Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e37362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          YF/TmuHHkAkkJuRXOLyozT2vOE1cZSS+cVDatzBNC/0=
Subject key identifier:   18:93:EC:64:DF:58:7B:79:2B:7D:4F:90:B3:DD:FE:01:69:00:F2:7A
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       2D547843F7641DA16E1021A63A980AE2CF74CC8B
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:32 +0000
ROA not before:           Tue 05 Mar 2024 18:03:32 +0000
ROA not after:            Tue 04 Mar 2025 18:08:32 +0000
asID:                     4995
IP address blocks:        200.29.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:78:43:f7:64:1d:a1:6e:10:21:a6:3a:98:0a:e2:cf:74:cc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:32 2024 GMT
            Not After : Mar  4 18:08:32 2025 GMT
        Subject: CN=1893EC64DF587B792B7D4F90B3DDFE016900F27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:98:e5:83:8e:bf:2f:3f:4a:31:5c:af:d8:
                    dd:d9:b3:ef:53:90:8f:39:cd:91:f6:8a:c7:9c:f7:
                    9c:e3:b8:4e:ba:b8:8e:f2:64:3b:15:78:e7:fe:d5:
                    67:75:a3:60:24:b5:8f:97:24:42:1d:ff:18:d5:0e:
                    d3:98:db:ae:20:ae:3e:59:21:3a:ca:b8:20:07:2b:
                    64:eb:a2:f9:c0:91:2c:2f:d1:48:6a:c0:d3:55:cd:
                    07:9e:5d:f9:8d:6a:ac:56:8d:8b:61:91:f5:92:e9:
                    14:05:4c:5f:09:e7:2e:b9:c0:34:b1:bf:69:d8:f7:
                    83:e6:ce:f7:76:57:bb:4a:dc:c4:b3:6a:50:9c:f0:
                    46:a0:ea:e4:11:90:3b:16:2e:26:92:c6:1b:6a:e2:
                    c9:10:c8:f7:45:bc:1b:01:7c:82:f9:fe:46:06:f3:
                    8f:a7:31:e1:7a:1d:b3:a5:8e:80:dd:cb:66:5e:1f:
                    da:16:f3:e7:aa:10:d0:b7:c8:ec:4d:37:65:5d:f7:
                    a4:e1:3f:68:cd:03:fa:41:91:49:a8:ac:98:96:52:
                    2d:9c:c0:c1:a2:41:e6:32:4c:74:8d:40:f0:ce:5e:
                    aa:31:b0:83:50:96:d6:c4:30:24:a6:36:43:ef:f5:
                    d1:20:b8:10:c6:74:32:e5:83:e2:5c:d8:25:93:e5:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:EC:64:DF:58:7B:79:2B:7D:4F:90:B3:DD:FE:01:69:00:F2:7A
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:91:9a:05:f2:48:92:49:88:1d:64:b9:96:4f:97:4e:b8:
         b9:43:89:8d:a1:dd:89:f4:a6:b6:ce:bd:70:d3:60:e0:6c:8b:
         5a:56:a5:13:21:43:62:83:2d:5a:97:fd:9d:09:03:6a:b6:77:
         6c:61:75:2d:1b:d5:6e:46:45:25:0c:0c:dd:36:87:f2:2c:c4:
         c3:05:08:05:e7:00:74:64:e5:86:2e:82:aa:18:6f:a7:26:05:
         c0:f8:00:47:7e:31:fe:ab:ad:8d:24:ad:6a:cc:ed:78:3b:96:
         1b:28:d9:45:13:60:2b:64:19:69:5e:9e:65:ad:a5:18:60:34:
         c1:8a:ce:f1:71:7c:bf:51:51:d3:66:0c:86:ee:31:98:53:12:
         51:2c:ab:5d:61:56:fe:bf:9b:c1:b1:d2:fe:9a:b3:01:3a:db:
         fe:bf:36:73:3c:70:42:cc:dc:04:fc:29:62:39:ba:9b:05:f1:
         20:2a:8f:cc:da:83:41:cf:f3:27:46:e4:11:50:fe:f5:d0:da:
         36:97:14:90:42:91:ca:ca:72:18:76:5f:34:c1:c1:81:03:9d:
         42:fc:38:43:71:b4:54:ea:fa:8d:3a:62:58:39:7a:fa:4a:1c:
         bd:d1:33:6c:02:af:91:6a:ba:f3:f4:8b:72:e8:32:9b:85:f4:
         97:85:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:48 2024 by rpki-client on console-fra.rpki-client.org