Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3234362e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3234362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          67HudjnEBnsKThXfui9WKOcGzF9LKO2t+ZCLoOIQeto=
Subject key identifier:   25:6E:2B:02:FD:5C:F5:23:70:68:27:EA:0C:50:D7:74:AD:C1:2C:FE
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       05C75344BA8043036EC3016EB11B180DFE911227
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3234362e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:33 +0000
ROA not before:           Tue 05 Mar 2024 18:03:33 +0000
ROA not after:            Tue 04 Mar 2025 18:08:33 +0000
asID:                     4995
IP address blocks:        200.2.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c7:53:44:ba:80:43:03:6e:c3:01:6e:b1:1b:18:0d:fe:91:12:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:33 2024 GMT
            Not After : Mar  4 18:08:33 2025 GMT
        Subject: CN=256E2B02FD5CF523706827EA0C50D774ADC12CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:48:eb:94:c6:52:28:7a:6e:e2:ae:8e:01:
                    e8:2b:68:f1:1f:5c:f3:2b:a9:53:37:d3:66:73:56:
                    30:dc:6c:fe:30:cd:f0:b6:9a:55:91:a1:2c:4c:a5:
                    86:6a:b7:b2:1b:cf:0f:3d:57:13:60:19:a0:af:bb:
                    ec:8a:42:f9:4f:60:12:3e:9a:57:d4:96:60:6f:8c:
                    d4:1a:c3:c8:91:8a:ca:b4:65:56:61:c0:c8:c2:ce:
                    9c:58:16:bc:cc:4a:79:dc:53:a4:8a:a3:a8:9b:6d:
                    fe:8c:77:f9:d0:d1:ea:c7:6f:01:6d:50:6d:44:3c:
                    50:03:fe:bd:13:c3:b1:ee:c3:83:59:e4:2d:20:21:
                    e7:f4:8e:8f:ee:b8:8b:f1:5a:48:0a:b0:55:56:ac:
                    9d:6f:d7:6f:72:cf:3e:4d:a3:02:8e:37:06:e2:1d:
                    6d:e1:64:da:a2:0e:45:33:66:6e:5e:c4:f0:2b:d5:
                    fe:09:a6:69:6b:60:26:e6:f4:29:23:9f:c4:fc:57:
                    cc:86:33:18:fa:f4:10:db:af:57:cd:0c:48:10:c7:
                    10:fb:63:48:f9:c5:e6:ac:98:0b:68:14:05:50:11:
                    ba:20:fc:0c:7b:ca:c3:2e:66:2c:ac:4a:69:2c:51:
                    e6:93:fe:5f:e3:98:c6:bc:c7:b8:38:73:71:c0:7d:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6E:2B:02:FD:5C:F5:23:70:68:27:EA:0C:50:D7:74:AD:C1:2C:FE
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3234362e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:30:8e:d0:a7:bc:5a:b2:f9:b2:2a:77:ed:20:10:57:30:7c:
         fa:5f:b5:73:30:b4:7d:9a:39:2c:dd:bc:50:b7:2e:88:98:d7:
         0e:c2:d7:3e:78:6e:83:19:f7:cc:2c:20:54:63:aa:d6:ba:04:
         f7:aa:ba:f6:f3:1c:21:4e:7b:ab:e8:72:d0:4a:eb:45:8a:33:
         16:25:59:85:65:dc:92:f5:21:b8:79:83:c6:98:e5:b1:1d:43:
         4b:94:3f:b3:a9:67:67:20:37:83:9f:1f:94:cb:68:38:33:4c:
         68:53:a1:fe:49:be:7c:8a:22:35:a3:64:95:0d:47:15:b8:fd:
         bf:d3:e0:32:1c:d8:d1:26:d4:e7:19:78:1d:79:3f:c5:d1:89:
         0c:10:f4:3c:04:98:87:8d:e1:20:0b:74:d3:89:52:74:ae:69:
         0b:e2:ae:ec:57:2c:92:ef:e6:58:90:9a:41:64:90:62:61:75:
         24:3f:59:cc:65:19:31:0a:b9:bc:48:d8:fd:d3:54:46:cb:6e:
         aa:26:4e:0a:ed:c5:c9:39:40:65:a2:87:97:36:48:a8:91:f9:
         0f:ab:d9:06:86:f8:1a:45:d7:ee:87:d3:77:f4:64:7c:e4:eb:
         cb:34:0b:78:e2:26:d2:97:af:c5:85:93:d7:f3:6a:4c:fa:39:
         b7:f8:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:06 2024 by rpki-client on console-fra.rpki-client.org