Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e38322e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          cgJm6b3UGFWiiZF90M0qwjHMp8df2c0a/T4+YjPVJK8=
Subject key identifier:   58:12:E0:F0:DE:BD:A3:77:FF:4A:9A:2D:A7:B9:68:E6:D7:A6:A9:3F
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       70FCA40D985DA1BCF2EC1CCC11D70DF55C6469B0
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 05 Mar 2024 18:08:24 +0000
ROA not before:           Tue 05 Mar 2024 18:03:24 +0000
ROA not after:            Tue 04 Mar 2025 18:08:24 +0000
asID:                     4995
IP address blocks:        200.29.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fc:a4:0d:98:5d:a1:bc:f2:ec:1c:cc:11:d7:0d:f5:5c:64:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Mar  5 18:03:24 2024 GMT
            Not After : Mar  4 18:08:24 2025 GMT
        Subject: CN=5812E0F0DEBDA377FF4A9A2DA7B968E6D7A6A93F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:ea:15:8e:58:47:66:3e:ec:68:a8:75:c6:
                    3d:34:00:fe:87:e6:aa:22:82:62:50:7f:2a:8a:32:
                    7a:e6:e2:bd:91:8d:eb:74:6e:40:80:7c:20:42:9f:
                    1d:49:16:6d:9f:88:46:40:be:94:ba:fb:de:17:bf:
                    71:48:5b:6d:00:0d:e0:ac:fb:c7:0d:44:62:6c:ec:
                    06:8a:5c:e9:2c:92:cf:ca:df:58:5b:20:6f:a9:44:
                    ed:55:74:53:03:c3:2b:f2:9a:e2:54:fb:14:4b:f0:
                    24:d8:7a:1e:3d:6a:ca:48:dd:23:a2:0b:cb:bb:f6:
                    57:99:e5:db:81:d9:85:fb:dd:af:3c:00:38:47:9a:
                    8b:9f:e2:09:19:db:8a:34:d4:34:e4:9c:db:ba:36:
                    cc:f9:bb:08:c0:43:18:2e:28:87:52:e5:57:77:f2:
                    31:9e:4b:c2:5e:98:b0:55:ae:2a:b8:88:02:45:91:
                    85:1c:4b:6b:9d:4c:3f:92:46:f5:9a:9e:df:eb:3e:
                    81:e1:16:eb:c4:75:cf:2a:6a:e8:70:7b:75:cc:fd:
                    d9:75:20:8d:f5:4a:aa:15:2d:68:84:98:0e:cc:dd:
                    9e:50:e0:11:f0:1d:b4:a8:48:ea:df:1c:09:15:1f:
                    98:a8:7b:86:44:fd:37:e7:74:50:69:92:1e:4b:b2:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:12:E0:F0:DE:BD:A3:77:FF:4A:9A:2D:A7:B9:68:E6:D7:A6:A9:3F
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:06:36:b5:df:06:bf:f0:88:70:86:85:5a:44:eb:b7:3d:0d:
         a1:2e:8f:b8:43:bd:44:73:4c:36:74:7c:fd:f0:b4:e8:53:6f:
         02:61:f7:e8:2d:1f:c6:bf:65:2d:48:5b:50:41:05:37:8c:dd:
         d1:fb:72:97:d3:54:71:6a:5d:1c:f5:d8:69:d6:be:b7:25:31:
         36:74:8c:58:a3:b5:0a:a8:06:60:4c:49:35:ac:28:f9:db:3f:
         d8:39:ed:b7:91:df:42:a8:72:29:54:39:e7:ef:f5:b1:e1:5d:
         21:b2:99:5f:06:08:b1:61:0d:4e:bf:a5:50:5c:65:54:41:e0:
         24:98:87:b1:f3:6b:5c:7e:2e:3d:0c:40:e5:59:75:2d:e4:13:
         a9:18:e8:23:94:41:33:3e:3e:9d:55:40:f9:22:64:4f:54:59:
         84:83:48:6b:06:39:6a:72:41:c4:0c:86:13:17:d9:06:45:3d:
         b8:6e:68:27:cf:5a:42:f0:9d:6f:ce:75:6f:74:da:4c:ce:35:
         bb:05:77:3d:51:c5:5a:30:fc:8c:01:b8:fc:49:37:aa:87:cf:
         8d:9a:d8:51:54:4b:09:c4:0c:25:f5:f0:9c:72:eb:96:59:49:
         9c:5f:49:01:ae:46:e0:da:42:16:f9:a9:ea:81:71:14:c3:22:
         d1:ea:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org