Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BtaO_WMmjopXmMDHPJPtC7Vabhg.roa
File:                     BtaO_WMmjopXmMDHPJPtC7Vabhg.roa (raw, json)
Hash identifier:          iPQsHQELIYNkGpbYQgs6gmtiuArutQp404eK+vifUFI=
Subject key identifier:   06:D6:8E:FD:63:26:8E:8A:57:98:C0:C7:3C:93:ED:0B:B5:5A:6E:18
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       03F0DF5A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BtaO_WMmjopXmMDHPJPtC7Vabhg.roa
Signing time:             Tue 19 Apr 2022 09:16:27 +0000
ROA not before:           Tue 19 Apr 2022 09:16:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        141.11.160.0/24 maxlen: 24
                          141.11.185.0/24 maxlen: 24
                          141.11.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66117466 (0x3f0df5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 19 09:16:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=06d68efd63268e8a5798c0c73c93ed0bb55a6e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:6b:96:5f:13:47:cc:5e:3c:37:d6:b3:4a:
                    f7:25:37:3a:29:a8:c8:64:98:ca:a4:2c:9b:df:ee:
                    a7:83:e8:43:9a:a1:7f:98:79:be:fa:2f:f3:5e:83:
                    55:7d:3d:53:b9:fe:de:e8:a2:23:ae:48:28:2c:1a:
                    c3:0f:74:bf:af:f3:c1:bb:a3:61:16:21:9c:58:3f:
                    ae:3c:6c:7c:48:7b:28:82:65:46:03:93:ab:24:3d:
                    8f:cf:2e:13:c6:07:81:78:92:eb:87:80:98:08:67:
                    38:d2:54:44:52:bc:1d:05:c6:ab:73:c0:43:f7:a3:
                    dc:a7:72:0a:81:6a:8a:30:07:32:2b:8f:e0:24:d6:
                    5c:23:da:f0:71:30:2f:f1:76:f0:8e:90:a0:4a:74:
                    e1:1d:ee:01:3a:62:87:dd:22:90:d2:16:91:f2:9e:
                    7f:ab:b1:7e:f5:17:bb:b5:48:51:ed:fe:d2:ba:0a:
                    51:8c:af:c5:8d:b6:15:8a:b5:e8:dc:a1:40:02:fd:
                    4a:a0:a3:9d:e9:b2:29:bf:67:59:1b:da:1a:72:6f:
                    90:e6:32:43:e2:a9:26:82:31:4c:62:d1:db:92:31:
                    d2:63:7c:ca:0a:88:ae:cf:cc:2b:60:0a:f9:5f:79:
                    90:94:85:d8:fd:f0:e5:b3:14:be:7b:eb:57:a3:d5:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:8E:FD:63:26:8E:8A:57:98:C0:C7:3C:93:ED:0B:B5:5A:6E:18
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/BtaO_WMmjopXmMDHPJPtC7Vabhg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.16.0/24
                  141.11.160.0/24
                  141.11.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:08:20:66:6f:6b:c0:21:25:ee:24:23:6f:ab:a3:fb:62:
         d4:8a:fc:3a:e9:91:8f:2b:e4:16:16:91:98:d0:2a:c1:c8:a5:
         85:38:95:cd:df:00:7f:06:e7:96:d3:51:a8:e3:a3:84:60:d7:
         7d:6d:7c:99:8f:e1:8d:d2:d3:1f:1f:b8:d4:22:53:72:1a:3c:
         58:fd:44:79:97:ee:c3:81:5a:e0:40:6f:1f:18:82:c5:ee:44:
         84:ce:5c:29:98:ff:2a:57:af:68:fc:e5:78:8e:83:aa:93:51:
         5d:ff:a9:ce:99:14:d0:86:b1:2e:27:a3:94:6a:eb:b5:35:c7:
         8d:1d:e0:e2:9f:ae:e1:8a:08:f0:4d:30:2a:8a:ad:1f:a3:40:
         9d:14:5a:d8:74:9f:87:4a:20:a3:bf:5c:67:be:3a:7d:7c:c8:
         21:0f:1c:e2:76:60:a5:8a:fe:87:1b:89:ed:af:71:af:fe:fa:
         89:3a:ab:81:d4:96:4b:d4:f3:ff:7c:ce:26:c0:bd:b9:49:a3:
         f3:e5:59:e2:e0:d2:2c:5f:0e:b2:ca:e2:6c:8d:df:9d:7f:81:
         5f:8d:55:ed:d3:ec:58:10:ac:15:a6:63:54:64:14:8c:8c:ac:
         0b:6a:5a:eb:a1:cc:7e:76:41:44:90:55:9a:fc:c3:9e:7e:8a:
         5e:6b:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org