Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e302e302f31392d3234203d3e203130373738.roa
File:                     3230302e32392e302e302f31392d3234203d3e203130373738.roa (raw, json)
Hash identifier:          2gZvv9h/jPgrYafMHOlwFDO5laIa4iFSqRCllUVDhEE=
Subject key identifier:   7D:92:51:20:21:6D:E7:31:40:1E:F1:42:A7:45:11:C4:23:76:3E:18
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       21F2A0B7CC6BCE15BB4251818C0BED6978618A76
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e302e302f31392d3234203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 18:08:25 +0000
ROA not before:           Tue 05 Mar 2024 18:03:25 +0000
ROA not after:            Tue 04 Mar 2025 18:08:25 +0000
asID:                     10778
IP address blocks:        200.29.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f2:a0:b7:cc:6b:ce:15:bb:42:51:81:8c:0b:ed:69:78:61:8a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:25 2024 GMT
            Not After : Mar  4 18:08:25 2025 GMT
        Subject: CN=7D925120216DE731401EF142A74511C423763E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:e1:aa:52:3d:79:b6:da:f7:28:99:9a:bd:
                    d1:da:96:35:a6:86:67:ef:02:09:32:70:ef:fd:80:
                    e7:3f:12:98:4c:5a:01:0e:1f:71:65:7f:77:2f:32:
                    06:f0:8c:96:db:d3:02:f4:79:ae:97:56:43:98:a8:
                    4f:c0:7a:22:8e:e5:67:45:e2:89:7c:e6:b5:16:9c:
                    af:0a:8b:10:39:0d:85:20:4c:fb:38:5a:70:64:e6:
                    42:d9:6c:9c:04:7d:1e:c9:fb:34:ad:64:43:f0:df:
                    36:3f:61:6a:c9:03:24:55:62:f8:db:1f:01:d8:fc:
                    83:99:18:79:7c:24:89:cb:f3:7a:e0:ee:ca:1b:5b:
                    d2:80:17:dc:d9:07:6b:ba:41:1e:b3:f5:2c:2d:69:
                    73:a2:5b:70:da:9b:60:9d:b5:8a:27:a1:fc:93:0a:
                    72:5f:d9:67:11:5b:02:4a:54:fb:0e:17:6d:75:2a:
                    b7:d5:b6:bf:fc:75:a1:1d:22:58:7b:b4:c5:21:b4:
                    be:68:90:c5:29:a2:1d:9d:32:9e:0c:6d:7b:43:9e:
                    df:74:d7:ae:6e:50:74:74:ac:4f:22:f8:f5:42:ad:
                    0e:68:70:83:9b:28:64:95:34:de:d8:d0:47:70:b7:
                    20:14:60:ed:fb:a8:62:51:db:36:60:89:61:b4:b2:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:51:20:21:6D:E7:31:40:1E:F1:42:A7:45:11:C4:23:76:3E:18
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e302e302f31392d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:bb:e8:3d:ec:4b:fb:85:22:bd:77:0b:5a:27:ab:79:a3:05:
         af:cd:b5:34:0b:43:4a:f1:b5:aa:0a:49:89:42:35:c9:ff:a7:
         b2:51:0f:29:5d:ca:c0:6a:29:69:24:bb:5d:c6:3d:e2:8a:dd:
         be:c3:8a:b7:aa:68:e6:7b:45:a4:19:b9:58:2b:c8:6e:28:14:
         6c:38:cc:26:e2:3e:6d:3d:26:79:60:0b:f4:6a:92:08:d4:b7:
         21:60:a6:57:a9:62:c3:9a:0a:99:d0:92:2e:39:d0:f7:4e:ae:
         46:fd:aa:1d:6f:e7:c1:21:76:bc:cc:6b:1d:72:bb:bc:4e:8b:
         b3:74:a1:09:7c:70:7b:48:5e:65:92:ae:ca:e0:cf:72:4e:65:
         c4:40:50:d2:89:43:c3:74:af:8a:ff:dc:04:31:8b:0e:a4:8f:
         c4:4c:7f:58:7f:82:2a:bb:60:82:8a:9a:ea:03:a6:2f:2f:06:
         79:63:72:b0:3f:74:c1:dd:e4:a4:d0:cd:bb:66:3f:21:4c:0c:
         1e:88:43:a4:ce:c0:a7:d9:71:4a:3b:7e:9d:01:e5:b0:e0:77:
         5d:27:9b:a9:8f:39:08:61:6b:f8:75:a3:f7:23:3e:bd:42:72:
         6d:71:cd:16:68:e7:ae:11:4b:35:7b:8e:e4:b7:ba:fe:26:97:
         d0:bf:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:06 2024 by rpki-client on console-fra.rpki-client.org