Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/8a3cc3567ad573f2c9c3148a4c262f3c4fff6094.roa (download)

Subject key identifier:   20:EA:98:3E:DA:E2:46:97:F5:E3:35:6C:9D:AA:B4:88:4E:01:1B:7B 
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
asID:                     AS52409
Prefixes:
    1: 152.231.16.0/21 maxlen: 24

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/8a3cc3567ad573f2c9c3148a4c262f3c4fff6094.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811806 (0xc631e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
        Validity
            Not Before: Mar 24 03:00:00 2018 GMT
            Not After : Jan  6 03:00:00 2022 GMT
        Subject: CN=8a3cc3567ad573f2c9c3148a4c262f3c4fff6094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:f2:76:9f:3a:d5:c3:5c:4b:13:20:46:77:
                    76:a5:2c:29:e3:2c:54:7b:c7:30:02:8b:d4:fd:61:
                    c0:96:a9:1c:26:d7:f8:3d:a3:07:a9:3e:4f:33:37:
                    a5:14:d7:0f:32:65:9f:3d:c9:29:4e:90:bb:26:e1:
                    a3:fd:09:94:53:a6:70:93:ae:0f:2b:fc:ff:a9:31:
                    cb:fd:9e:60:0f:3e:79:4a:c7:8a:36:a6:5d:5e:b5:
                    e2:4d:db:06:38:fd:de:61:16:6e:86:11:9e:0e:32:
                    62:a1:25:96:39:9c:e2:e4:4a:7b:40:24:3d:cb:fb:
                    d9:eb:38:8d:3a:07:93:2c:ec:79:0c:bb:3a:a8:76:
                    8e:15:f6:ff:71:be:59:f0:8c:d6:6c:4c:e0:9a:24:
                    40:6b:48:ba:c6:f4:be:12:fe:d5:ae:55:94:0c:da:
                    89:a3:37:e5:bf:42:0b:5c:cb:8a:e1:32:52:d7:45:
                    56:7f:1a:8e:a7:04:71:d8:dd:c9:37:fc:b6:6d:50:
                    5a:d4:28:b2:a1:ff:30:db:9e:d3:ca:94:8e:19:f7:
                    9e:64:b5:af:73:54:62:83:27:16:c6:25:9e:86:a6:
                    a1:85:4b:a5:61:77:ee:7f:33:37:e9:da:33:f6:2f:
                    55:3a:d7:eb:58:eb:a5:27:77:59:1c:01:00:44:42:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                20:EA:98:3E:DA:E2:46:97:F5:E3:35:6C:9D:AA:B4:88:4E:01:1B:7B
            X509v3 Authority Key Identifier: 
                keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/8a3cc3567ad573f2c9c3148a4c262f3c4fff6094.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:2e:40:da:72:14:b6:14:cd:67:fb:78:13:87:68:8c:ff:
         42:c3:d1:9a:60:9d:f7:f3:cb:53:bc:aa:a2:a5:4b:44:7e:db:
         89:27:5b:1e:7b:2a:fe:4b:51:9d:29:eb:a5:8e:8d:ce:04:0f:
         64:98:ee:5b:31:b2:fb:4d:e3:f0:76:23:88:17:25:ba:65:21:
         2a:08:dd:50:ab:75:60:da:1d:9c:f5:2d:09:fd:b1:6f:5a:07:
         1f:ce:81:d7:09:6c:ee:ae:e2:9b:3e:a5:90:59:1c:09:d4:71:
         34:a0:5e:73:b4:21:dc:79:96:3e:46:7c:09:0a:de:da:8b:63:
         75:44:c1:4a:0e:77:27:99:ef:e5:ab:02:d8:75:de:2e:90:58:
         95:d4:be:0b:97:73:46:71:f3:89:1d:35:8a:f5:45:4f:f4:af:
         41:ab:fd:11:f4:1f:78:9a:e7:77:ef:36:59:9e:70:e0:6d:43:
         8f:6a:dc:92:cf:38:02:f9:e0:7e:a5:b8:d9:c2:d7:40:37:44:
         87:17:ea:3f:66:f6:4f:b6:2f:12:bb:b1:39:40:0d:84:91:4d:
         60:b5:d9:d3:64:d0:35:75:d9:f5:09:96:a9:6f:bb:0e:a0:31:
         9f:4a:fe:b1:fb:e6:8e:07:31:99:ad:cf:f4:7a:85:e1:15:93:
         09:2a:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jan 5 20:36:30 2022 by LibreSSL & rpki-client.