Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6jXXd9WurmB48eF9EMWMYDSKmFI.roa
File:                     6jXXd9WurmB48eF9EMWMYDSKmFI.roa (raw, json)
Hash identifier:          qkWF4EJbeD7X2RhLoRKDX58V+bvp/dVZ/TYRgC5KE4E=
Subject key identifier:   EA:35:D7:77:D5:AE:AE:60:78:F1:E1:7D:10:C5:8C:60:34:8A:98:52
Certificate issuer:       /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial:       02FD0DAA
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6jXXd9WurmB48eF9EMWMYDSKmFI.roa
Signing time:             Sat 01 Jan 2022 13:07:50 +0000
ROA not before:           Sat 01 Jan 2022 13:07:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6762
IP address blocks:        213.255.232.0/22 maxlen: 22
                          213.255.236.0/22 maxlen: 22
                          213.255.252.0/22 maxlen: 22
                          83.229.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50138538 (0x2fd0daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
        Validity
            Not Before: Jan  1 13:07:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea35d777d5aeae6078f1e17d10c58c60348a9852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:7e:cf:63:b2:c7:18:15:b2:d9:5d:bf:fd:
                    79:eb:4f:e0:60:c9:a2:be:83:88:3d:0b:cf:43:9e:
                    38:8f:4c:94:8e:61:51:3e:20:ac:df:eb:d8:63:a8:
                    fa:2b:4d:e3:23:d0:03:80:1f:f1:dd:3e:14:1e:b4:
                    da:91:e2:74:72:d6:2d:ae:92:6c:f2:9e:3f:61:b8:
                    54:d5:a0:04:4a:09:45:2d:7c:3f:a0:98:4e:ef:53:
                    eb:6d:3b:ec:e3:a1:d1:ae:83:aa:39:84:34:6a:0c:
                    bd:03:1c:7a:c3:d0:16:c4:f0:6d:a5:be:dc:0e:43:
                    a4:77:66:34:13:14:8b:68:a8:87:cd:12:88:80:1c:
                    b8:49:26:a4:5d:09:f3:56:a1:14:8a:e0:a9:b8:3d:
                    c7:99:61:51:e1:83:01:b5:e2:b8:66:2d:2b:66:01:
                    4f:56:fe:6b:74:11:8d:72:ab:ea:53:4c:7f:6f:cc:
                    61:06:80:6a:04:bf:63:70:95:c4:a8:80:d2:72:95:
                    0c:22:8f:11:47:d6:46:e0:8c:88:68:bf:b8:c4:78:
                    95:a7:e1:f2:da:46:20:55:b0:fc:32:18:1d:cd:ed:
                    07:25:34:4d:36:bd:a2:7c:f8:a3:87:a6:96:07:97:
                    fe:c2:a2:6c:55:07:ab:dc:78:b4:6b:5e:66:11:98:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:35:D7:77:D5:AE:AE:60:78:F1:E1:7D:10:C5:8C:60:34:8A:98:52
            X509v3 Authority Key Identifier:
                keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6jXXd9WurmB48eF9EMWMYDSKmFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.52.0/22
                  213.255.232.0/21
                  213.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:07:5d:88:16:20:57:13:06:12:62:be:72:29:22:f0:07:4d:
         f9:68:43:e5:13:5d:00:9b:58:6d:76:17:0e:45:f9:23:d5:e1:
         4b:47:7d:38:a5:6e:aa:63:36:b6:97:b8:1f:15:44:60:41:68:
         b1:b3:9e:67:39:03:56:66:9b:26:d4:48:f5:2d:2d:19:8e:f7:
         52:ff:38:c2:2d:c8:8b:c6:6e:da:4d:2b:5f:bf:86:2a:ca:99:
         06:8f:fe:f9:07:e4:3c:c2:ba:3c:a8:ef:12:c3:fb:c5:69:e1:
         8a:db:59:16:fe:98:02:91:24:d4:fc:ea:36:bd:cf:b2:00:db:
         ad:78:b1:4a:16:44:6a:29:24:bb:50:a8:f7:52:c4:0e:1b:6d:
         80:17:53:4f:8b:5c:1b:10:5d:49:45:6e:11:eb:ac:64:f2:50:
         5a:d6:14:d7:7b:e1:a8:fb:49:43:eb:4d:ad:be:ef:56:82:b0:
         91:0d:b0:00:3b:fe:10:3a:f2:3b:e5:e5:24:b5:b0:73:41:4b:
         7e:e8:70:a0:59:7c:9b:5b:52:ae:0e:73:bf:13:56:ac:b0:b9:
         17:d5:3d:d4:eb:61:60:f5:df:cb:55:e9:d5:9f:50:c9:39:eb:
         51:8c:93:b6:58:79:a1:b5:4a:8a:88:5a:b5:9c:50:2a:5b:cd:
         92:ba:d8:36
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAv0NqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
M2Q0Yzg3NGE4ZmJhZjUxYzllYzQzY2EwMDliMjJkYzFkNTAzOTc2MB4XDTIyMDEw
MTEzMDc1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWEzNWQ3NzdkNWFl
YWU2MDc4ZjFlMTdkMTBjNThjNjAzNDhhOTg1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3lfs9jsscYFbLZXb/9eetP4GDJor6DiD0Lz0OeOI9MlI5h
UT4grN/r2GOo+itN4yPQA4Af8d0+FB602pHidHLWLa6SbPKeP2G4VNWgBEoJRS18
P6CYTu9T62077OOh0a6DqjmENGoMvQMcesPQFsTwbaW+3A5DpHdmNBMUi2ioh80S
iIAcuEkmpF0J81ahFIrgqbg9x5lhUeGDAbXiuGYtK2YBT1b+a3QRjXKr6lNMf2/M
YQaAagS/Y3CVxKiA0nKVDCKPEUfWRuCMiGi/uMR4lafh8tpGIFWw/DIYHc3tByU0
TTa9onz4o4emlgeX/sKibFUHq9x4tGteZhGYLIMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTqNdd31a6uYHjx4X0QxYxgNIqYUjAfBgNVHSMEGDAWgBQD1Mh0qPuvUcns
Q8oAmyLcHVA5djAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0E5VElkS2o3cjFISjdFUEtBSnNpM0IxUU9YWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvZDA5YTZlLTUwODEtNDY3NC1hYTU3LTI0NGQ4NDA5NGMwZi8x
LzZqWFhkOVd1cm1CNDhlRjlFTVdNWURTS21GSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
ZDA5YTZlLTUwODEtNDY3NC1hYTU3LTI0NGQ4NDA5NGMwZi8xL0E5VElkS2o3cjFI
SjdFUEtBSnNpM0IxUU9YWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAlPlNAMEA9X/6AMEAtX//DANBgkq
hkiG9w0BAQsFAAOCAQEAzwddiBYgVxMGEmK+ciki8AdN+WhD5RNdAJtYbXYXDkX5
I9XhS0d9OKVuqmM2tpe4HxVEYEFosbOeZzkDVmabJtRI9S0tGY73Uv84wi3Ii8Zu
2k0rX7+GKsqZBo/++QfkPMK6PKjvEsP7xWnhittZFv6YApEk1PzqNr3PsgDbrXix
ShZEaikku1Co91LEDhttgBdTT4tcGxBdSUVuEeusZPJQWtYU13vhqPtJQ+tNrb7v
VoKwkQ2wADv+EDryO+XlJLWwc0FLfuhwoFl8m1tSrg5zvxNWrLC5F9U91OthYPXf
y1Xp1Z9QyTnrUYyTtlh5obVKiohatZxQKlvNkrrYNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:10 2024 by rpki-client on console-fra.rpki-client.org