Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/aa661374929dece15b8da041808c9830f9a103b7.roa (download)

Subject key identifier:   1D:57:7F:19:32:A8:1E:D6:FE:75:C2:E5:4C:03:8B:0C:66:D3:43:E6 
Authority key identifier: 9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
asID:                     AS52253
Prefixes:
    1: 190.108.196.0/22 (max: 24)
    2: 190.108.200.0/21 (max: 21)
    3: 190.124.220.0/22 (max: 24)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/aa661374929dece15b8da041808c9830f9a103b7.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876998 (0xd61c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
        Validity
            Not Before: Mar 24 14:42:13 2021 GMT
            Not After : Mar 24 14:42:13 2026 GMT
        Subject: CN=aa661374929dece15b8da041808c9830f9a103b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:54:70:bf:9f:88:1e:c1:59:e2:ec:df:46:
                    ae:f3:61:9e:17:f3:67:6e:0f:15:1e:54:d2:64:37:
                    a1:26:8d:3d:00:73:4e:49:40:48:0a:62:5a:c9:c5:
                    85:38:cf:7f:6c:d8:36:05:72:6c:d7:f0:06:ea:94:
                    04:9e:f6:96:2d:35:5f:5b:d2:a7:31:10:72:c4:01:
                    ba:87:90:41:e8:d3:42:f5:2f:1d:1d:06:f5:8f:f3:
                    90:a3:eb:23:1e:e9:2c:43:16:63:cb:02:14:d4:4a:
                    13:1a:65:cd:e6:85:f6:04:27:e9:7c:ab:c9:79:71:
                    53:88:94:d5:39:1d:89:f7:e8:11:c9:97:6b:fe:dc:
                    c7:aa:f5:a8:89:69:51:dc:c1:e7:51:c2:f9:32:e4:
                    c5:8f:88:5d:21:fb:02:64:31:3f:b2:ed:a1:8f:8d:
                    49:21:6d:96:ff:00:21:59:60:eb:0d:db:22:c3:22:
                    0c:1e:28:a4:2c:4d:c5:81:3e:31:35:dc:0e:bc:12:
                    49:d6:b7:4e:74:fc:65:36:c0:df:9a:36:16:6a:6a:
                    c5:53:47:82:da:e3:b9:97:47:ae:20:73:e0:c2:fd:
                    d1:e9:70:69:a5:41:66:0c:39:de:a9:97:e8:8a:bf:
                    79:ab:2e:f2:ef:6e:a0:bf:c1:a7:18:ad:86:a7:98:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1D:57:7F:19:32:A8:1E:D6:FE:75:C2:E5:4C:03:8B:0C:66:D3:43:E6
            X509v3 Authority Key Identifier: 
                keyid:9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/aa661374929dece15b8da041808c9830f9a103b7.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.196.0-190.108.207.255
                  190.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:4e:2f:76:98:f4:01:e7:86:1a:4b:c1:d4:b9:a9:18:46:
         2a:5e:8b:0d:57:d1:c9:59:76:d8:2e:cc:5a:a6:97:7e:f6:a6:
         d7:53:d8:bc:a0:92:85:d4:7d:f5:79:d2:e3:99:c3:95:18:1c:
         90:c5:1e:f9:b1:ca:77:7c:de:ff:52:d3:9c:4c:31:10:f6:97:
         88:af:47:fa:2e:14:d8:f9:dc:0e:87:8a:23:9b:3d:2e:d2:d3:
         c8:bf:65:c3:d4:ac:3e:8c:1e:26:af:37:cb:ea:74:c1:76:dc:
         cc:d7:e2:84:f1:ed:4c:f4:1b:8e:65:28:e3:39:b7:98:94:a8:
         57:d0:ac:07:19:72:3c:b9:89:33:3f:b8:06:9b:b8:79:c8:23:
         27:47:55:d4:7b:8f:27:ba:95:39:8f:11:4b:a0:39:93:69:7b:
         17:37:b0:ba:e4:c3:a8:05:60:38:75:68:03:aa:9b:b3:eb:a6:
         3d:ee:a0:0b:d7:f3:4f:72:f6:d0:b2:2f:c6:6e:27:3d:ff:c0:
         89:7d:83:b0:43:d1:47:41:95:5a:ef:aa:cf:18:46:02:dc:07:
         fa:57:95:88:7a:12:7b:71:bd:31:33:1c:cb:36:35:26:95:cd:
         50:b2:e6:db:63:7e:c9:8e:49:7c:16:2e:9e:95:32:16:88:7d:
         84:02:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:43:03 2021 by LibreSSL & rpki-client.