Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52367.roa
File:                     AS52367.roa (raw, json)
Hash identifier:          mHmztNK6VG/JoHiHiI0YfCHV04R8XlPM6BZQiejXXWI=
Subject key identifier:   C0:21:99:5A:27:43:48:D5:A4:F6:42:E6:49:ED:1F:14:F0:EF:88:30
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       218D7DB6AA63565FCE995BDE0F89BAB96C8BD511
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52367.roa
Signing time:             Tue 05 Mar 2024 18:08:01 +0000
ROA not before:           Tue 05 Mar 2024 18:03:01 +0000
ROA not after:            Tue 04 Mar 2025 18:08:01 +0000
asID:                     52367
IP address blocks:        186.56.48.0/24 maxlen: 24
                          186.56.49.0/24 maxlen: 24
                          186.56.57.0/24 maxlen: 24
                          186.56.58.0/24 maxlen: 24
                          201.251.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8d:7d:b6:aa:63:56:5f:ce:99:5b:de:0f:89:ba:b9:6c:8b:d5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:03:01 2024 GMT
            Not After : Mar  4 18:08:01 2025 GMT
        Subject: CN=C021995A274348D5A4F642E649ED1F14F0EF8830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:ab:9b:77:4b:f1:d3:28:8f:39:98:07:17:
                    7e:35:08:c7:96:0c:6b:64:cd:e6:8c:87:67:8a:f5:
                    61:f8:3a:06:6d:e5:0e:04:0e:8a:47:46:d4:ab:54:
                    d5:ef:ee:fe:35:72:5f:2b:31:f5:ce:c9:42:50:f8:
                    69:7c:f4:88:3a:14:15:ea:5e:a1:3b:be:ad:ce:6d:
                    3b:50:b3:f2:8d:4f:71:af:cd:25:f0:de:9a:93:f6:
                    9b:eb:fb:05:27:e7:1f:b7:b6:05:b7:45:a1:91:be:
                    8d:ea:7d:57:a5:5b:b8:50:27:9a:3b:f5:f4:d3:27:
                    ab:75:bf:0d:be:5d:9e:82:f6:28:f7:30:1a:70:ef:
                    7c:e7:4f:b7:32:66:95:dc:f4:72:39:93:6f:b8:27:
                    38:b4:1a:5f:6c:5b:de:0a:a5:f0:2c:8d:20:54:fe:
                    e3:7a:5d:9f:b7:9f:1e:22:9a:ab:b4:bc:3d:ba:b0:
                    81:51:78:a3:e7:ed:c4:78:5a:19:38:c6:ec:35:3a:
                    e8:1d:62:bd:14:96:65:b8:0d:47:79:c7:5b:60:3b:
                    5d:19:43:28:82:a8:b5:d8:a8:e9:b3:cc:78:da:b4:
                    8e:93:c6:aa:cf:b0:82:bc:fa:3d:3d:bb:5c:66:db:
                    38:f3:8f:2f:56:21:0d:96:c2:fb:30:ac:ad:0e:4f:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:99:5A:27:43:48:D5:A4:F6:42:E6:49:ED:1F:14:F0:EF:88:30
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52367.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.48.0/23
                  186.56.57.0-186.56.58.255
                  201.251.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:27:eb:d6:eb:06:1c:6d:82:b2:1b:51:94:db:f8:c3:68:
         c0:9d:ac:83:a5:d1:de:e9:07:7a:c5:e6:4d:f6:3b:72:d5:72:
         3b:e6:7b:fa:c3:85:09:12:15:55:a2:87:8c:f1:ca:7f:73:15:
         f4:db:29:97:f7:69:ef:65:94:4a:d2:b9:74:ae:68:a0:b9:dd:
         e4:62:90:98:13:35:93:11:b4:51:2a:64:65:27:2f:cc:4e:b9:
         f5:54:4a:a6:9e:dd:37:fd:bd:53:59:5f:05:06:ac:5f:e6:77:
         ce:91:a5:29:d2:24:63:d2:02:64:60:ce:27:6d:ed:1d:ea:5a:
         51:5e:c4:b2:40:ad:08:df:5f:db:7f:4a:5e:0d:29:11:f8:3e:
         20:02:d7:ed:6f:48:e4:52:c8:f4:ea:d8:88:4e:fc:34:d4:78:
         3d:62:54:26:65:53:d1:39:d5:7b:db:a1:cf:f7:fb:8f:8f:1f:
         4a:36:1c:ae:31:d1:d3:85:ca:8d:56:72:68:dc:6b:e8:ef:11:
         dd:09:e0:5a:dd:29:f5:e9:88:64:c1:93:f7:5f:02:f3:2c:3b:
         5d:12:ed:27:d8:db:77:7b:fc:59:c9:18:98:60:28:d7:75:00:
         67:70:6c:52:e2:ee:ce:a5:06:bb:b5:1c:d8:8c:9d:00:d6:56:
         2a:2e:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org