Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e36342e302f31392d3234203d3e203130373738.roa
File:                     3230302e32392e36342e302f31392d3234203d3e203130373738.roa (raw, json)
Hash identifier:          E53iTBN7m9z7D+PiPCyvIze18kD4o06PlV8OmYt5jCo=
Subject key identifier:   AB:01:E2:81:68:1E:29:4F:7D:E0:15:70:E9:28:10:1F:A2:97:3B:5E
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       1CF3F43947F34E9AECAA4AFAD57071104DBADDEF
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e36342e302f31392d3234203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 18:08:26 +0000
ROA not before:           Tue 05 Mar 2024 18:03:26 +0000
ROA not after:            Tue 04 Mar 2025 18:08:26 +0000
asID:                     10778
IP address blocks:        200.29.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f3:f4:39:47:f3:4e:9a:ec:aa:4a:fa:d5:70:71:10:4d:ba:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:26 2024 GMT
            Not After : Mar  4 18:08:26 2025 GMT
        Subject: CN=AB01E281681E294F7DE01570E928101FA2973B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:88:eb:7c:c6:e3:f2:54:28:90:bf:44:a8:
                    37:31:77:2f:cd:0b:8f:30:af:a5:dd:1c:64:6d:7f:
                    d3:c6:18:75:2d:d2:bf:6e:68:c4:42:13:bf:84:59:
                    13:11:d6:3d:89:4b:06:d3:1c:12:ff:8a:d6:84:3c:
                    ba:12:00:bd:f4:23:dc:1f:81:4c:2c:d1:7d:7e:87:
                    bc:34:89:26:80:0b:33:10:bc:1f:e2:be:6a:65:76:
                    e1:be:0d:3e:cb:43:57:b1:b8:5c:79:04:5a:77:75:
                    fd:9f:82:78:78:2c:a6:cc:45:0d:44:d8:09:23:ea:
                    50:52:d8:ba:fa:00:9c:dc:61:c9:22:61:70:5a:ef:
                    e8:dc:9f:70:9f:21:02:ae:68:b4:cf:05:45:d1:e9:
                    61:6b:88:ed:64:a7:ca:55:ca:6a:a0:9d:a7:6d:8e:
                    ee:2d:59:36:0a:80:a9:78:0c:8b:e8:d1:03:fd:b8:
                    8e:e5:25:38:4c:4a:b1:bf:b3:f0:a6:13:44:6f:3f:
                    bb:65:00:32:c7:1c:5e:fd:37:55:94:b6:49:63:8e:
                    70:27:a6:08:b7:7f:67:5d:00:32:f3:89:13:bc:28:
                    5f:04:24:90:80:0c:43:bc:1c:fa:97:5f:0f:46:33:
                    7f:44:e5:33:10:dd:2e:3a:cd:9e:19:a5:7f:70:ff:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:E2:81:68:1E:29:4F:7D:E0:15:70:E9:28:10:1F:A2:97:3B:5E
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e36342e302f31392d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:de:f1:f4:d8:69:89:8a:02:a8:9d:3d:a6:f5:9c:1b:17:b0:
         00:ff:ee:5b:80:8c:a3:ec:48:a9:0b:fc:04:f2:57:4b:10:ae:
         31:ce:14:a9:1d:6c:4a:a0:8e:32:ba:20:35:4c:77:e7:ae:36:
         11:9e:ba:96:ee:52:68:ec:32:0e:79:d1:39:5d:bf:75:c5:48:
         97:99:2a:4e:e2:e4:26:68:66:59:ea:a8:81:53:60:25:82:0a:
         a8:1f:bd:f2:13:85:40:9e:5a:70:42:d6:5b:d1:38:51:1f:6e:
         95:e6:f4:42:23:54:46:fa:6b:fa:e1:10:51:7e:5e:80:8a:4c:
         2d:4e:48:df:bf:92:52:a2:b2:b6:e0:13:40:6e:d9:49:58:10:
         2b:4c:62:04:09:b7:f3:99:ad:28:2c:a6:8a:40:7a:ae:b7:db:
         a9:59:d4:c7:50:38:80:a1:5f:eb:bf:6b:c2:06:f8:b7:f8:2b:
         a6:ef:01:ce:27:4e:6b:47:3f:c9:d3:15:21:52:95:cb:5b:60:
         3b:11:d5:9a:00:e8:4f:26:60:46:87:ea:06:6d:0d:0d:5e:f3:
         c1:2a:b3:e0:04:0f:42:47:fa:e4:ae:62:43:7c:3d:f9:91:1a:
         2b:36:52:7b:97:6f:86:d1:73:fa:a1:73:91:08:63:cb:9f:80:
         f6:5f:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org