Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230372e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3230372e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          CNUgtLx5TTYVuTzkVsfPa4s7Z8hDH5vmrNa2RIIBAvs=
Subject key identifier:   76:28:D7:24:17:16:B1:26:2F:DC:8C:B0:89:53:3A:F8:FD:A0:90:B3
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       6338DBD7C2F235E71BEFC3D5E1B88C846E3216AC
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230372e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:36 +0000
ROA not before:           Tue 04 Feb 2025 19:58:36 +0000
ROA not after:            Tue 03 Feb 2026 20:03:36 +0000
asID:                     4995
IP address blocks:        200.2.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:38:db:d7:c2:f2:35:e7:1b:ef:c3:d5:e1:b8:8c:84:6e:32:16:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:36 2025 GMT
            Not After : Feb  3 20:03:36 2026 GMT
        Subject: CN=7628D7241716B1262FDC8CB089533AF8FDA090B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:c8:6f:22:31:29:f3:f5:99:a3:a5:ff:ef:
                    9a:62:1c:da:ed:95:ef:d7:13:51:2e:44:16:ed:9e:
                    13:ca:de:d7:fb:5d:6a:e2:cd:13:ef:98:4e:89:a6:
                    6f:be:fd:ff:19:0d:31:56:ee:8f:dd:bd:20:77:9c:
                    a8:5f:df:53:54:cf:30:23:80:fc:04:df:b8:0b:23:
                    f3:e7:c1:8d:6b:87:8f:89:0b:ed:86:53:05:3a:44:
                    61:da:d0:c6:a7:bd:9c:fe:c3:04:d1:5f:45:92:06:
                    1c:0c:68:86:53:63:0f:06:9b:f6:33:df:3c:4f:2c:
                    7d:02:f5:60:62:38:3e:e6:95:c4:ab:36:cf:4f:e7:
                    ed:80:8e:21:40:de:04:9a:f0:e0:e1:58:32:18:65:
                    65:62:04:31:55:19:4a:fb:91:69:9b:f5:3f:cc:9f:
                    a6:23:69:2e:4e:6d:5f:3a:ec:9b:b9:c1:16:d4:e7:
                    a0:0b:b5:14:46:9f:1f:b8:14:a8:7c:1c:68:04:83:
                    6e:4c:96:1b:2a:ba:cf:4a:f3:e0:b6:94:c3:64:9e:
                    db:d0:b4:84:45:1e:b8:51:e9:75:eb:07:62:ba:c8:
                    f4:31:40:3e:fe:ec:06:62:0b:33:6a:80:86:af:f7:
                    53:be:4c:ad:3e:fb:e1:7a:a8:41:67:73:e5:2a:86:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:D7:24:17:16:B1:26:2F:DC:8C:B0:89:53:3A:F8:FD:A0:90:B3
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230372e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d2:ea:e7:8f:56:e4:ed:12:cd:af:cc:8d:c2:a9:fe:19:32:
         c0:83:6a:37:0a:38:b6:20:7b:9b:6e:f5:00:c6:f4:f3:80:14:
         7f:b3:e1:b1:3c:ed:71:8b:69:9b:6d:ee:dd:fe:32:54:61:55:
         35:2d:6d:22:16:a6:48:e5:fa:52:b5:0e:b3:d6:61:c4:2a:1b:
         f2:ae:16:7d:70:0d:74:20:df:1a:61:a8:b8:36:77:1b:68:de:
         fe:7a:bf:e3:d4:07:e7:6a:af:6b:38:64:9f:3e:c1:45:ce:27:
         d2:35:4e:e9:8c:0c:66:9c:55:77:0e:3a:34:02:89:c7:68:f7:
         d5:28:d4:a8:50:7c:b9:b4:18:cd:19:5e:29:46:c6:eb:aa:58:
         80:f9:2c:f5:f8:0d:f4:cd:f1:bc:6a:ed:76:ef:1c:e3:ba:98:
         2d:89:04:7a:21:06:58:ca:14:d9:3b:ef:64:16:d6:d9:ca:e0:
         42:9b:06:ab:97:66:b1:67:72:f9:be:f8:85:57:ae:c8:46:c8:
         10:ef:42:bf:1c:73:39:07:1e:64:60:5a:2d:9c:4d:06:0c:1c:
         ae:41:ea:aa:5f:6f:ea:02:6a:a5:6c:33:e7:f1:04:fd:90:15:
         c5:7e:b5:48:7f:02:3c:95:c6:74:50:a1:a4:81:d1:c5:b2:a1:
         b0:44:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:10 2025 by rpki-client