Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/lmygxinTF2-FJDfbdRwdTq-R6us.roa
File:                     lmygxinTF2-FJDfbdRwdTq-R6us.roa (raw, json)
Hash identifier:          RWXZbxc1bkD1nxCY23JVW6nUlb6fddOjWD09dvRnIwk=
Subject key identifier:   96:6C:A0:C6:29:D3:17:6F:85:24:37:DB:75:1C:1D:4E:AF:91:EA:EB
Certificate issuer:       /CN=c6cd316f79d2cd3f7f9cc42b795698ebdc4fad0f
Certificate serial:       D50BEA
Authority key identifier: C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs0xb3nSzT9_nMQreVaY69xPrQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/lmygxinTF2-FJDfbdRwdTq-R6us.roa
Signing time:             Sat 01 Jan 2022 11:55:57 +0000
ROA not before:           Sat 01 Jan 2022 11:55:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39305
IP address blocks:        185.182.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13962218 (0xd50bea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cd316f79d2cd3f7f9cc42b795698ebdc4fad0f
        Validity
            Not Before: Jan  1 11:55:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=966ca0c629d3176f852437db751c1d4eaf91eaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:09:8d:e6:8f:41:3d:63:aa:5e:71:5b:16:
                    35:af:de:ef:cd:97:5a:08:65:2e:a3:f7:64:ad:e9:
                    21:aa:48:1a:1c:53:35:99:8f:c9:ce:32:c5:a2:5f:
                    8c:c2:c7:68:45:de:d4:5e:72:b2:c7:33:a1:96:de:
                    96:ee:03:12:68:62:1a:8c:ac:5a:76:9f:2f:c1:32:
                    70:75:41:af:0f:b5:f1:14:e6:0f:0d:9a:88:e8:97:
                    69:ce:67:e3:35:d8:85:15:6b:e5:a6:db:43:3b:e8:
                    f1:4d:aa:77:dc:3b:30:bb:e1:9b:fa:61:f4:6d:c9:
                    42:36:88:02:88:13:ba:6f:6b:6e:0d:3c:47:3e:d7:
                    3d:bf:93:80:15:d1:7f:c2:9b:77:d4:7c:4f:f3:05:
                    4f:ba:fa:ce:41:c0:a2:a2:6a:32:f2:bf:0c:fc:9b:
                    a2:d0:06:6e:12:5c:6c:ef:e6:7a:2a:ec:93:57:75:
                    b2:d8:1e:d7:d3:d6:14:6a:6b:ee:ea:ec:66:bb:72:
                    48:a0:e6:63:40:58:db:43:a8:fb:86:75:6f:de:59:
                    6b:bf:a4:5a:c4:7c:be:fa:61:8d:ba:c8:fe:aa:6d:
                    ea:d6:9d:83:4f:38:cc:a6:6d:50:53:79:1a:4f:04:
                    0f:d0:94:6f:b8:3a:16:f2:8a:03:09:6a:94:ab:26:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6C:A0:C6:29:D3:17:6F:85:24:37:DB:75:1C:1D:4E:AF:91:EA:EB
            X509v3 Authority Key Identifier:
                keyid:C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs0xb3nSzT9_nMQreVaY69xPrQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/lmygxinTF2-FJDfbdRwdTq-R6us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:cb:a6:f4:1c:30:e4:39:cc:0a:ce:00:95:58:bc:47:af:78:
         b7:8a:00:15:55:87:b3:8d:77:c2:c7:20:00:3a:ae:c0:2f:d7:
         76:34:b1:80:fc:31:f7:e3:22:dc:15:de:fe:74:7e:92:83:01:
         c0:bd:c0:9f:a3:f9:fb:aa:24:d4:51:8d:2c:3a:f7:2c:0c:d0:
         c5:3b:19:07:54:e6:c7:8e:81:30:70:b0:74:fa:b3:fc:66:0c:
         2b:0f:0c:b3:6b:8d:b1:d3:b5:b6:72:3f:fd:53:05:f3:bc:35:
         7f:ba:65:8e:5a:11:aa:e5:97:48:08:5d:db:1f:4f:5a:a8:cb:
         ab:45:99:76:dc:12:18:fa:2c:59:95:77:a9:b9:fa:63:d7:a9:
         8d:8a:a0:fc:60:29:31:5b:a4:c8:3f:49:77:3b:ae:69:b8:15:
         8d:38:7c:20:fe:50:17:e3:c7:92:20:73:68:15:47:df:f9:5f:
         bd:a4:fc:79:58:61:36:b5:10:6e:aa:b9:25:79:a4:17:ae:21:
         07:14:55:30:0c:e8:bc:b4:d6:18:e8:ab:b7:d1:2e:3f:28:95:
         f9:3b:35:91:e1:86:47:39:bf:ea:03:ba:31:0f:24:45:e5:1f:
         82:d7:b6:b9:8d:dd:45:95:13:ca:c2:71:15:f6:24:cd:e7:c9:
         4b:ec:e5:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANUL6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NmNkMzE2Zjc5ZDJjZDNmN2Y5Y2M0MmI3OTU2OThlYmRjNGZhZDBmMB4XDTIyMDEw
MTExNTU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTY2Y2EwYzYyOWQz
MTc2Zjg1MjQzN2RiNzUxYzFkNGVhZjkxZWFlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlLCY3mj0E9Y6pecVsWNa/e782XWghlLqP3ZK3pIapIGhxT
NZmPyc4yxaJfjMLHaEXe1F5yssczoZbelu4DEmhiGoysWnafL8EycHVBrw+18RTm
Dw2aiOiXac5n4zXYhRVr5abbQzvo8U2qd9w7MLvhm/ph9G3JQjaIAogTum9rbg08
Rz7XPb+TgBXRf8Kbd9R8T/MFT7r6zkHAoqJqMvK/DPybotAGbhJcbO/meirsk1d1
stge19PWFGpr7ursZrtySKDmY0BY20Oo+4Z1b95Za7+kWsR8vvphjbrI/qpt6tad
g084zKZtUFN5Gk8ED9CUb7g6FvKKAwlqlKsmHmUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSWbKDGKdMXb4UkN9t1HB1Or5Hq6zAfBgNVHSMEGDAWgBTGzTFvedLNP3+c
xCt5Vpjr3E+tDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hzMHhiM25TelQ5X25NUXJlVmFZNjl4UHJROC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvMGE1MGE1LWExYmYtNGVhZi05NGJhLTM4NDRjMDE1MGEzNi8x
L2xteWd4aW5URjItRkpEZmJkUndkVHEtUjZ1cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
MGE1MGE1LWExYmYtNGVhZi05NGJhLTM4NDRjMDE1MGEzNi8xL3hzMHhiM25TelQ5
X25NUXJlVmFZNjl4UHJROC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm2azANBgkqhkiG9w0BAQsFAAOC
AQEACMum9Bww5DnMCs4AlVi8R694t4oAFVWHs413wscgADquwC/XdjSxgPwx9+Mi
3BXe/nR+koMBwL3An6P5+6ok1FGNLDr3LAzQxTsZB1Tmx46BMHCwdPqz/GYMKw8M
s2uNsdO1tnI//VMF87w1f7pljloRquWXSAhd2x9PWqjLq0WZdtwSGPosWZV3qbn6
Y9epjYqg/GApMVukyD9JdzuuabgVjTh8IP5QF+PHkiBzaBVH3/lfvaT8eVhhNrUQ
bqq5JXmkF64hBxRVMAzovLTWGOirt9EuPyiV+Ts1keGGRzm/6gO6MQ8kReUfgte2
uY3dRZUTysJxFfYkzefJS+zlOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:04 2024 by rpki-client on console-fra.rpki-client.org