Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/baacf0a620e4b7acff7e1190d21725159fc0b56c.roa (download)

Subject key identifier:   E0:28:91:7B:41:71:D1:84:B2:C6:F8:10:B0:A7:66:41:1B:31:20:E6 
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
asID:                     AS52423
Prefixes:
    1: 190.112.220.0/23 (max: 23)
    2: 190.112.222.0/24 (max: 24)
    3: 190.112.223.0/24 (max: 24)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/baacf0a620e4b7acff7e1190d21725159fc0b56c.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895820 (0xdab4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=baacf0a620e4b7acff7e1190d21725159fc0b56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:b9:2d:96:e8:e2:f5:c5:a2:31:fd:38:c3:
                    e5:5d:e1:b9:82:34:86:5a:91:5f:d0:ed:d8:4e:25:
                    f1:db:3a:14:22:8c:29:b9:9d:6b:e4:08:f5:51:5a:
                    97:02:41:4a:e5:21:3e:0b:36:67:76:2c:b4:cb:be:
                    10:8a:e4:af:82:1f:6a:83:78:64:14:a8:af:8b:15:
                    02:ed:fe:82:bb:e9:27:c2:09:bf:34:ab:8b:2a:de:
                    32:6f:7b:35:02:fc:3a:84:fe:f4:ff:a7:97:95:39:
                    90:51:95:29:9c:f2:2f:7c:b2:9a:e0:6f:58:cb:09:
                    e4:b7:0e:3c:c6:fb:67:2d:26:a5:ac:a4:71:b0:12:
                    87:52:7d:7d:d6:c6:5c:6b:a7:f9:54:c9:23:70:8d:
                    b9:e7:c9:79:df:dd:22:2a:ae:9e:a6:a3:28:75:31:
                    39:da:21:c2:3c:26:80:52:91:1c:e8:c2:c6:39:1f:
                    15:a9:7c:0e:20:7a:a5:16:c2:47:5d:b3:f3:de:76:
                    a2:74:dc:5c:2d:b9:fe:59:68:ac:a7:8b:c8:ef:81:
                    59:fe:13:4e:9a:4d:51:8a:21:83:cc:1e:50:73:d6:
                    9f:1c:89:d1:e9:45:b0:d4:6d:14:f7:a0:66:d1:0b:
                    b5:0d:0c:54:ce:52:1a:0f:13:47:c7:b0:90:21:e4:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E0:28:91:7B:41:71:D1:84:B2:C6:F8:10:B0:A7:66:41:1B:31:20:E6
            X509v3 Authority Key Identifier: 
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/baacf0a620e4b7acff7e1190d21725159fc0b56c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:25:33:62:1c:20:77:c5:65:d9:df:93:dd:e0:a2:09:95:
         13:82:80:31:9f:c6:90:42:9a:38:fb:af:6f:aa:52:f5:4a:34:
         5f:0b:f2:ba:a5:cd:55:04:46:95:17:d2:1f:3f:ba:89:ba:c2:
         49:92:61:72:d8:78:01:c4:7d:06:8a:1a:7d:00:c4:72:0d:fc:
         9c:45:0f:78:bd:e0:c0:b7:17:da:36:b9:a5:16:a8:af:e3:b1:
         f1:d9:4d:4b:cb:85:cd:a7:2d:e3:1d:9a:3d:53:71:ff:c2:1e:
         f2:a2:77:10:c7:31:6b:c4:0d:9f:df:b8:a6:22:f2:ef:16:45:
         44:f4:6a:f0:1a:fc:aa:62:11:b1:e0:c2:d0:a0:2d:02:76:5e:
         da:23:8b:01:48:a3:cc:cd:b3:86:7f:ad:d6:88:8b:8a:83:37:
         7c:48:6d:7b:24:86:0a:78:98:16:e1:a0:df:da:d6:df:b0:aa:
         2f:6a:f5:de:98:b3:f0:4b:ab:0c:7f:d5:5d:30:cd:43:02:85:
         f7:ac:e0:c7:a7:63:e6:f9:6e:da:4b:52:c7:3b:b9:3c:6c:ff:
         9a:39:ca:a9:48:00:7d:c7:41:fb:ae:51:dd:c5:42:22:2a:15:
         a6:69:6c:0c:cc:cf:a9:61:87:e8:b5:da:13:d9:7d:34:c2:92:
         2a:1a:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:42:52 2021 by LibreSSL & rpki-client.