Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/833cf2612cf378683820c91e9823df172f651851.roa (download)

Subject key identifier:   71:CF:56:2E:BE:D4:84:C9:03:B9:FC:18:C4:EC:73:54:4D:C9:EC:5A 
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
asID:                     AS52505
Prefixes:
    1: 152.231.16.0/21 (max: 24)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/833cf2612cf378683820c91e9823df172f651851.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341953 (0x537c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
        Validity
            Not Before: Mar 24 14:29:16 2021 GMT
            Not After : Mar 24 14:29:16 2026 GMT
        Subject: CN=833cf2612cf378683820c91e9823df172f651851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:c8:e4:5a:98:6a:5a:9b:79:d4:22:50:a6:
                    26:9c:ea:3b:bd:79:1c:df:bd:36:b3:6e:0b:de:0a:
                    d3:16:09:9d:71:e9:bb:94:b5:14:01:9e:2a:9f:c0:
                    92:c2:a7:07:34:16:1b:c6:37:38:18:b6:db:48:fa:
                    e0:cc:bc:b4:68:bd:7c:b2:56:68:e8:2b:55:d1:6b:
                    d9:d4:d2:ed:f4:6a:56:2a:56:7b:d7:5d:b5:9b:a4:
                    2f:f0:bb:ed:ab:c9:14:e1:9c:f0:f9:3a:80:c8:b6:
                    50:30:b0:40:63:cd:b2:77:13:92:68:3b:38:40:32:
                    33:07:1c:7c:fa:03:93:bd:0d:89:11:a3:e9:a0:57:
                    5f:c9:aa:cd:71:20:9b:36:0e:35:db:b1:09:39:fa:
                    b1:b0:c6:9c:f5:e4:c3:c7:14:8d:0a:0b:c3:51:e9:
                    3f:15:09:78:89:29:9e:06:f9:36:9d:b9:95:f9:22:
                    d5:ac:a0:6e:f6:5c:08:f7:1a:ae:de:0d:60:44:a6:
                    13:85:b2:6d:20:84:ab:84:54:59:67:c3:1e:4c:a0:
                    d9:f8:29:39:33:b2:63:5a:63:9e:33:6c:1f:3a:0c:
                    e4:4f:d7:ab:c7:64:ff:29:c8:00:98:99:ba:68:9e:
                    0f:fb:72:c9:92:cf:b4:48:97:09:fd:97:8c:52:0d:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                71:CF:56:2E:BE:D4:84:C9:03:B9:FC:18:C4:EC:73:54:4D:C9:EC:5A
            X509v3 Authority Key Identifier: 
                keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/833cf2612cf378683820c91e9823df172f651851.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:07:67:13:be:8c:b4:b6:f5:f7:3d:40:d2:a5:da:ad:43:
         4f:c1:5a:65:17:3a:e4:b9:90:0e:0e:b8:ce:2f:53:fc:53:95:
         39:30:f8:64:df:b6:85:02:82:fa:49:f1:94:73:4b:42:de:50:
         ba:dd:2a:79:27:4e:6f:d4:e7:f5:6e:f7:f2:5c:2b:9f:b1:79:
         ad:cd:bc:ff:be:aa:d9:ff:47:ee:57:4e:5d:2d:3d:14:e1:0a:
         04:8b:8e:bc:89:7a:ec:24:f0:ff:7c:25:37:a6:e9:aa:c5:da:
         fe:25:f7:ec:ef:10:74:eb:1b:c9:bf:c2:8e:1d:9d:52:9b:e4:
         fd:62:13:eb:1b:49:9b:08:5f:ae:6f:20:cb:c2:86:46:77:07:
         0b:73:71:53:6e:11:63:17:53:88:a2:28:25:b6:5a:db:e5:f0:
         a4:c4:04:c4:57:04:93:98:6a:78:49:6a:37:47:30:68:86:6b:
         7d:4d:37:5c:9b:d2:90:ea:44:f3:06:ff:6a:82:cd:cc:e3:3c:
         ae:ca:08:b6:05:58:80:00:6f:07:10:fe:a1:dc:87:d2:e0:4f:
         65:97:8e:9e:fa:2d:8e:16:1d:27:05:53:d3:de:9e:7d:e3:d1:
         f5:c9:5c:06:2a:d8:8a:5a:7f:57:d7:e9:23:76:2b:82:a0:d9:
         4b:ae:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:40:58 2021 by LibreSSL & rpki-client.