Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/24b903bd9b5dfed2f709826524b3446a5453bdc4.roa (download)

Subject key identifier:   4C:06:E7:14:66:98:D9:03:82:BC:36:B3:00:7C:38:16:58:59:E0:9B 
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
asID:                     AS52423
Prefixes:
    1: 138.59.16.0/24 (max: 24)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/24b903bd9b5dfed2f709826524b3446a5453bdc4.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889753 (0xd9399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=24b903bd9b5dfed2f709826524b3446a5453bdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8d:12:58:80:c1:d0:b1:66:2d:cd:7c:d8:37:
                    82:d3:54:c3:b9:73:89:f4:e2:68:5a:74:0a:af:07:
                    d1:00:d7:62:be:db:cf:75:32:b6:a0:53:3b:6c:61:
                    40:86:4e:5f:9d:0f:de:dd:78:11:60:0e:a6:9e:bb:
                    e2:cd:37:85:13:18:d5:a1:fe:27:8f:55:2b:e8:bc:
                    17:5c:f4:58:3b:35:f0:24:af:f5:cd:a9:17:d3:72:
                    2f:41:dc:63:1a:8e:e2:75:d6:33:7b:d5:dc:08:03:
                    a6:77:4a:f4:24:8f:11:b9:82:76:6a:d0:e7:a5:8c:
                    1e:2e:d5:d9:e6:73:ed:9f:8d:97:f5:89:8e:bf:cc:
                    d6:90:0d:98:f3:b1:47:a9:f1:b2:56:bf:33:20:f4:
                    09:3f:59:cb:3e:f7:85:b0:62:8f:f2:69:83:75:ba:
                    35:8d:56:65:5f:c8:2b:85:18:ce:56:c4:f3:22:a1:
                    30:70:68:91:5f:f6:57:4f:28:98:27:bf:97:0f:e9:
                    ff:06:08:cc:e7:f6:42:37:1f:5d:70:b1:6f:16:cc:
                    14:ee:4e:8a:98:c3:e7:31:40:0a:44:4a:e6:56:ca:
                    7e:05:15:e5:e7:59:52:53:cc:82:2a:33:c4:db:d8:
                    7e:6e:51:71:5b:c3:4f:26:ee:4d:b7:a5:36:63:34:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4C:06:E7:14:66:98:D9:03:82:BC:36:B3:00:7C:38:16:58:59:E0:9B
            X509v3 Authority Key Identifier: 
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/24b903bd9b5dfed2f709826524b3446a5453bdc4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:04:3d:66:bf:9f:a2:56:a2:fd:32:40:de:81:e6:bb:ff:
         3e:d3:30:68:22:48:67:1b:af:ef:e1:9c:24:ac:99:b9:9b:b4:
         6f:69:e7:d9:52:f6:7e:fe:c9:1f:22:48:82:e7:68:ee:09:0c:
         ab:2c:87:01:60:e3:de:03:e9:e4:ed:32:e3:f0:83:00:d7:66:
         15:28:f5:54:11:35:92:77:67:ab:13:e0:0c:fa:d6:60:37:91:
         41:05:70:93:4c:90:0b:c5:f2:de:91:1c:52:48:f8:0d:62:0f:
         20:ca:03:ef:f3:90:8e:d7:60:44:c0:27:3a:c7:dd:f7:48:26:
         f0:1a:d6:cb:c0:43:62:72:69:58:ab:08:11:57:f5:3b:3b:8a:
         e6:92:40:c0:37:dc:53:a2:98:c8:d5:3c:06:c1:cf:f7:64:16:
         6f:01:b8:02:e4:8a:e5:9d:a6:72:29:8e:1b:92:c0:79:06:60:
         3a:bb:96:75:eb:43:36:b5:8e:f7:d3:5b:ca:f8:ca:4c:a6:79:
         0d:a7:d9:91:1d:2d:a8:90:74:1d:58:d3:e1:b8:5e:30:ac:ba:
         29:4a:86:51:ce:5b:25:6b:4a:10:d6:30:cc:5f:8d:81:ee:e6:
         84:5f:9f:0b:5d:56:e4:48:cf:e5:16:70:a4:3d:10:4c:cd:54:
         db:83:ec:31
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDZOZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjEwMzI0
MTQzNzA1WhcNMjYwMzI0MTQzNzA1WjAzMTEwLwYDVQQDEygyNGI5MDNiZDliNWRm
ZWQyZjcwOTgyNjUyNGIzNDQ2YTU0NTNiZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg40SWIDB0LFmLc182DeC01TDuXOJ9OJoWnQKrwfRANdivtvP
dTK2oFM7bGFAhk5fnQ/e3XgRYA6mnrvizTeFExjVof4nj1Ur6LwXXPRYOzXwJK/1
zakX03IvQdxjGo7iddYze9XcCAOmd0r0JI8RuYJ2atDnpYweLtXZ5nPtn42X9YmO
v8zWkA2Y87FHqfGyVr8zIPQJP1nLPveFsGKP8mmDdbo1jVZlX8grhRjOVsTzIqEw
cGiRX/ZXTyiYJ7+XD+n/BgjM5/ZCNx9dcLFvFswU7k6KmMPnMUAKRErmVsp+BRXl
51lSU8yCKjPE29h+blFxW8NPJu5Nt6U2YzR/rwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEwG5xRmmNkDgrw2swB8OBZYWeCbMB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlLzI0YjkwM2JkOWI1ZGZlZDJmNzA5ODI2NTI0YjM0NDZhNTQ1M2JkYzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIo7EDANBgkqhkiG9w0BAQsFAAOCAQEAQR4EPWa/n6JWov0y
QN6B5rv/PtMwaCJIZxuv7+GcJKyZuZu0b2nn2VL2fv7JHyJIgudo7gkMqyyHAWDj
3gPp5O0y4/CDANdmFSj1VBE1kndnqxPgDPrWYDeRQQVwk0yQC8Xy3pEcUkj4DWIP
IMoD7/OQjtdgRMAnOsfd90gm8BrWy8BDYnJpWKsIEVf1OzuK5pJAwDfcU6KYyNU8
BsHP92QWbwG4AuSK5Z2mcimOG5LAeQZgOruWdetDNrWO99NbyvjKTKZ5DafZkR0t
qJB0HVjT4bheMKy6KUqGUc5bJWtKENYwzF+Nge7mhF+fC11W5EjP5RZwpD0QTM1U
24PsMQ==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:42:51 2021 by LibreSSL & rpki-client.