Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/87cb82ba68b79b00c33bf4273586c16c2ddbfad3.roa (download)

Subject key identifier:   D9:CD:B4:BC:6D:0A:B7:3C:ED:BA:1C:C8:22:89:C9:19:D7:68:20:25 
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
asID:                     AS27964
Prefixes:
    1: 152.231.16.0/21 (max: 24)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/87cb82ba68b79b00c33bf4273586c16c2ddbfad3.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340728 (0x532f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
        Validity
            Not Before: Mar 24 14:29:16 2021 GMT
            Not After : Mar 24 14:29:16 2026 GMT
        Subject: CN=87cb82ba68b79b00c33bf4273586c16c2ddbfad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:6c:fd:1c:b2:85:94:7b:14:48:4c:35:96:
                    20:2d:d9:7c:19:07:73:46:19:d5:58:d2:ef:d3:9c:
                    6f:d8:10:ca:79:fc:bf:d8:5e:3f:3e:0a:74:c1:f6:
                    27:cd:34:51:73:4d:c5:4c:a3:3c:aa:5a:fc:cb:71:
                    64:00:eb:1f:a4:bf:de:00:2c:a9:ec:b0:1a:6a:f6:
                    28:85:ad:d0:01:82:ab:03:7d:db:c9:86:a1:2d:23:
                    be:a0:46:a7:d0:83:23:3f:08:35:e9:36:af:6a:6e:
                    0a:12:f6:b7:4b:b8:67:49:73:10:12:08:a3:ff:d0:
                    8c:37:55:ab:b6:92:a9:fc:df:ca:ec:38:be:20:d5:
                    5c:c3:04:0a:1b:0b:36:31:6a:c9:9d:be:af:7b:3d:
                    30:f6:bd:65:a6:62:97:9b:37:87:dd:d7:ab:f9:2b:
                    22:c0:cf:de:6e:13:f1:ac:14:a3:9c:b7:73:16:4d:
                    ac:44:4c:5a:89:96:0d:14:be:1d:bc:15:4b:5f:bc:
                    ed:c4:c1:df:50:29:1a:cc:43:36:4b:c8:9a:8b:fc:
                    7f:70:3a:b8:5b:c0:eb:ff:ac:29:88:9d:83:2e:a3:
                    17:5a:21:cc:b8:32:ed:4f:93:70:c3:79:25:52:3a:
                    43:af:6f:9b:cf:dd:7b:8d:03:aa:a1:7a:64:9e:df:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D9:CD:B4:BC:6D:0A:B7:3C:ED:BA:1C:C8:22:89:C9:19:D7:68:20:25
            X509v3 Authority Key Identifier: 
                keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/87cb82ba68b79b00c33bf4273586c16c2ddbfad3.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:bc:93:5c:d1:d6:9c:c4:8a:ba:4b:b8:08:53:ea:61:b4:
         df:72:32:f9:78:69:21:00:3b:1a:82:e5:4c:7d:61:a1:1b:0f:
         8b:ba:85:db:e4:65:e1:d1:87:68:1c:cb:a1:7e:a5:65:b9:7b:
         f6:52:c2:79:82:e3:b9:c0:0c:6b:f3:31:02:9d:fd:5b:91:fd:
         d9:e2:56:7e:fb:b3:48:f5:ab:59:ff:d0:64:c8:2d:35:08:fa:
         93:50:29:43:aa:36:c8:4a:ed:6d:6b:55:f2:4c:b3:db:5d:9c:
         38:27:ec:16:14:ab:ef:62:20:ba:fc:c7:c2:85:50:d2:9c:4a:
         b1:08:2d:88:4a:ef:25:b1:db:1e:1d:4d:64:27:ac:8c:67:8b:
         67:bd:fa:83:25:d5:fb:4c:1b:c3:99:92:ee:26:36:b4:77:96:
         9c:43:98:4d:3a:24:be:90:19:97:19:06:dd:0e:ad:24:51:88:
         f1:e3:cd:9a:c2:b9:75:5d:a1:fe:4b:1f:bb:d8:d7:5b:0f:20:
         9c:c8:9f:f1:d3:cb:c5:f1:d3:e5:e0:a5:55:3f:6d:21:13:2a:
         a2:37:c1:1a:ac:7b:dd:b5:4a:2d:e3:6a:d6:db:00:b8:bc:c0:
         e4:62:c2:24:2d:03:d7:be:ff:20:38:d4:91:06:6b:5d:89:9f:
         db:d1:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:40:58 2021 by LibreSSL & rpki-client.