Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32342e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e32342e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          vqY6ky1zpne+qMZQvIdAIuipSCbu5fv8gcg9FC08Kdc=
Subject key identifier:   1C:EB:6D:66:D3:F5:55:8C:22:0E:FD:09:40:D9:29:23:2E:A5:E8:03
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       4081373E84F1AC8824EAF8283B82364D5E549503
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32342e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:36 +0000
ROA not before:           Tue 04 Feb 2025 19:58:36 +0000
ROA not after:            Tue 03 Feb 2026 20:03:36 +0000
asID:                     4995
IP address blocks:        200.29.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:37:3e:84:f1:ac:88:24:ea:f8:28:3b:82:36:4d:5e:54:95:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:36 2025 GMT
            Not After : Feb  3 20:03:36 2026 GMT
        Subject: CN=1CEB6D66D3F5558C220EFD0940D929232EA5E803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:11:75:c9:fd:be:18:37:72:36:10:85:61:
                    32:ef:d5:f9:0e:69:8b:a8:6b:2f:a1:cf:78:e3:6b:
                    5c:05:7c:c4:95:84:d6:7e:43:bc:78:1a:b3:35:f1:
                    fb:68:3f:4c:e9:4a:19:bc:43:4f:43:62:ed:9f:8b:
                    40:cc:d9:0b:a1:0c:1c:cd:83:a3:77:cf:b8:39:ce:
                    57:a9:56:d0:1e:ed:7c:41:16:bc:86:2e:75:77:56:
                    b6:e7:2d:6a:08:ec:4b:be:dc:87:4d:b5:76:ec:66:
                    15:fd:49:dc:78:11:51:ab:eb:be:ca:30:10:6f:80:
                    c8:0d:6a:08:54:ec:f9:a2:fd:be:c0:77:be:b2:87:
                    20:36:19:03:81:a8:0a:18:51:35:45:35:ac:0a:9b:
                    5b:11:4e:6d:57:3e:8c:79:37:e6:88:7e:32:ba:fe:
                    34:6c:01:0f:e8:71:dc:8d:5d:0d:a7:32:7c:ba:3c:
                    f2:41:44:95:7b:9b:f2:ef:a4:6a:16:17:89:bb:d0:
                    21:bd:92:75:0e:c7:41:c2:e6:82:54:64:b2:41:54:
                    d0:24:96:16:74:d6:f1:bc:6f:d9:50:86:da:95:33:
                    18:c6:6b:03:80:f0:a6:94:9e:0d:9b:29:9e:1b:ed:
                    cf:a8:3b:f5:0a:db:da:84:dd:4a:ab:b3:c0:e8:38:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:6D:66:D3:F5:55:8C:22:0E:FD:09:40:D9:29:23:2E:A5:E8:03
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32342e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:99:4d:12:17:1d:d0:4a:e8:f8:e7:65:bd:8f:6b:7f:ce:ab:
         2f:b6:e3:c6:4c:73:6d:b4:68:ac:e6:b0:06:98:d4:a6:85:69:
         5f:89:15:1f:da:87:32:14:a5:0e:1e:40:b1:bf:a3:38:ca:50:
         af:b7:c1:71:86:99:2f:d8:b0:5d:ed:0a:27:49:3b:64:71:0b:
         b8:24:ee:4c:31:95:e7:7d:dd:12:97:bc:88:95:20:e7:82:88:
         28:d8:7f:84:4a:0c:92:ab:05:0c:05:05:d4:b9:3d:70:ee:47:
         54:55:91:ff:f7:38:27:3b:c6:2b:0f:05:b4:57:77:c7:3b:9f:
         e3:3d:cc:81:3e:35:f7:d7:7f:21:94:48:f1:74:91:1b:72:27:
         b4:50:02:48:f9:e2:57:6f:e7:ff:22:d2:79:74:94:e1:89:45:
         19:0e:2c:71:3d:3b:80:47:f2:73:76:52:a2:c3:db:57:41:68:
         b3:62:97:a4:6b:a8:9a:8c:3a:01:a2:58:3b:e5:23:f5:93:ca:
         50:c8:c5:97:71:a9:00:fb:c2:b8:fe:9a:06:79:ff:a5:5a:45:
         a1:e1:c9:b0:0d:29:64:e5:a5:10:36:0f:b3:0f:d2:f5:ca:f4:
         04:06:61:83:66:29:97:1a:2c:03:ae:b8:9c:f4:93:6d:16:c0:
         5b:8a:cc:4e
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQIE3PoTxrIgk6vgoO4I2TV5UlQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzZaFw0yNjAyMDMyMDAzMzZaMDMxMTAvBgNV
BAMTKDFDRUI2RDY2RDNGNTU1OEMyMjBFRkQwOTQwRDkyOTIzMkVBNUU4MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EhF1yf2+GDdyNhCFYTLv1fkO
aYuoay+hz3jja1wFfMSVhNZ+Q7x4GrM18ftoP0zpShm8Q09DYu2fi0DM2QuhDBzN
g6N3z7g5zlepVtAe7XxBFryGLnV3VrbnLWoI7Eu+3IdNtXbsZhX9Sdx4EVGr677K
MBBvgMgNaghU7Pmi/b7Ad76yhyA2GQOBqAoYUTVFNawKm1sRTm1XPox5N+aIfjK6
/jRsAQ/ocdyNXQ2nMny6PPJBRJV7m/LvpGoWF4m70CG9knUOx0HC5oJUZLJBVNAk
lhZ01vG8b9lQhtqVMxjGawOA8KaUng2bKZ4b7c+oO/UK29qE3Uqrs8DoODBZAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUHOttZtP1VYwiDv0JQNkpIy6l6AMwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIzOTJlMzIzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB0YMA0GCSqG
SIb3DQEBCwUAA4IBAQBGmU0SFx3QSuj452W9j2t/zqsvtuPGTHNttGis5rAGmNSm
hWlfiRUf2ocyFKUOHkCxv6M4ylCvt8Fxhpkv2LBd7QonSTtkcQu4JO5MMZXnfd0S
l7yIlSDngogo2H+ESgySqwUMBQXUuT1w7kdUVZH/9zgnO8YrDwW0V3fHO5/jPcyB
PjX3138hlEjxdJEbcie0UAJI+eJXb+f/ItJ5dJThiUUZDixxPTuAR/JzdlKiw9tX
QWizYpeka6iajDoBolg75SP1k8pQyMWXcakA+8K4/poGef+lWkWh4cmwDSlk5aUQ
Ng+zD9L1yvQEBmGDZimXGiwDrric9JNtFsBbisxO
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:52 2025 by rpki-client