Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vbk8YnMqNHPGv9cfvrUZB51NHHA.roa
File:                     vbk8YnMqNHPGv9cfvrUZB51NHHA.roa (raw, json)
Hash identifier:          BSyZU77gxXyw3af09jIDcI5RgSgMQ7Y8nofcZWpYJas=
Subject key identifier:   BD:B9:3C:62:73:2A:34:73:C6:BF:D7:1F:BE:B5:19:07:9D:4D:1C:70
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       02B9CA62
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vbk8YnMqNHPGv9cfvrUZB51NHHA.roa
Signing time:             Fri 21 Jan 2022 16:31:01 +0000
ROA not before:           Fri 21 Jan 2022 16:31:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        141.11.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45730402 (0x2b9ca62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jan 21 16:31:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bdb93c62732a3473c6bfd71fbeb519079d4d1c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:f8:61:b3:62:cd:ce:d1:a6:de:d8:78:b6:
                    65:3f:1c:8f:6c:03:86:ad:dd:c4:62:95:8d:44:03:
                    db:16:db:af:fd:74:4b:63:4c:5c:16:5d:ee:56:d8:
                    5f:9a:18:0a:20:4c:0e:f2:ba:86:6d:a2:a8:6d:59:
                    f4:24:46:b8:02:76:b8:9b:1b:45:c0:50:cc:a3:da:
                    2c:93:1f:ce:b5:1e:a3:7c:4d:76:64:88:2c:00:c4:
                    b2:8f:27:bb:92:6e:b0:fe:c0:c3:21:7e:a4:d1:6e:
                    b6:ab:b8:a4:dc:e0:6e:64:bc:39:79:a5:a8:aa:d1:
                    6d:92:5c:23:d0:2e:a3:33:cc:3a:1e:49:4b:1f:68:
                    1e:d1:b1:2f:3b:69:85:38:f6:65:f1:97:12:0a:7e:
                    40:43:64:79:49:b9:bc:03:a3:35:6c:ca:04:f5:69:
                    27:f0:55:00:8a:03:b2:0b:0e:de:89:78:e7:9f:37:
                    0b:31:b9:b0:d0:54:99:3a:68:e1:11:2a:a3:d0:c8:
                    18:fe:a1:8a:41:37:40:bb:e7:f3:31:25:e5:2e:72:
                    f8:c0:80:b3:dd:54:8c:ba:c8:62:f4:8f:6a:a1:c0:
                    f0:32:88:2b:89:15:55:7d:13:2a:58:e1:68:a6:58:
                    4f:97:0e:f2:ae:35:91:f2:34:91:62:e7:19:de:0e:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B9:3C:62:73:2A:34:73:C6:BF:D7:1F:BE:B5:19:07:9D:4D:1C:70
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vbk8YnMqNHPGv9cfvrUZB51NHHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:44:83:ff:13:b1:62:41:b3:cf:ed:37:5d:9e:41:8a:52:ae:
         b1:82:e8:03:75:20:d3:25:67:8b:af:20:53:a9:75:c3:ff:f5:
         00:0d:0b:84:a9:30:60:66:a3:66:58:7d:89:af:b8:6d:06:5d:
         ae:7b:b5:39:2a:c9:77:16:89:dc:e0:58:f2:35:27:fd:5d:a2:
         93:fc:4c:28:65:be:85:e1:fd:33:9a:01:e9:fc:47:ca:03:34:
         5a:0a:7f:40:fc:40:b8:51:9d:0a:28:fe:23:dc:66:88:08:e4:
         e7:34:f0:5f:37:0f:56:35:37:91:bd:6c:7d:f2:86:a2:6c:af:
         d4:3a:3c:47:16:81:3d:83:99:e2:28:29:e9:83:cc:fa:c1:c4:
         42:cc:17:7c:f3:75:bf:6d:14:e7:e1:e7:8d:a5:a6:83:ac:43:
         57:10:f2:23:80:54:86:49:4e:e3:26:82:46:65:89:71:8d:ed:
         2a:52:48:33:ae:0a:a2:f9:07:49:5c:a1:0c:4b:5f:3d:56:16:
         49:bd:cc:2e:8b:9e:d1:31:45:ca:ba:5c:b1:15:de:36:cd:21:
         b4:1f:f6:8c:75:f5:7a:0a:7a:3d:b2:f3:cc:41:55:ec:85:62:
         b7:2e:42:87:16:10:98:f2:88:ac:50:d1:74:ca:cd:de:73:86:
         16:fb:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-ams.rpki-client.org