:1a:bb:fc:47:2e:4b:f5:84:11:e7:
         cf:da:76:1b:4f:28:07:d0:aa:b1:5e:ac:39:bc:05:30:86:23:
         d9:11:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:22 2024 by rpki-client on console-ams.rpki-client.org