Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e382e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e382e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          ASfUiV4/yiywKk/pcIskJiQZ7wAEhCnqs/S0GgkfOjE=
Subject key identifier:   26:69:47:4F:5E:7A:01:AF:87:04:B5:B4:04:E4:24:43:95:9D:D9:DC
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       13B8F965A46B067E4E4DCA31731823A7A70574B0
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e382e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:34 +0000
ROA not before:           Tue 04 Feb 2025 19:58:34 +0000
ROA not after:            Tue 03 Feb 2026 20:03:34 +0000
asID:                     4995
IP address blocks:        200.29.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b8:f9:65:a4:6b:06:7e:4e:4d:ca:31:73:18:23:a7:a7:05:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:34 2025 GMT
            Not After : Feb  3 20:03:34 2026 GMT
        Subject: CN=2669474F5E7A01AF8704B5B404E42443959DD9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:e4:86:e4:56:6a:22:30:e2:62:a4:92:e9:
                    5b:27:d0:a7:0d:34:1b:38:18:2f:d6:48:40:d3:f4:
                    a8:9b:f0:63:e1:ec:4a:4b:50:a4:03:59:d9:65:10:
                    98:40:5c:cf:e8:5b:77:4d:c3:5f:c0:ac:b0:79:db:
                    30:f7:88:56:4f:ab:c9:5d:c3:1b:cb:86:46:e1:0a:
                    d9:49:f9:26:5a:58:f8:06:44:0d:32:7e:63:01:42:
                    f8:e7:10:61:87:a6:e1:4d:2a:7b:88:c7:f0:4a:f4:
                    f6:0e:12:b9:94:34:52:ae:e8:0a:b9:00:5f:5f:85:
                    ef:e0:7e:c4:f8:9f:3d:a4:f2:35:28:71:61:00:14:
                    b7:42:2a:a4:af:dd:c7:92:0b:2a:9b:47:b5:db:1d:
                    3d:0d:70:ea:a7:14:8d:34:50:9b:e1:e9:01:ad:15:
                    a0:26:1f:1a:a0:55:ed:cc:97:83:ed:76:c2:4e:60:
                    7f:be:ff:6f:db:65:7d:8d:0e:b3:b5:b7:d5:e2:67:
                    f1:0f:a4:67:2b:be:b2:10:59:63:0d:75:31:87:91:
                    e2:e3:d6:bf:ae:66:18:20:5b:e2:20:9d:94:de:06:
                    74:94:5a:dd:9c:2e:ab:39:25:e5:f7:4c:36:1f:f1:
                    02:b1:ae:23:4a:16:8c:71:49:05:f0:cd:06:7a:30:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:69:47:4F:5E:7A:01:AF:87:04:B5:B4:04:E4:24:43:95:9D:D9:DC
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e382e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f1:93:fb:81:d0:71:fc:52:7a:df:d3:8f:4d:b0:88:09:96:
         fb:12:c3:fb:78:41:89:9e:b7:49:52:25:b3:9f:77:3d:6b:bd:
         e1:80:01:c5:c3:57:69:7a:d2:17:65:11:41:a8:3e:bb:b3:93:
         49:14:81:bd:55:ae:bd:8a:fd:45:77:4b:de:0c:d8:53:e3:ff:
         65:2d:1d:fc:5e:20:5a:98:63:46:aa:eb:8a:bb:c8:bb:29:ab:
         66:9b:5f:44:fa:82:75:70:c3:a4:58:9a:90:15:25:13:58:1e:
         81:f4:ec:40:c6:af:b8:31:ae:32:da:8e:05:96:2e:5b:91:fe:
         ba:9c:c9:0e:cd:03:b8:a7:d1:20:eb:b3:cc:df:c7:a0:3e:82:
         2e:57:ac:2a:5d:74:b9:1e:c8:79:31:92:c1:5c:a2:94:77:13:
         11:e8:d4:4d:07:80:67:1a:08:28:df:3b:1f:b7:3f:f4:3d:72:
         39:65:a1:73:4e:23:c7:77:60:99:16:95:a2:9b:6b:41:13:87:
         db:36:27:cb:74:c4:56:e6:17:5e:45:be:00:8e:d3:f6:f9:19:
         3b:58:f2:e0:d5:b3:f9:51:f8:0f:48:41:5a:89:5e:88:b0:63:
         17:f8:e1:f8:75:95:83:39:2b:fa:0e:9a:b1:d2:eb:98:ab:7e:
         f3:8f:3e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client