Route Origin Authorization
Location:                 repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/e5bc304a4f959d02f64f21c56b31d9ba1171f01a.roa (download)

Subject key identifier:   1C:52:C9:8A:37:92:77:54:7E:DB:BD:15:2F:E6:0F:B8:94:54:8B:1F 
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
asID:                     AS7438
Prefixes:
    1: 200.36.161.0/24 (max: 24)
    2: 200.36.162.0/24 (max: 24)
    3: 200.36.163.0/24 (max: 24)
    4: 200.36.164.0/24 (max: 24)
    5: 200.36.166.0/23 (max: 23)
    6: 200.36.166.0/24 (max: 24)
    7: 200.36.167.0/24 (max: 24)
    8: 200.36.168.0/24 (max: 24)
    9: 200.36.169.0/24 (max: 24)
   10: 200.36.170.0/24 (max: 24)
   11: 200.36.171.0/24 (max: 24)
   12: 200.36.172.0/24 (max: 24)
   13: 200.36.173.0/24 (max: 24)
   14: 200.36.174.0/24 (max: 24)
   15: 200.36.175.0/24 (max: 24)
   16: 200.36.176.0/24 (max: 24)
   17: 200.36.177.0/24 (max: 24)
   18: 200.36.178.0/23 (max: 23)
   19: 200.36.178.0/24 (max: 24)
   20: 200.36.180.0/23 (max: 23)
   21: 200.36.180.0/24 (max: 24)
   22: 200.36.182.0/23 (max: 23)
   23: 200.36.182.0/24 (max: 24)
   24: 200.36.183.0/24 (max: 24)
   25: 200.36.184.0/22 (max: 22)
   26: 200.36.184.0/24 (max: 24)
   27: 200.36.185.0/24 (max: 24)
   28: 200.36.186.0/23 (max: 23)
   29: 200.36.186.0/24 (max: 24)
   30: 200.36.187.0/24 (max: 24)
   31: 200.36.188.0/22 (max: 22)
   32: 200.36.188.0/23 (max: 23)
   33: 200.36.189.0/24 (max: 24)
   34: 200.36.190.0/23 (max: 24)
   35: 200.36.190.0/24 (max: 24)
   36: 200.36.191.0/24 (max: 24)
   37: 200.39.0.0/23 (max: 23)
   38: 200.39.11.0/24 (max: 24)
   39: 200.39.13.0/24 (max: 24)
   40: 200.39.14.0/23 (max: 23)
   41: 200.39.14.0/24 (max: 24)
   42: 200.39.15.0/24 (max: 24)
   43: 200.39.17.0/24 (max: 24)
   44: 200.39.18.0/24 (max: 24)
   45: 200.39.2.0/24 (max: 24)
   46: 200.39.20.0/24 (max: 24)
   47: 200.39.21.0/24 (max: 24)
   48: 200.39.22.0/24 (max: 24)
   49: 200.39.23.0/24 (max: 24)
   50: 200.39.24.0/22 (max: 22)
   51: 200.39.24.0/24 (max: 24)
   52: 200.39.25.0/24 (max: 24)
   53: 200.39.26.0/24 (max: 24)
   54: 200.39.28.0/23 (max: 23)
   55: 200.39.28.0/24 (max: 24)
   56: 200.39.29.0/24 (max: 24)
   57: 200.39.30.0/24 (max: 24)
   58: 200.39.31.0/24 (max: 24)
   59: 200.39.7.0/24 (max: 24)
   60: 200.39.8.0/24 (max: 24)
   61: 200.39.9.0/24 (max: 24)
   62: 200.76.80.0/21 (max: 21)
   63: 200.76.82.0/24 (max: 24)
   64: 200.76.88.0/23 (max: 23)
   65: 200.76.90.0/23 (max: 24)
   66: 200.76.92.0/22 (max: 22)
   67: 201.162.128.0/18 (max: 18)
   68: 201.162.128.0/20 (max: 20)
   69: 201.162.128.0/21 (max: 21)
   70: 201.162.136.0/21 (max: 24)
   71: 201.162.144.0/24 (max: 24)
   72: 201.162.162.0/24 (max: 24)
   73: 201.162.178.0/24 (max: 24)
   74: 201.162.191.0/24 (max: 24)
   75: 201.162.192.0/23 (max: 23)
   76: 201.162.192.0/24 (max: 24)
   77: 201.162.193.0/24 (max: 24)
   78: 201.162.194.0/24 (max: 24)
   79: 201.162.224.0/23 (max: 23)
   80: 201.162.224.0/24 (max: 24)
   81: 201.162.233.0/24 (max: 24)
   82: 201.162.234.0/24 (max: 24)
   83: 201.162.236.0/24 (max: 24)
   84: 201.166.128.0/19 (max: 19)
   85: 201.166.128.0/20 (max: 20)
   86: 201.166.128.0/22 (max: 22)
   87: 201.166.132.0/24 (max: 24)
   88: 201.166.133.0/24 (max: 24)
   89: 201.166.137.0/24 (max: 24)
   90: 201.166.144.0/20 (max: 20)
   91: 201.166.148.0/22 (max: 22)
   92: 201.166.151.0/24 (max: 24)
   93: 201.166.160.0/20 (max: 20)
   94: 201.166.168.0/24 (max: 24)
   95: 201.166.169.0/24 (max: 24)
   96: 201.166.175.0/24 (max: 24)
   97: 201.166.176.0/21 (max: 21)
   98: 201.166.176.0/24 (max: 24)
   99: 201.166.177.0/24 (max: 24)
  100: 201.166.178.0/24 (max: 24)
  101: 201.166.180.0/22 (max: 24)
  102: 201.166.184.0/21 (max: 21)
  103: 201.166.188.0/24 (max: 24)
  104: 201.166.189.0/24 (max: 24)
  105: 201.166.190.0/24 (max: 24)
  106: 201.166.191.0/24 (max: 24)

--
$ test-roa -p repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/e5bc304a4f959d02f64f21c56b31d9ba1171f01a.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998307 (0xf3ba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=e5bc304a4f959d02f64f21c56b31d9ba1171f01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:3e:12:11:e5:0c:74:77:87:cb:88:60:03:
                    b6:93:7b:ce:b9:e5:df:35:23:e3:b4:bf:32:e4:b5:
                    e5:30:65:b0:e7:b1:19:a8:ec:33:ea:e3:4a:30:0d:
                    65:bd:8f:80:68:16:f5:26:e1:9e:56:1c:1d:38:d9:
                    2b:8c:03:b3:28:60:1e:c6:3d:13:3c:0b:a9:fe:37:
                    bb:38:ea:5c:ac:ed:f9:02:ee:28:0a:9b:b9:7d:45:
                    67:f9:be:5b:95:21:2a:89:bc:02:a5:15:dc:f7:c6:
                    c9:b5:bb:ca:6e:81:5c:6c:94:82:1f:79:2f:65:e5:
                    e9:f2:59:b0:40:30:0f:5e:05:90:4c:a8:1f:41:26:
                    ab:eb:f9:f1:05:e6:bd:85:c8:be:bc:ba:fb:cf:c0:
                    d5:d5:f7:3b:24:88:59:b2:43:73:25:3a:9a:68:0a:
                    ef:13:31:ef:37:31:a5:fa:41:3b:78:b3:d8:b3:f6:
                    ec:cd:d0:b0:30:6e:fd:35:de:44:b9:13:99:4a:a5:
                    0a:d5:0f:d7:c3:f4:99:15:72:2a:53:bd:7e:ec:12:
                    82:27:fc:4f:5a:54:3a:3d:f6:95:8b:d2:e2:ad:16:
                    73:c3:86:be:dd:8f:b2:59:af:89:54:67:49:50:64:
                    c5:7c:df:c7:6e:3f:c0:bb:bb:21:fe:36:09:f6:ed:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:52:C9:8A:37:92:77:54:7E:DB:BD:15:2F:E6:0F:B8:94:54:8B:1F
            X509v3 Authority Key Identifier: 
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/e5bc304a4f959d02f64f21c56b31d9ba1171f01a.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.161.0-200.36.164.255
                  200.36.166.0-200.36.191.255
                  200.39.0.0-200.39.2.255
                  200.39.7.0-200.39.9.255
                  200.39.11.0/24
                  200.39.13.0-200.39.15.255
                  200.39.17.0-200.39.18.255
                  200.39.20.0-200.39.31.255
                  200.76.80.0/20
                  201.162.128.0-201.162.194.255
                  201.162.224.0/23
                  201.162.233.0-201.162.234.255
                  201.162.236.0/24
                  201.166.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:0b:96:cf:a8:6b:1f:26:c1:d4:b4:86:68:9c:3d:3f:91:
         99:50:dd:bb:aa:05:9c:02:ce:29:dd:c7:78:00:b3:d2:8b:36:
         8c:92:8d:3b:1c:42:db:67:9c:fe:14:2c:74:07:8c:0d:cb:7c:
         97:3c:4b:c0:90:24:9d:ed:e4:51:77:6c:2c:20:6c:97:f5:07:
         86:05:c5:c4:7b:31:5b:35:8c:67:ef:94:96:62:1b:bf:0f:18:
         0a:ca:dd:cc:58:da:e1:4c:2f:ff:d6:e0:0b:fd:c1:12:90:ce:
         36:3e:11:c7:d6:6f:ac:7b:bc:36:59:50:29:29:89:ff:cb:af:
         60:de:e9:08:2d:c8:7f:82:ed:86:16:b5:37:7a:56:f1:f9:68:
         37:17:f6:d8:32:54:cd:73:eb:6a:97:ac:bb:d1:a5:34:d3:59:
         ab:74:77:65:50:b0:38:8f:fe:a0:87:a9:d6:a5:d1:b3:75:8b:
         1b:03:b6:52:ff:9f:74:a5:e7:e8:9f:c6:3c:a7:d1:50:8d:86:
         06:7d:15:a1:0a:06:85:8b:05:92:4a:fd:e7:3b:e9:19:02:06:
         a2:99:46:75:5b:d3:e4:42:b6:2a:1c:e3:73:1f:26:2a:1a:7f:
         8a:a7:b2:f9:58:66:ea:0f:89:f9:3c:ad:5a:84:35:81:bd:6d:
         91:77:36:c9
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIDDzujMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
YTBmM2I4Njk5MTU3ZDAyZTJlNzA1MTM5NjlmMmU3N2I2YjlkYjUwHhcNMjEwMzI0
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlNWJjMzA0YTRmOTU5
ZDAyZjY0ZjIxYzU2YjMxZDliYTExNzFmMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzKk+EhHlDHR3h8uIYAO2k3vOueXfNSPjtL8y5LXlMGWw57EZ
qOwz6uNKMA1lvY+AaBb1JuGeVhwdONkrjAOzKGAexj0TPAup/je7OOpcrO35Au4o
Cpu5fUVn+b5blSEqibwCpRXc98bJtbvKboFcbJSCH3kvZeXp8lmwQDAPXgWQTKgf
QSar6/nxBea9hci+vLr7z8DV1fc7JIhZskNzJTqaaArvEzHvNzGl+kE7eLPYs/bs
zdCwMG79Nd5EuROZSqUK1Q/Xw/SZFXIqU71+7BKCJ/xPWlQ6PfaVi9LirRZzw4a+
3Y+yWa+JVGdJUGTFfN/Hbj/Au7sh/jYJ9u2XyQIDAQABo4IC9TCCAvEwHQYDVR0O
BBYEFBxSyYo3kndUftu9FS/mD7iUVIsfMB8GA1UdIwQYMBaAFCbkR03yh/f55N2E
qiumstDt5OpoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODJhMGYz
Yjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWFkOTllZGMtN2M0Ny00YzRkLWE0N2EtM2Y3MjYx
ZWFkMmUzL2U1YmMzMDRhNGY5NTlkMDJmNjRmMjFjNTZiMzFkOWJhMTE3MWYwMWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYWQ5OWVkYy03YzQ3LTRjNGQtYTQ3YS0zZjcy
NjFlYWQyZTMvODJhMGYzYjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBuAYIKwYBBQUHAQcBAf8E
gagwgaUwgaIEAgABMIGbMAwDBADIJKEDBADIJKQwDAMEAcgkpgMEBsgkgDALAwMA
yCcDBADIJwIwDAMEAMgnBwMEAcgnCAMEAMgnCzAMAwQAyCcNAwQEyCcAMAwDBADI
JxEDBADIJxIwDAMEAsgnFAMEBcgnAAMEBMhMUDAMAwQHyaKAAwQAyaLCAwQByaLg
MAwDBADJoukDBADJouoDBADJouwDBAbJpoAwDQYJKoZIhvcNAQELBQADggEBAIG6
C5bPqGsfJsHUtIZonD0/kZlQ3buqBZwCzindx3gAs9KLNoySjTscQttnnP4ULHQH
jA3LfJc8S8CQJJ3t5FF3bCwgbJf1B4YFxcR7MVs1jGfvlJZiG78PGArK3cxY2uFM
L//W4Av9wRKQzjY+EcfWb6x7vDZZUCkpif/Lr2De6QgtyH+C7YYWtTd6VvH5aDcX
9tgyVM1z62qXrLvRpTTTWat0d2VQsDiP/qCHqdal0bN1ixsDtlL/n3Sl5+ifxjyn
0VCNhgZ9FaEKBoWLBZJK/ec76RkCBqKZRnVb0+RCtioc43MfJioaf4qnsvlYZuoP
ifk8rVqENYG9bZF3Nsk=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:48:58 2021 by LibreSSL & rpki-client.