Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/79b65b2e3be475063934856110872c7cf6e19153.roa (download)

Subject key identifier:   70:F4:F6:77:47:D4:DB:65:89:D5:2D:BA:ED:58:4B:88:C8:BF:59:A6 
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
asID:                     AS8151
Prefixes:
    1: 187.153.0.0/19 (max: 24)
    2: 187.153.32.0/19 (max: 24)
    3: 187.153.64.0/19 (max: 24)
    4: 187.153.96.0/19 (max: 24)
    5: 187.153.128.0/19 (max: 24)
    6: 187.153.160.0/19 (max: 24)
    7: 187.153.192.0/19 (max: 24)
    8: 187.153.224.0/19 (max: 24)
    9: 187.229.120.0/21 (max: 24)
   10: 201.122.146.0/24 (max: 24)
   11: 201.122.113.0/24 (max: 24)
   12: 201.122.88.0/24 (max: 24)
   13: 201.155.121.0/24 (max: 24)
   14: 201.155.12.0/24 (max: 24)
   15: 201.155.188.0/24 (max: 24)
   16: 201.155.91.0/24 (max: 24)
   17: 201.155.109.0/24 (max: 24)
   18: 201.122.16.0/24 (max: 24)
   19: 201.122.17.0/24 (max: 24)
   20: 201.122.161.0/24 (max: 24)
   21: 201.122.120.0/24 (max: 24)
   22: 201.122.127.0/24 (max: 24)
   23: 201.122.128.0/24 (max: 24)
   24: 201.122.153.0/24 (max: 24)
   25: 201.122.190.0/24 (max: 24)
   26: 201.122.89.0/24 (max: 24)
   27: 201.122.170.0/24 (max: 24)
   28: 201.122.199.0/24 (max: 24)
   29: 201.122.201.0/24 (max: 24)
   30: 201.122.213.0/24 (max: 24)
   31: 201.122.214.0/24 (max: 24)
   32: 201.99.77.0/24 (max: 24)
   33: 201.122.73.0/24 (max: 24)
   34: 201.122.194.0/24 (max: 24)
   35: 201.122.226.0/24 (max: 24)
   36: 189.149.0.0/19 (max: 24)
   37: 189.149.32.0/19 (max: 24)
   38: 189.149.64.0/19 (max: 24)
   39: 189.149.96.0/19 (max: 24)
   40: 189.149.128.0/19 (max: 24)
   41: 189.149.160.0/19 (max: 24)
   42: 189.149.192.0/19 (max: 24)
   43: 189.149.224.0/19 (max: 24)
   44: 187.136.0.0/19 (max: 24)
   45: 187.136.32.0/19 (max: 24)
   46: 187.136.64.0/19 (max: 24)
   47: 187.136.96.0/19 (max: 24)
   48: 187.136.128.0/19 (max: 24)
   49: 187.136.160.0/19 (max: 24)
   50: 187.136.192.0/19 (max: 24)
   51: 187.136.224.0/19 (max: 24)
   52: 189.150.128.0/17 (max: 24)
   53: 187.155.32.0/19 (max: 24)
   54: 187.155.64.0/19 (max: 24)
   55: 187.155.96.0/19 (max: 24)
   56: 187.155.128.0/19 (max: 24)
   57: 187.155.160.0/19 (max: 24)
   58: 189.150.0.0/17 (max: 24)
   59: 187.150.0.0/19 (max: 24)
   60: 187.150.32.0/19 (max: 24)
   61: 187.150.64.0/19 (max: 24)
   62: 187.150.96.0/19 (max: 24)
   63: 187.150.128.0/19 (max: 24)
   64: 187.150.160.0/19 (max: 24)
   65: 187.150.224.0/19 (max: 24)
   66: 187.229.24.0/21 (max: 24)
   67: 187.229.32.0/22 (max: 24)
   68: 201.99.0.0/16 (max: 24)
   69: 201.155.215.0/24 (max: 24)
   70: 201.155.203.0/24 (max: 24)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/79b65b2e3be475063934856110872c7cf6e19153.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785426 (0xbfc12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=79b65b2e3be475063934856110872c7cf6e19153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:6f:86:09:44:fc:6a:ec:55:c9:53:b2:ce:
                    5b:d5:89:33:31:ce:67:68:19:8e:7d:0b:39:fc:d4:
                    ca:eb:3c:2e:38:8f:84:c3:20:6f:a2:7f:ae:71:79:
                    33:dc:36:10:83:bc:cf:67:08:a5:c4:55:b7:63:a7:
                    f4:29:93:ef:d4:21:e6:9f:03:2c:f6:86:62:3e:55:
                    6a:3c:1c:4a:07:80:3e:48:3e:b3:9a:12:87:13:27:
                    c9:79:be:77:60:f0:07:ed:e7:54:80:36:51:36:97:
                    81:f5:10:0a:46:fa:02:8b:a5:57:45:1c:f7:86:a0:
                    58:a2:68:f5:4c:32:f6:9a:a6:b6:75:1b:5a:4c:b2:
                    9a:cf:07:0e:3c:67:3e:f9:c4:86:53:67:4e:dd:08:
                    96:e8:20:fd:73:8a:72:54:ea:43:d1:69:dc:40:80:
                    94:1a:55:61:b7:4f:1b:4c:16:91:0f:a5:2c:86:ab:
                    e0:33:43:38:72:e0:90:bc:19:16:55:3e:dc:8b:ca:
                    eb:8a:32:9d:a2:a1:a3:7f:f3:09:cb:69:dc:2e:13:
                    fe:2a:40:73:0a:1f:8f:27:c6:47:19:b1:7b:ee:3c:
                    e1:52:af:e3:fa:dc:87:33:cf:97:59:a7:a2:33:4b:
                    58:7f:2a:1e:1e:88:34:18:c7:b5:9f:77:d6:38:54:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                70:F4:F6:77:47:D4:DB:65:89:D5:2D:BA:ED:58:4B:88:C8:BF:59:A6
            X509v3 Authority Key Identifier: 
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/79b65b2e3be475063934856110872c7cf6e19153.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.136.0.0/16
                  187.150.0.0-187.150.191.255
                  187.150.224.0/19
                  187.153.0.0/16
                  187.155.32.0-187.155.191.255
                  187.229.24.0-187.229.35.255
                  187.229.120.0/21
                  189.149.0.0-189.150.255.255
                  201.99.0.0/16
                  201.122.16.0/23
                  201.122.73.0/24
                  201.122.88.0/23
                  201.122.113.0/24
                  201.122.120.0/24
                  201.122.127.0-201.122.128.255
                  201.122.146.0/24
                  201.122.153.0/24
                  201.122.161.0/24
                  201.122.170.0/24
                  201.122.190.0/24
                  201.122.194.0/24
                  201.122.199.0/24
                  201.122.201.0/24
                  201.122.213.0-201.122.214.255
                  201.122.226.0/24
                  201.155.12.0/24
                  201.155.91.0/24
                  201.155.109.0/24
                  201.155.121.0/24
                  201.155.188.0/24
                  201.155.203.0/24
                  201.155.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:54:34:16:07:71:cf:44:81:c0:6f:58:fd:30:64:54:48:
         1a:2d:eb:6d:f2:93:19:8a:c7:fa:06:7a:98:48:b9:01:62:ff:
         0f:ab:ca:ec:2c:37:f8:d7:ca:41:8f:10:7b:ba:9e:ec:ba:cf:
         8f:0e:b8:ce:c7:cd:0a:7a:d8:70:23:e1:a6:84:26:aa:19:dc:
         fc:c9:ee:39:41:b0:32:09:a7:db:d2:2e:3b:ce:4e:5b:c6:1c:
         ac:03:89:72:7c:bb:8d:5f:55:ba:b2:95:21:c6:71:98:c0:12:
         21:17:dc:eb:87:65:d1:b1:a4:a2:63:5d:e8:23:9d:d9:d0:7f:
         48:e7:c7:c3:27:79:a2:a6:bc:17:12:3a:f0:5f:aa:77:c6:17:
         e9:a4:bb:a8:3c:82:7c:82:ec:a2:62:fd:25:20:9e:03:21:15:
         b1:a0:1f:31:9f:75:b0:cf:ad:bf:58:f9:5b:a3:26:4c:1e:36:
         4a:45:85:8c:32:c0:cb:e2:97:64:cc:e3:51:5b:1f:49:ed:12:
         a5:04:c9:19:dc:6e:d3:ef:c9:56:88:e7:dc:74:1e:3e:1b:35:
         ba:94:1e:53:61:3a:ed:d8:3b:a3:5d:12:48:a3:d8:17:be:2d:
         fd:7a:53:5d:93:c4:09:7d:b4:a0:05:5b:77:e1:db:c6:e9:6d:
         af:91:7f:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:44:43 2021 by LibreSSL & rpki-client.