Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52477.roa
File:                     AS52477.roa (raw, json)
Hash identifier:          Ph/UYzMiSv/wOEm2ocYpkkEjHX5Si3mveqd/MfRW2+4=
Subject key identifier:   A9:18:CF:C5:D0:88:E8:14:AA:E2:3F:16:81:0E:0C:58:80:17:53:8F
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       41F6E401980985D5EB78144A44F9FE12AB4A8796
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52477.roa
Signing time:             Tue 05 Mar 2024 18:07:56 +0000
ROA not before:           Tue 05 Mar 2024 18:02:56 +0000
ROA not after:            Tue 04 Mar 2025 18:07:56 +0000
asID:                     52477
IP address blocks:        179.40.42.0/24 maxlen: 24
                          186.56.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f6:e4:01:98:09:85:d5:eb:78:14:4a:44:f9:fe:12:ab:4a:87:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:56 2024 GMT
            Not After : Mar  4 18:07:56 2025 GMT
        Subject: CN=A918CFC5D088E814AAE23F16810E0C588017538F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:0d:a5:32:93:c4:e1:cd:eb:29:d0:bc:1e:
                    06:81:a9:69:e0:e0:22:aa:09:35:7f:9c:52:51:bd:
                    04:32:bc:c9:7c:39:41:f9:fd:5e:e8:e8:18:75:aa:
                    ca:9f:81:cf:50:d4:81:9a:92:be:19:05:27:3d:e8:
                    1a:f9:55:36:b0:47:45:3c:76:d8:b0:d9:4d:bb:31:
                    66:a7:ba:62:48:c4:00:79:9b:fd:f4:9c:86:e8:91:
                    d4:1b:a8:93:6f:ac:b8:ce:71:4b:ff:32:7e:1d:b0:
                    f2:f6:94:10:ae:bf:3e:69:ec:19:6f:48:f4:9c:5e:
                    41:d0:15:84:35:04:38:10:5a:d8:cd:09:ab:56:a7:
                    23:1a:3d:bc:18:62:d6:45:8a:91:01:0f:3f:8e:b3:
                    90:09:fd:ed:b5:7b:8b:64:41:c1:9f:8d:75:85:fc:
                    53:55:17:84:4e:49:86:f0:90:1d:6a:7d:89:09:a2:
                    90:1c:84:9a:42:51:83:28:9e:2f:56:b1:92:d6:9e:
                    e6:9b:f6:d5:a2:8a:b9:e5:b3:38:95:e8:75:b7:36:
                    87:e4:78:dc:cc:c0:44:71:17:24:8f:34:81:0b:7e:
                    0f:86:96:40:ae:c8:3c:30:a9:c5:60:26:10:79:c0:
                    8d:e1:09:bd:da:98:1d:ed:5d:60:d3:6f:fe:14:ce:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:18:CF:C5:D0:88:E8:14:AA:E2:3F:16:81:0E:0C:58:80:17:53:8F
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS52477.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.42.0/24
                  186.56.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d9:df:4d:68:6b:bd:89:97:92:35:bf:e3:1f:41:7d:28:58:
         3c:6f:83:f1:2f:c2:17:7d:0b:37:02:8b:d4:5b:c2:71:ce:3f:
         c0:dd:51:91:fa:79:9e:1c:a5:1d:17:0f:96:16:f1:9e:03:79:
         f7:1b:90:09:f8:b4:ed:98:46:4f:19:7e:7a:87:91:7e:90:05:
         d7:db:d9:27:ce:5c:b5:b6:6f:57:86:70:f2:b6:dc:07:0b:b2:
         cb:0c:d3:68:14:28:38:35:5d:d5:4f:db:f8:a0:fe:54:7c:91:
         3e:f6:f3:92:e5:2e:3d:1c:45:92:78:7d:aa:c2:bb:98:7e:61:
         7b:5f:00:9f:b6:cc:a2:7d:22:dc:02:a9:90:0d:67:ff:35:58:
         a5:71:b0:07:57:c8:d7:63:39:7d:d9:fe:2e:28:9f:3d:37:f7:
         ab:36:d5:c8:0b:d2:3c:a6:bf:e1:7d:80:fe:20:f7:3f:a6:51:
         5a:da:a0:84:53:ca:6e:19:f1:f4:14:7f:3e:69:ca:bd:09:11:
         1f:c2:39:ab:3d:f6:34:81:7d:2a:c4:5d:1c:2c:e0:dd:e8:83:
         3a:7d:e0:fb:8b:5e:1d:a6:b8:81:58:c2:3b:0c:a6:bd:44:b8:
         e3:15:44:39:9b:54:47:74:e6:22:0b:1c:ab:da:e2:ac:2f:9e:
         65:70:5e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:43:11 2024 by rpki-client on console-fra.rpki-client.org