Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9ncUffHh2OZbRYtAhSLy9F0bDwk.roa
File:                     9ncUffHh2OZbRYtAhSLy9F0bDwk.roa (raw, json)
Hash identifier:          TLGnLm5nq3xYaNpCYz5Se84DfpnEqwJigw0gGh9wf38=
Subject key identifier:   F6:77:14:7D:F1:E1:D8:E6:5B:45:8B:40:85:22:F2:F4:5D:1B:0F:09
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0451E9DC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9ncUffHh2OZbRYtAhSLy9F0bDwk.roa
Signing time:             Tue 03 May 2022 10:34:01 +0000
ROA not before:           Tue 03 May 2022 10:34:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57416
IP address blocks:        141.11.177.0/24 maxlen: 24
                          141.11.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72477148 (0x451e9dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May  3 10:34:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f677147df1e1d8e65b458b408522f2f45d1b0f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:ee:05:ba:7f:3e:1e:eb:d3:4b:56:fc:33:
                    29:68:1a:f6:01:dc:e1:12:eb:90:2d:21:69:cb:27:
                    67:66:bc:58:5d:74:7e:3e:a1:cc:f7:e6:70:2b:9b:
                    cf:f3:ee:95:3a:25:40:f2:0e:aa:fd:43:d6:48:75:
                    f1:bc:7b:fa:cb:70:fb:5b:40:f3:02:92:f3:51:a8:
                    ab:fb:1b:84:8e:ad:7c:e3:52:08:82:15:a9:cc:fa:
                    0f:78:8d:20:51:59:07:f0:ea:47:e1:46:cc:40:fe:
                    78:a7:a7:7d:ff:b5:83:ba:b4:8c:67:20:cc:09:2a:
                    b6:4b:8a:7c:c3:16:fa:f1:5b:cd:f4:d3:2c:1b:e4:
                    15:bd:11:bb:e0:c4:02:cf:14:52:5c:16:0e:b4:67:
                    fa:87:97:46:ea:30:07:da:49:1c:ec:c3:1f:17:d7:
                    5d:31:06:91:1d:cc:34:65:e0:b4:c1:72:6d:f4:9f:
                    6a:b1:0f:4e:22:f1:f5:09:80:a1:15:61:8e:f0:a0:
                    7d:28:55:f5:a1:a5:a0:5a:69:cd:c0:13:d0:e9:24:
                    ae:51:13:1f:1c:87:76:99:c0:6a:01:cb:31:fa:bb:
                    7a:d6:56:13:79:3a:b7:8f:58:b7:d8:a2:dd:48:7e:
                    7a:83:bf:f4:39:dd:47:ad:6e:51:1c:e4:72:a1:0b:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:77:14:7D:F1:E1:D8:E6:5B:45:8B:40:85:22:F2:F4:5D:1B:0F:09
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/9ncUffHh2OZbRYtAhSLy9F0bDwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.30.0/24
                  141.11.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:f1:7b:f1:8d:ce:b4:79:ca:f3:84:7a:3a:18:ab:58:9b:
         26:11:15:05:24:12:12:4e:7b:ff:9e:05:c0:1a:8d:51:3e:9e:
         61:c1:64:9d:a3:43:26:fa:df:db:5f:ef:a8:3a:81:ff:5a:d5:
         98:cd:67:90:8c:25:16:d5:8d:3e:bc:c9:52:49:29:0f:0f:2f:
         21:5f:11:15:ad:6a:fe:18:54:a3:4c:df:cf:2b:6b:dd:69:5b:
         f8:92:0f:08:00:c5:bf:fb:42:6e:74:37:87:ba:1b:df:e7:e3:
         6a:c8:09:74:15:22:65:a3:5d:27:a7:e8:3c:6a:6a:e0:bf:64:
         fe:34:e1:41:3d:bd:3b:1a:76:21:10:26:6f:79:de:ec:2f:f6:
         59:30:e5:be:98:cb:70:31:04:a1:7f:db:24:c5:9c:a1:3c:a7:
         64:ad:41:ff:98:60:75:71:ca:87:9e:8b:91:6f:3f:cb:ae:a9:
         fc:3e:4b:ec:ba:91:a6:90:ea:03:92:4d:05:06:32:ca:f7:60:
         51:46:a4:3e:62:47:36:83:0c:66:92:44:8a:18:61:e0:df:56:
         f1:1d:42:aa:c1:04:19:a2:16:84:b9:2d:00:ec:28:e1:70:3b:
         6f:af:d7:fc:2d:96:7e:db:45:4e:51:94:1d:09:08:cd:fc:a5:
         ae:15:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org