Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231352e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3231352e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          x9tAwRcetDgME41xzNuVoHZmDJwDxDNXTFtqNaOkGBk=
Subject key identifier:   8D:5C:25:2E:64:F7:17:2D:D1:4E:CB:40:3C:DA:BD:2D:C5:4D:8F:73
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       352864F4D8DAFE0F1BF6EAE75FD31A17F800FFA4
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231352e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:26 +0000
ROA not before:           Tue 05 Mar 2024 18:03:26 +0000
ROA not after:            Tue 04 Mar 2025 18:08:26 +0000
asID:                     4995
IP address blocks:        200.2.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:28:64:f4:d8:da:fe:0f:1b:f6:ea:e7:5f:d3:1a:17:f8:00:ff:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:26 2024 GMT
            Not After : Mar  4 18:08:26 2025 GMT
        Subject: CN=8D5C252E64F7172DD14ECB403CDABD2DC54D8F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:83:11:2a:e5:74:f2:14:8a:c4:2a:eb:21:
                    8e:b3:d6:a6:39:27:dd:93:94:2b:b6:8a:02:9d:90:
                    32:e8:53:4c:93:85:88:bc:48:43:41:98:ad:09:d0:
                    fe:c5:da:20:66:a4:33:a8:03:9d:b3:cd:75:1f:ff:
                    62:35:25:ae:46:b4:e3:e0:62:7b:cf:30:15:25:16:
                    2e:fc:7a:33:65:3e:c1:b8:43:70:40:fd:c7:e2:bb:
                    ef:42:f6:f6:07:f0:11:13:7f:95:06:5b:c2:a6:f6:
                    95:21:14:9a:c6:a6:19:1c:c8:20:31:fd:5d:4a:64:
                    32:6b:ea:1d:2a:e7:1c:fd:b0:c6:05:5c:a0:b8:b9:
                    03:79:92:03:bf:19:ac:90:8d:0d:6a:67:5f:39:97:
                    1f:d1:88:e0:d9:c0:26:81:4a:9c:32:b4:5c:db:7f:
                    d4:d5:a9:10:07:db:c3:21:c0:e0:d1:11:e8:2f:35:
                    b2:34:00:0c:2d:94:1f:ac:80:46:c6:41:b6:3d:9e:
                    60:11:3e:3b:dd:fc:3e:c6:e6:93:48:41:2a:97:1b:
                    ca:db:67:25:73:a9:25:7f:3f:ed:3a:30:02:2d:e5:
                    8b:fb:b3:78:cb:a7:29:64:a6:ab:6a:5c:b2:09:67:
                    87:1a:6d:09:fe:3c:0d:23:05:b3:0a:eb:7e:1f:a5:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5C:25:2E:64:F7:17:2D:D1:4E:CB:40:3C:DA:BD:2D:C5:4D:8F:73
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231352e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:39:46:0a:32:53:0b:49:70:0e:2d:e1:29:49:82:66:b4:57:
         62:fb:d7:eb:96:5e:32:12:38:37:3f:78:e3:ba:f9:b1:1a:ac:
         20:85:93:0e:92:73:6f:67:99:2b:e4:13:94:46:cd:d2:d1:4d:
         e5:7a:3b:93:8b:da:7d:1e:b0:b2:1e:84:a0:f6:1d:33:05:10:
         e7:3a:d1:f2:bd:6e:d3:cb:5f:e8:32:3b:33:5f:3c:54:15:09:
         fe:22:21:2d:95:07:83:6b:87:c3:a6:1f:d6:ec:98:ea:d6:7c:
         66:b6:40:02:5f:d5:54:83:01:2f:48:b9:d9:2a:bd:1b:87:09:
         5a:b0:63:fa:43:09:27:9b:5b:2c:9d:8f:e6:99:2a:5d:14:d5:
         d5:1b:f6:1f:50:b3:19:56:13:26:77:da:65:0e:a9:3b:cd:4a:
         9f:33:b2:13:2a:48:46:a6:b3:83:59:d0:24:23:7e:c1:9e:a0:
         7b:1c:f0:0c:90:7c:d4:c5:c0:63:bb:95:a1:c7:fe:df:2b:0a:
         7c:f9:cd:ed:ec:27:a9:fd:68:a1:f3:7f:e8:10:b2:42:74:2c:
         c7:6b:15:fd:02:af:78:83:31:15:8a:75:2c:b9:57:43:80:68:
         11:54:e2:a0:04:57:54:46:4c:9f:75:9f:3a:f0:93:06:9a:e1:
         ac:b0:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org