Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31312e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e31312e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          u5/1XrZ2KhvLW1j7761D2c4uM9E5sspluypTtlMWcT8=
Subject key identifier:   F0:69:38:A7:C0:3F:E0:A1:C3:AB:9A:52:39:D9:7C:25:4D:25:A9:B7
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       1702196B60862BEED5214FA5ADAC1167945A9FFF
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31312e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:29 +0000
ROA not before:           Tue 05 Mar 2024 18:03:29 +0000
ROA not after:            Tue 04 Mar 2025 18:08:29 +0000
asID:                     4995
IP address blocks:        200.29.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:02:19:6b:60:86:2b:ee:d5:21:4f:a5:ad:ac:11:67:94:5a:9f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:29 2024 GMT
            Not After : Mar  4 18:08:29 2025 GMT
        Subject: CN=F06938A7C03FE0A1C3AB9A5239D97C254D25A9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:ae:a2:f3:6b:1b:5a:4d:26:24:cc:0d:2d:
                    9f:1a:f1:57:64:58:c9:7b:e4:9d:71:dd:eb:95:ca:
                    88:6d:3b:cb:62:4e:21:bb:c0:dc:b7:c0:6a:82:c9:
                    e8:e3:f6:eb:e6:f6:d8:7c:ad:94:51:da:00:0b:4d:
                    98:5b:67:41:65:9c:16:79:c1:b0:f3:e1:c9:fa:a8:
                    26:f7:38:b1:c5:e8:78:e7:4f:a3:ab:c6:27:88:4a:
                    28:dd:44:55:26:12:44:8f:1f:68:c0:80:5e:85:30:
                    37:4a:1e:bc:7d:25:9b:65:08:c0:4d:56:dc:f7:7e:
                    d4:cd:83:10:07:97:2c:b9:b8:e7:ab:98:3a:51:f5:
                    fe:52:60:4c:b5:ad:80:b3:dc:39:91:82:d8:99:c8:
                    f9:70:55:62:19:2f:84:45:44:4c:6f:30:b4:97:8f:
                    9b:a3:1d:39:2f:55:3e:04:c7:d1:78:14:d0:e9:41:
                    b5:8b:75:fe:77:04:e8:5f:d3:67:db:84:f0:6d:7b:
                    41:f5:89:26:9e:88:a0:a2:dc:88:54:20:e8:3b:79:
                    1a:53:0f:f1:c7:09:2a:75:5b:8f:e7:e1:a4:c3:0e:
                    b7:cf:fe:ae:46:73:54:76:9a:09:fa:43:30:79:c8:
                    39:fd:aa:d4:03:f0:68:fa:eb:f5:2e:a4:a8:47:aa:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:69:38:A7:C0:3F:E0:A1:C3:AB:9A:52:39:D9:7C:25:4D:25:A9:B7
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31312e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:9a:38:be:c3:b0:1a:0f:ae:71:4d:eb:a0:fd:f1:5f:aa:0e:
         79:2c:6b:d0:b9:8a:5f:35:6b:f5:72:ba:0a:36:1f:c0:01:71:
         92:6d:c6:76:f2:cf:82:23:2c:46:a8:63:74:7d:e6:f2:8e:49:
         d3:e5:02:56:a5:36:ef:8f:80:af:c0:91:46:2e:d7:b6:63:d5:
         fa:44:c1:b4:8a:f4:57:9f:7f:9f:94:95:c5:bd:fe:ca:7e:b5:
         d0:2c:e4:3f:40:c9:79:ee:ab:4f:7f:fc:d9:8e:19:35:0d:4e:
         de:6b:75:93:21:54:77:7d:7d:1b:cd:92:94:3a:29:51:bc:28:
         0c:87:ea:9c:f3:a7:c7:7d:5e:a0:ba:eb:1d:b8:56:9c:76:a6:
         03:72:57:e9:69:7d:d8:a4:4a:97:ac:e6:58:38:ff:58:cc:30:
         43:ff:f3:1b:d7:7c:70:36:3c:cc:8d:92:76:23:a5:9f:81:8f:
         c7:85:e3:c1:8a:1d:2c:1d:55:67:ab:8e:f3:14:96:ed:95:4a:
         b3:51:cc:81:13:b8:56:07:8d:22:5a:1f:fe:0f:b4:93:be:be:
         3a:74:46:7d:1d:7f:64:05:59:b1:7b:ac:fd:d0:98:d7:f3:32:
         f5:46:76:61:be:95:42:7e:d6:0a:d0:fa:7f:de:d7:77:ce:5e:
         e7:c6:39:fe
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUFwIZa2CGK+7VIU+lrawRZ5Ran/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNDAzMDUxODAzMjlaFw0yNTAzMDQxODA4MjlaMDMxMTAvBgNV
BAMTKEYwNjkzOEE3QzAzRkUwQTFDM0FCOUE1MjM5RDk3QzI1NEQyNUE5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIIK6i82sbWk0mJMwNLZ8a8Vdk
WMl75J1x3euVyohtO8tiTiG7wNy3wGqCyejj9uvm9th8rZRR2gALTZhbZ0FlnBZ5
wbDz4cn6qCb3OLHF6HjnT6OrxieISijdRFUmEkSPH2jAgF6FMDdKHrx9JZtlCMBN
Vtz3ftTNgxAHlyy5uOermDpR9f5SYEy1rYCz3DmRgtiZyPlwVWIZL4RFRExvMLSX
j5ujHTkvVT4Ex9F4FNDpQbWLdf53BOhf02fbhPBte0H1iSaeiKCi3IhUIOg7eRpT
D/HHCSp1W4/n4aTDDrfP/q5Gc1R2mgn6QzB5yDn9qtQD8Gj66/UupKhHqm0jAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU8Gk4p8A/4KHDq5pSOdl8JU0lqbcwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIzOTJlMzEzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB0LMA0GCSqG
SIb3DQEBCwUAA4IBAQAZmji+w7AaD65xTeug/fFfqg55LGvQuYpfNWv1croKNh/A
AXGSbcZ28s+CIyxGqGN0febyjknT5QJWpTbvj4CvwJFGLte2Y9X6RMG0ivRXn3+f
lJXFvf7KfrXQLOQ/QMl57qtPf/zZjhk1DU7ea3WTIVR3fX0bzZKUOilRvCgMh+qc
86fHfV6guusduFacdqYDclfpaX3YpEqXrOZYOP9YzDBD//Mb13xwNjzMjZJ2I6Wf
gY/HhePBih0sHVVnq47zFJbtlUqzUcyBE7hWB40iWh/+D7STvr46dEZ9HX9kBVmx
e6z90JjX8zL1RnZhvpVCftYK0Pp/3td3zl7nxjn+
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org