Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/3Hc761bF1poxm0IrhSjvIjqQS5o.roa
File:                     3Hc761bF1poxm0IrhSjvIjqQS5o.roa (raw, json)
Hash identifier:          ZkyH+smXUvULMU/Po4TO2LBTNdnOPm9/4TG8IKC+wqU=
Subject key identifier:   DC:77:3B:EB:56:C5:D6:9A:31:9B:42:2B:85:28:EF:22:3A:90:4B:9A
Certificate issuer:       /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial:       35078AEF
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/3Hc761bF1poxm0IrhSjvIjqQS5o.roa
Signing time:             Sat 01 Jan 2022 09:53:12 +0000
ROA not before:           Sat 01 Jan 2022 09:53:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56862
IP address blocks:        77.105.138.0/23 maxlen: 23
                          77.105.160.0/21 maxlen: 21
                          77.105.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889686767 (0x35078aef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
        Validity
            Not Before: Jan  1 09:53:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc773beb56c5d69a319b422b8528ef223a904b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:3d:b2:c2:c9:a9:83:b2:6e:41:2a:44:29:
                    01:64:6a:f6:eb:a1:a5:ef:45:70:6f:52:27:45:a4:
                    80:94:62:92:a4:cd:e1:a4:63:ae:79:ce:ce:ef:a4:
                    29:fa:90:2c:bb:78:cb:88:ff:49:77:99:76:83:b5:
                    af:30:08:83:98:39:8a:60:a5:e2:de:6d:62:e7:1b:
                    22:fa:65:62:8e:8b:44:9d:cc:d1:a3:bb:4f:93:13:
                    00:03:4a:79:09:af:29:90:1c:c3:88:72:fc:c2:e2:
                    e8:ce:a5:91:9c:ce:48:1b:57:0c:3c:2b:95:2d:53:
                    1e:76:bf:af:81:6a:55:db:be:b4:3a:bd:71:ad:d0:
                    65:37:33:29:bf:69:2a:96:de:38:3b:44:ac:b7:c9:
                    8c:09:c7:74:21:c0:03:78:4b:27:ca:83:ae:d6:c2:
                    cf:aa:eb:f2:cb:56:c1:0f:61:10:70:2d:70:9e:50:
                    a8:b4:96:bd:2c:61:95:1d:2b:fd:e2:2d:7a:55:ed:
                    92:5e:54:69:5d:df:30:b8:74:96:e3:89:59:12:92:
                    4b:97:43:3a:1e:2d:45:53:73:2c:25:bf:17:d8:31:
                    57:95:6f:12:cf:47:7b:ab:f2:1b:aa:de:18:27:2d:
                    e8:05:fa:f0:24:f3:1c:4e:68:7f:f3:54:e0:cd:19:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:77:3B:EB:56:C5:D6:9A:31:9B:42:2B:85:28:EF:22:3A:90:4B:9A
            X509v3 Authority Key Identifier:
                keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/3Hc761bF1poxm0IrhSjvIjqQS5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.138.0/23
                  77.105.160.0/21
                  77.105.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:3d:f1:76:64:6f:9a:4a:7a:6e:0a:ba:3e:d7:ae:a2:8f:ef:
         5b:19:3f:65:23:31:c6:03:e9:e1:87:fa:58:73:d6:17:27:cd:
         08:ce:49:44:47:f7:f1:f5:d2:75:9d:95:9f:63:10:f0:43:88:
         c8:bd:6e:5a:56:2e:a9:83:a1:e9:26:5c:89:bb:1f:2f:82:e9:
         1f:d2:fb:b3:9b:79:6c:5d:a7:b1:9d:7d:0d:3f:76:7f:49:99:
         d2:40:1a:45:48:93:93:5a:ca:fd:e4:67:96:b4:db:17:51:86:
         d7:5a:33:49:7e:d9:55:78:7b:b2:41:de:82:6e:05:2f:2a:3f:
         22:27:78:0a:91:19:19:dd:32:51:dc:f0:fb:d5:7c:65:b4:65:
         96:25:f1:9a:79:1d:e5:ef:8c:04:30:63:69:ad:e1:26:40:df:
         d5:9f:ef:cb:22:1d:58:53:29:c4:d3:99:97:75:b7:2c:8d:84:
         4f:b9:ec:8c:51:56:52:ba:36:2a:c4:9a:c9:3b:3b:50:17:07:
         18:3e:71:8c:bd:21:c0:6a:61:07:11:38:c5:77:8b:6b:d5:4d:
         a2:6b:a7:08:f7:19:c3:b0:5e:c8:87:8a:c5:0c:11:c0:8f:14:
         36:e9:07:15:24:b4:97:bc:14:c0:99:ad:0f:94:00:d2:17:7e:
         e6:52:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org