Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31302e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e31302e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          DvpKCNutR8uGltAhd4iOLuLtcGoWLZWUAZcA2P6/Zts=
Subject key identifier:   4E:85:39:D0:EE:0B:B3:4D:F8:FF:A7:27:0D:28:68:EA:FB:69:84:A8
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       04D0C8991A5E17865F5100A4A876F17FFCAF85BE
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31302e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:30 +0000
ROA not before:           Tue 05 Mar 2024 18:03:30 +0000
ROA not after:            Tue 04 Mar 2025 18:08:30 +0000
asID:                     4995
IP address blocks:        200.29.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d0:c8:99:1a:5e:17:86:5f:51:00:a4:a8:76:f1:7f:fc:af:85:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:30 2024 GMT
            Not After : Mar  4 18:08:30 2025 GMT
        Subject: CN=4E8539D0EE0BB34DF8FFA7270D2868EAFB6984A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:5c:3f:e7:e9:1c:c6:d8:eb:3d:85:6c:e7:
                    a5:48:aa:6f:f6:16:11:68:06:fe:29:ab:b9:f5:a8:
                    45:35:00:65:0c:c0:db:5b:04:8d:3e:8a:26:6c:a9:
                    9f:b3:73:84:e4:2c:26:29:d8:a9:40:01:54:1f:c8:
                    1a:d9:90:d4:c7:e3:2f:fc:ec:a6:bd:e8:52:01:bd:
                    06:5b:22:7f:7b:cd:e5:2f:58:0a:0f:48:37:c3:d2:
                    b9:4a:93:b5:a7:d1:41:fc:2f:2c:9c:5a:8c:18:bf:
                    62:c6:a2:3d:38:48:75:ec:59:b0:48:80:57:4b:2a:
                    69:f2:c7:51:8b:29:9b:7e:2e:62:ed:64:0b:2f:89:
                    9d:80:f0:62:ee:4f:aa:9b:92:e0:db:eb:d3:95:97:
                    d9:37:a2:4b:b1:6e:a9:bf:90:54:20:5c:ef:5e:0b:
                    b7:63:2c:6c:14:30:c0:13:32:e7:af:82:40:09:76:
                    a9:ac:00:91:17:1f:cc:aa:4f:80:35:bd:77:c9:20:
                    e6:76:e0:53:a5:a7:be:5b:cc:c7:7e:1d:75:95:bc:
                    4d:02:39:35:dc:5b:7a:97:22:4b:ae:dc:ae:28:f5:
                    71:d4:31:4a:19:5e:34:62:a2:6c:12:57:15:8e:8b:
                    92:65:4b:7d:af:ef:46:3e:f0:49:71:b4:a1:aa:c6:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:85:39:D0:EE:0B:B3:4D:F8:FF:A7:27:0D:28:68:EA:FB:69:84:A8
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31302e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f9:05:5d:14:ba:14:b0:53:62:f7:b3:9c:dd:9e:94:67:39:
         a6:c4:57:f2:d8:68:2b:17:7e:68:66:e2:08:4e:94:db:c0:05:
         68:31:19:bf:a8:18:68:7f:a6:4e:fe:7d:66:76:62:9e:43:3e:
         97:d6:3e:15:ad:76:00:f6:25:be:0b:ec:a2:a2:bf:66:8f:73:
         20:ad:22:61:7a:ff:49:d1:7b:4a:b9:7d:d4:5d:38:a6:7a:55:
         92:0a:e0:c2:8b:bc:67:c8:13:48:79:3c:92:f8:ac:d0:bf:5d:
         ba:57:4b:39:ab:61:d4:1d:47:07:9d:4b:b8:ad:1e:4a:df:4a:
         50:ca:44:13:d6:d9:09:3a:09:f8:32:e5:ce:78:c1:d8:b9:e9:
         ad:48:d7:71:99:04:82:79:15:94:9b:91:0e:c9:b4:bd:c1:84:
         cc:da:32:43:9e:9f:c1:9d:a9:e9:b6:2a:46:f1:09:b0:a7:f0:
         b3:8c:a0:ee:76:bf:b4:60:bd:14:d4:96:ee:e1:2f:e3:49:bf:
         89:e2:53:2d:fa:8f:bc:14:65:7c:27:b0:8a:9a:ff:f3:31:9f:
         50:a8:3e:fb:66:0e:14:d7:b4:9f:51:ee:da:84:8f:5f:b3:7d:
         0f:92:30:50:62:4b:cd:6c:e9:5d:c7:4c:8b:ed:22:27:72:0e:
         e8:06:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:55:16 2024 by rpki-client on console-ams.rpki-client.org