Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31312e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e31312e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          Y27I1fv+uh074PZTzail27xNW3JpyD73z7GmaXT2xtI=
Subject key identifier:   8D:AC:1B:60:B1:FE:99:E7:8D:6A:31:95:DC:16:E0:5C:78:9B:53:B0
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       4A245035D0BF00D0D47D14ECEFB23DF4FC952556
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31312e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:36 +0000
ROA not before:           Tue 04 Feb 2025 19:58:36 +0000
ROA not after:            Tue 03 Feb 2026 20:03:36 +0000
asID:                     4995
IP address blocks:        200.29.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:24:50:35:d0:bf:00:d0:d4:7d:14:ec:ef:b2:3d:f4:fc:95:25:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:36 2025 GMT
            Not After : Feb  3 20:03:36 2026 GMT
        Subject: CN=8DAC1B60B1FE99E78D6A3195DC16E05C789B53B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:f3:92:9b:2d:ac:f9:65:f9:9a:62:4b:96:
                    08:0f:88:a9:cb:4e:84:73:4f:cb:3b:a8:88:86:07:
                    a6:50:8c:1f:34:52:b8:43:8b:e9:62:c5:fb:77:57:
                    46:b7:6b:82:42:52:ff:63:ea:9d:d1:57:a1:0d:45:
                    d3:70:30:c1:a3:29:9f:5c:f9:d9:2a:db:93:28:6b:
                    89:3a:0f:93:2b:db:98:d5:e1:9e:e0:4b:9c:55:41:
                    2c:9e:20:4c:fd:0d:da:7f:a9:f0:bf:d6:1e:2c:94:
                    fb:a6:96:3a:49:da:74:fc:98:7f:cb:f3:2c:14:a9:
                    71:56:ab:38:d0:48:c1:d7:70:ea:f8:dd:40:71:0d:
                    ee:93:0e:20:88:6b:00:db:cd:12:99:b1:82:0a:71:
                    58:d4:5c:05:17:5d:ca:6e:f0:2a:99:8b:12:32:50:
                    5b:f2:d3:56:8b:87:5a:17:14:c0:ea:ea:66:f2:e8:
                    6d:b6:60:b8:f9:e2:8b:00:47:b8:e0:47:40:3e:c8:
                    b5:50:41:9c:64:07:1a:64:da:11:0b:e8:63:48:c4:
                    1f:7c:f3:cb:df:bb:62:e5:b2:bf:5f:6a:cb:6e:99:
                    25:22:c2:03:3c:e7:d1:91:5a:98:fd:b8:96:3f:a1:
                    54:bd:69:2e:9d:aa:73:3e:5a:b4:d8:28:7d:9c:c8:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AC:1B:60:B1:FE:99:E7:8D:6A:31:95:DC:16:E0:5C:78:9B:53:B0
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e31312e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:85:b4:72:82:93:73:eb:7a:f1:e5:e1:09:78:55:c3:83:
         68:c6:22:83:a5:31:ed:5d:65:f7:3d:d8:ec:35:e4:64:b0:e1:
         19:5e:85:7b:6d:e2:a1:43:28:e4:62:17:96:42:8b:92:46:c1:
         45:d2:57:1b:1c:b8:5f:06:63:55:7f:fd:bc:46:2d:0f:25:7c:
         e5:00:89:ef:bc:3e:7b:f3:8c:47:4a:d4:1d:ea:75:71:5a:af:
         0e:0f:3d:cc:27:80:55:bf:01:b1:7f:a8:a0:5c:43:7c:9b:4c:
         f1:d9:47:e6:94:03:c0:12:70:ed:7f:96:3d:db:33:99:63:f4:
         86:d6:b4:1b:2e:0f:47:40:85:4b:10:0d:6e:7c:3c:22:44:54:
         7e:30:ff:e7:0b:4d:5e:f9:5f:22:31:c2:be:fa:82:d6:bd:cd:
         d2:b4:44:1a:65:fd:e1:d6:34:6c:7c:f6:e8:a6:76:28:9a:23:
         cf:c2:d3:01:44:9b:d9:2e:d0:e6:38:41:7b:f2:71:b0:da:26:
         8a:b0:c6:29:bc:74:35:27:94:20:42:d4:1a:0d:f1:73:74:4e:
         b6:9f:9d:16:38:fd:97:aa:b8:6b:ec:58:c6:c9:ed:3b:6e:ff:
         b6:86:43:08:4e:94:02:d7:19:46:c5:52:b5:44:b8:43:fa:6d:
         05:a2:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:13 2025 by rpki-client