Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/3230302e3131342e37392e302f32342d3234203d3e203630373235.roa
File:                     3230302e3131342e37392e302f32342d3234203d3e203630373235.roa (raw, json)
Hash identifier:          jHroHuAe1hy2rfR9HTv3tokqoddShkEKx8nVc3BJL9I=
Subject key identifier:   70:71:FD:53:2F:0A:3F:9C:DE:35:6C:98:3B:8E:97:09:19:1D:7C:B9
Certificate issuer:       /CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
Certificate serial:       279B28C55112095A71CC4B90B869EAD9AC3D1E9F
Authority key identifier: 02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/3230302e3131342e37392e302f32342d3234203d3e203630373235.roa
Signing time:             Tue 05 Mar 2024 18:15:52 +0000
ROA not before:           Tue 05 Mar 2024 18:10:52 +0000
ROA not after:            Tue 04 Mar 2025 18:15:52 +0000
asID:                     60725
IP address blocks:        200.114.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9b:28:c5:51:12:09:5a:71:cc:4b:90:b8:69:ea:d9:ac:3d:1e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0279384C8430F0388D9E8E777F0896ADCD6029E8
        Validity
            Not Before: Mar  5 18:10:52 2024 GMT
            Not After : Mar  4 18:15:52 2025 GMT
        Subject: CN=7071FD532F0A3F9CDE356C983B8E9709191D7CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:7f:a7:05:f5:92:55:da:46:1f:d7:4c:eb:
                    60:8e:d8:22:0b:1c:e0:82:bf:4d:e3:26:67:d4:17:
                    98:cf:91:52:4f:e1:56:c2:72:ca:fb:86:26:fd:23:
                    4a:d1:23:3b:94:71:09:2c:b4:95:29:0a:40:27:fe:
                    0e:83:ff:56:dd:63:14:44:48:05:55:17:f7:a3:ae:
                    9e:77:26:68:37:e4:88:1e:42:b5:22:81:2d:c6:f6:
                    0e:43:c4:2f:8f:28:6e:ed:09:d9:96:bb:7f:2d:6c:
                    f8:2f:e7:7e:ca:a8:2d:04:a1:f8:fd:6e:2f:62:64:
                    f3:25:da:4a:e7:c6:a3:8f:51:54:64:52:2a:8c:b7:
                    33:a8:a8:06:ed:f8:67:76:3d:bb:14:dc:2f:1f:90:
                    de:72:47:a6:02:b0:ce:06:f9:13:7e:93:f5:3b:b7:
                    3f:97:54:07:6a:6c:b4:76:2d:05:48:43:ca:05:22:
                    62:93:f5:bb:0c:cc:46:26:f9:e5:e4:19:0b:d2:c1:
                    11:15:25:88:e7:89:20:28:11:58:3e:b6:49:cd:79:
                    df:af:91:8f:bd:e3:7c:2c:62:27:8a:07:9e:2c:81:
                    9e:37:da:20:4f:c6:46:98:a3:b8:64:13:a5:65:44:
                    cf:3a:d8:27:90:57:51:e2:a6:5f:7f:51:f6:94:4a:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:FD:53:2F:0A:3F:9C:DE:35:6C:98:3B:8E:97:09:19:1D:7C:B9
            X509v3 Authority Key Identifier:
                keyid:02:79:38:4C:84:30:F0:38:8D:9E:8E:77:7F:08:96:AD:CD:60:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0279384C8430F0388D9E8E777F0896ADCD6029E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8975A8E22939ACA11DB669FC4BC2E59589BDE902E3FFFE35918663C47C82D07F/0/3230302e3131342e37392e302f32342d3234203d3e203630373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:e0:d8:e9:8e:b6:1d:52:82:47:09:a8:f1:99:65:47:65:
         a7:0c:9b:19:ac:d4:9b:5b:0d:04:fc:13:4c:37:36:5f:b3:ca:
         04:2b:43:d8:81:d3:5a:42:84:6f:64:59:3c:67:11:da:d8:71:
         f1:a1:09:54:68:39:ca:0b:f4:2f:f9:fe:c8:5e:55:e2:de:45:
         08:ba:c0:a2:c3:80:5b:e2:16:91:c9:90:95:8e:b0:ca:9a:7e:
         4c:8c:97:32:52:2c:83:47:b0:87:88:0d:31:03:71:d6:ee:fc:
         f6:96:ef:cb:c9:a7:77:ca:e5:15:fa:e6:95:a8:cd:1d:dc:b7:
         d6:d0:f2:13:8e:bb:4d:8a:a2:fc:37:d6:34:14:dc:5a:41:df:
         58:3b:d5:b2:53:05:e6:43:6e:d1:d8:44:6e:5f:2e:9b:3e:3f:
         95:bc:a7:0e:db:f0:b5:f3:f2:86:70:8c:a6:e8:50:e9:43:43:
         f3:6c:b6:bb:d3:d3:59:17:c5:8b:df:35:86:58:6c:15:67:aa:
         51:81:26:1a:4e:a2:c5:9a:63:57:76:8e:20:6d:7b:af:d0:10:
         a8:42:f9:f1:7d:ec:d7:cc:43:28:ca:89:5b:88:b9:3c:79:c0:
         3f:e5:52:a3:5e:15:7e:ee:2e:8c:a0:55:30:ec:a6:eb:c2:a4:
         a1:03:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org