Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/gxJMKncLKmWQ_LtcnRjmcu3609o.roa
File:                     gxJMKncLKmWQ_LtcnRjmcu3609o.roa (raw, json)
Hash identifier:          ZHUEFDBZuCXyoX5u4locGPQ5ark5XfXMEJk9HIP+8JA=
Subject key identifier:   83:12:4C:2A:77:0B:2A:65:90:FC:BB:5C:9D:18:E6:72:ED:FA:D3:DA
Certificate issuer:       /CN=dc332686065555dfe5505add5226a9cf9482879a
Certificate serial:       016EE808
Authority key identifier: DC:33:26:86:06:55:55:DF:E5:50:5A:DD:52:26:A9:CF:94:82:87:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DMmhgZVVd_lUFrdUiapz5SCh5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/gxJMKncLKmWQ_LtcnRjmcu3609o.roa
Signing time:             Thu 12 May 2022 09:04:05 +0000
ROA not before:           Thu 12 May 2022 09:04:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        195.60.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24045576 (0x16ee808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc332686065555dfe5505add5226a9cf9482879a
        Validity
            Not Before: May 12 09:04:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83124c2a770b2a6590fcbb5c9d18e672edfad3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:2d:dc:cd:b2:75:1c:f4:d4:b4:e1:8c:70:
                    21:2c:da:7b:8e:93:85:6b:03:81:c9:3f:a6:6d:3d:
                    49:31:77:b8:ac:ab:7d:b4:1e:e1:63:93:fb:3e:1f:
                    35:14:95:2c:83:a7:ce:ae:da:e3:38:b6:16:2e:89:
                    c2:c6:69:ca:64:7c:c5:7f:14:fa:48:2e:4c:98:97:
                    a1:51:4e:16:e5:83:e8:e4:75:93:8f:af:5d:cf:35:
                    1b:05:cb:2b:51:9e:f3:17:ab:e6:2f:cc:e5:88:54:
                    1c:bf:d6:0b:8d:04:2c:bb:e9:2b:46:bd:b2:82:1d:
                    e9:e6:cb:6d:08:ae:c3:a3:d8:80:56:6b:a0:a9:0d:
                    79:77:58:a3:dd:ff:4b:f8:66:30:00:6a:f6:6a:30:
                    ff:79:a8:a9:fb:c8:b3:2e:bf:92:1f:bb:ac:c4:d8:
                    3a:e2:d7:7b:15:c8:a7:1f:2d:f5:c7:e3:35:ff:97:
                    b7:cf:0d:ed:ef:5c:c1:11:14:c5:a4:d2:ee:72:96:
                    a9:53:bb:b0:2c:38:05:91:69:eb:c4:45:56:cf:ab:
                    84:93:32:1d:e5:40:a5:8d:20:f1:6a:ee:2d:62:e5:
                    aa:d9:19:94:af:77:8b:c8:fd:39:50:30:63:dd:d0:
                    fe:89:7f:eb:5b:ba:f8:e0:58:d1:54:9a:bd:eb:67:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:12:4C:2A:77:0B:2A:65:90:FC:BB:5C:9D:18:E6:72:ED:FA:D3:DA
            X509v3 Authority Key Identifier:
                keyid:DC:33:26:86:06:55:55:DF:E5:50:5A:DD:52:26:A9:CF:94:82:87:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DMmhgZVVd_lUFrdUiapz5SCh5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/gxJMKncLKmWQ_LtcnRjmcu3609o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/3DMmhgZVVd_lUFrdUiapz5SCh5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:6f:13:1b:f0:3c:60:77:f1:3f:cd:50:a1:87:6f:84:17:b7:
         0a:9e:0a:22:f9:04:d2:f1:07:23:b9:53:81:ee:be:f1:0f:03:
         3f:50:95:ee:8a:6f:57:e9:24:0e:14:e9:ad:e3:ed:f1:3b:c1:
         cf:5d:14:72:ab:dc:89:29:50:63:8f:90:35:a7:bb:85:d6:5c:
         74:9b:6f:5b:64:a5:6e:60:1b:ba:5f:96:18:13:22:8d:1a:f0:
         c6:ce:d5:8c:b2:05:32:b5:4b:8b:fd:b8:97:46:58:ad:e1:c9:
         da:e1:c1:8f:ba:35:c3:bf:08:49:1f:f9:2d:af:95:6e:e1:ee:
         f6:53:31:9a:a8:f2:a7:34:92:68:e6:ba:a2:cd:f2:79:28:04:
         7e:a1:76:99:d9:a7:77:24:46:c5:02:c5:53:e5:b7:5c:de:dd:
         e4:89:f2:27:d8:41:32:4c:42:cf:6c:f6:97:ae:ac:4a:20:8d:
         66:be:ed:87:f5:3a:e4:87:5e:0d:65:b7:28:01:ac:c4:bf:dc:
         00:ac:16:ed:60:8b:a6:40:40:bd:1c:f2:6b:10:a0:63:28:62:
         a7:d6:eb:63:35:32:b0:17:8f:13:cd:b5:03:00:b5:64:ef:8f:
         62:de:b0:c6:78:eb:0f:fc:c6:e8:61:d4:2b:4a:6d:f1:92:98:
         65:42:7a:a2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAW7oCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YzMzMjY4NjA2NTU1NWRmZTU1MDVhZGQ1MjI2YTljZjk0ODI4NzlhMB4XDTIyMDUx
MjA5MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODMxMjRjMmE3NzBi
MmE2NTkwZmNiYjVjOWQxOGU2NzJlZGZhZDNkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL88LdzNsnUc9NS04YxwISzae46ThWsDgck/pm09STF3uKyr
fbQe4WOT+z4fNRSVLIOnzq7a4zi2Fi6JwsZpymR8xX8U+kguTJiXoVFOFuWD6OR1
k4+vXc81GwXLK1Ge8xer5i/M5YhUHL/WC40ELLvpK0a9soId6ebLbQiuw6PYgFZr
oKkNeXdYo93/S/hmMABq9mow/3moqfvIsy6/kh+7rMTYOuLXexXIpx8t9cfjNf+X
t88N7e9cwREUxaTS7nKWqVO7sCw4BZFp68RFVs+rhJMyHeVApY0g8WruLWLlqtkZ
lK93i8j9OVAwY93Q/ol/61u6+OBY0VSavetnkI8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSDEkwqdwsqZZD8u1ydGOZy7frT2jAfBgNVHSMEGDAWgBTcMyaGBlVV3+VQ
Wt1SJqnPlIKHmjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNETW1oZ1pWVmRfbFVGcmRVaWFwejVTQ2g1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvZTU2OGM5LWQ0N2YtNGYyYy1hOGMxLTIxN2RlZTk0NzMxMi8x
L2d4Sk1LbmNMS21XUV9MdGNuUmptY3UzNjA5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
ZTU2OGM5LWQ0N2YtNGYyYy1hOGMxLTIxN2RlZTk0NzMxMi8xLzNETW1oZ1pWVmRf
bFVGcmRVaWFwejVTQ2g1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMM8qjANBgkqhkiG9w0BAQsFAAOC
AQEAhm8TG/A8YHfxP81QoYdvhBe3Cp4KIvkE0vEHI7lTge6+8Q8DP1CV7opvV+kk
DhTprePt8TvBz10UcqvciSlQY4+QNae7hdZcdJtvW2SlbmAbul+WGBMijRrwxs7V
jLIFMrVLi/24l0ZYreHJ2uHBj7o1w78ISR/5La+VbuHu9lMxmqjypzSSaOa6os3y
eSgEfqF2mdmndyRGxQLFU+W3XN7d5InyJ9hBMkxCz2z2l66sSiCNZr7th/U65Ide
DWW3KAGsxL/cAKwW7WCLpkBAvRzyaxCgYyhip9brYzUysBePE821AwC1ZO+PYt6w
xnjrD/zG6GHUK0pt8ZKYZUJ6og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:25 2024 by rpki-client on console-fra.rpki-client.org