Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/1d2701be00b6beeff69bf2f997d532741a4deed4.roa (download)

Subject key identifier:   B1:64:60:B1:9B:F5:31:9B:0E:B8:A6:97:1E:AB:71:6E:12:EA:5A:82 
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
asID:                     AS52423
Prefixes:
    1: 138.59.16.0/22 (max: 22)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/1d2701be00b6beeff69bf2f997d532741a4deed4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888632 (0xd8f38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=1d2701be00b6beeff69bf2f997d532741a4deed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:63:1e:52:72:54:18:32:b2:2e:8c:51:24:
                    6a:bb:b5:8f:da:60:59:bd:25:88:cd:43:69:49:ee:
                    5e:48:c8:00:58:e9:1d:55:e5:3a:4f:00:e0:17:2f:
                    88:24:78:4f:e0:b6:0c:3f:7f:a4:f5:51:e3:dc:40:
                    c0:a2:c0:45:f0:39:da:92:db:92:b2:91:8f:14:0e:
                    99:e4:02:57:03:e2:d4:ff:2b:de:ec:9c:e2:07:89:
                    d6:f1:fd:db:02:cb:29:27:65:79:f4:af:76:3c:83:
                    8b:1f:f2:e7:c6:aa:3b:bc:7d:9f:d6:1d:ca:37:ab:
                    d1:54:18:ac:fe:54:d2:b3:e8:b7:43:8a:22:75:91:
                    ae:1c:8c:78:bc:16:5a:74:fc:d8:31:ef:bd:24:e3:
                    b4:55:71:74:b7:85:3f:49:19:90:f6:3c:d8:9a:64:
                    9e:50:35:5b:2a:b4:c9:44:b5:8e:7d:2b:13:89:61:
                    0d:08:68:c8:07:32:94:9c:98:05:eb:bd:92:c4:39:
                    80:1f:b0:87:a7:64:78:16:66:cc:56:26:aa:99:9e:
                    94:28:fd:dc:0f:0d:98:2c:a1:4f:ff:5d:a0:44:79:
                    bf:9d:8e:ea:26:49:1a:63:47:c3:36:0f:a0:62:5e:
                    08:44:66:0d:64:0d:22:8f:b8:dd:5d:9c:bc:7e:38:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B1:64:60:B1:9B:F5:31:9B:0E:B8:A6:97:1E:AB:71:6E:12:EA:5A:82
            X509v3 Authority Key Identifier: 
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/1d2701be00b6beeff69bf2f997d532741a4deed4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:f0:69:75:98:28:21:b9:35:08:19:d7:d6:4b:64:2d:8e:
         42:e0:c3:0d:b7:09:c1:85:e0:46:04:fb:b4:f4:67:e6:2f:54:
         ee:99:89:18:1c:a5:bd:ae:79:e6:fc:ba:06:49:d5:60:ec:d4:
         75:94:e4:c2:80:61:b4:39:73:d1:69:63:38:97:3e:fb:e1:cd:
         11:09:7f:65:bb:4b:58:9b:48:b8:5a:df:9a:d3:5a:b2:78:a3:
         b7:27:c8:38:a9:e8:20:5b:76:4f:c6:9d:00:95:64:87:ad:4b:
         c3:41:fa:0a:ea:1d:74:78:59:7d:55:80:d1:d6:72:27:8a:5f:
         05:b7:fc:5a:88:7a:0d:a7:8a:60:22:85:2c:5d:f9:d0:ad:b3:
         cd:fb:ac:c2:fd:05:dd:ac:bb:0b:66:6e:90:5d:73:40:69:6c:
         0f:12:fa:4d:05:15:bf:be:b4:66:2c:8c:3c:84:ea:52:16:bd:
         13:83:fd:98:73:3f:d3:a9:2d:be:76:80:d7:fc:ed:e8:c3:d7:
         3f:b9:a9:f9:68:21:73:64:f8:81:d3:79:64:1e:fe:f1:06:43:
         de:06:38:9a:45:48:7c:cf:92:4e:21:42:b4:43:c9:1d:40:36:
         36:e4:67:7d:45:32:e6:8b:20:64:1c:8d:7a:2e:c5:6a:a8:c1:
         2a:8c:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:42:51 2021 by LibreSSL & rpki-client.