Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/7-3T_YOjcFWip2v0wQDO1P5Lby0.roa
File:                     7-3T_YOjcFWip2v0wQDO1P5Lby0.roa (raw, json)
Hash identifier:          91Ky8CHWJA111KXjH055L1/fZzcmu1Wdp3JEXxYjQEI=
Subject key identifier:   EF:ED:D3:FD:83:A3:70:55:A2:A7:6B:F4:C1:00:CE:D4:FE:4B:6F:2D
Certificate issuer:       /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial:       3506C4C8
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/7-3T_YOjcFWip2v0wQDO1P5Lby0.roa
Signing time:             Sat 01 Jan 2022 09:53:11 +0000
ROA not before:           Sat 01 Jan 2022 09:53:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49326
IP address blocks:        77.105.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889636040 (0x3506c4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
        Validity
            Not Before: Jan  1 09:53:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efedd3fd83a37055a2a76bf4c100ced4fe4b6f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:08:9f:66:4b:93:ac:2a:44:78:f6:03:5c:
                    4b:d3:99:85:97:71:5d:b5:1f:91:f7:b5:0b:34:65:
                    f1:39:49:a2:14:64:4b:cd:3b:ff:49:29:69:a7:29:
                    27:16:25:9e:46:5b:fa:08:29:c4:ca:aa:4c:fa:17:
                    1b:fd:82:f0:cb:9a:f9:d0:72:d7:4a:8d:07:0a:0c:
                    bd:f3:54:ef:1f:7e:97:8d:6c:be:d7:be:93:4b:a6:
                    a0:0d:4d:3b:b9:12:b7:34:0f:b0:ea:61:ba:21:d2:
                    40:de:bb:d3:a0:b6:3b:2e:03:96:11:62:24:5d:dd:
                    6f:2f:0d:83:b0:5c:b0:da:18:08:e1:d1:6c:75:ee:
                    c7:a4:dc:53:e7:9d:bf:4b:ef:61:db:66:03:ea:20:
                    9f:7c:d2:28:b0:46:74:0e:3c:84:26:8a:e4:c5:30:
                    c7:bd:08:d9:9a:4f:65:3d:15:86:37:7c:c8:65:98:
                    37:02:e3:13:c0:e4:18:a2:0d:a7:02:f9:c4:1e:92:
                    05:18:5f:4d:08:cc:c7:3a:7a:52:55:9d:02:52:90:
                    48:a0:8d:59:2f:c4:ae:c2:71:27:2e:0f:05:d3:7d:
                    8a:e5:b5:26:fc:d5:a1:bc:fb:fd:9c:26:b3:9c:8f:
                    db:31:44:c2:20:da:42:d7:f8:72:06:ad:7e:34:1c:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:D3:FD:83:A3:70:55:A2:A7:6B:F4:C1:00:CE:D4:FE:4B:6F:2D
            X509v3 Authority Key Identifier:
                keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/7-3T_YOjcFWip2v0wQDO1P5Lby0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:fb:cb:71:ef:b4:d7:94:d2:4a:94:c3:1b:db:c1:24:18:
         34:20:03:f9:9f:a2:2b:04:c0:06:a7:bf:d8:00:b0:95:db:38:
         bb:cd:a6:10:5d:56:04:1d:91:99:4b:e4:70:7e:c4:51:4f:7b:
         d8:37:1c:1d:47:7a:fa:93:02:d4:3f:69:7b:12:3d:79:b3:6f:
         0a:37:a4:64:0d:be:4e:6e:2c:dc:4c:db:10:fc:0a:86:ac:a2:
         cd:2f:c5:bc:27:42:f0:53:52:5c:68:a5:02:a6:87:df:3a:6f:
         42:db:12:63:c6:f8:19:fe:6e:db:1e:45:f5:f5:3f:ba:8d:7f:
         e8:19:9a:1e:bd:68:56:9a:e3:93:91:28:cd:8e:de:03:d8:99:
         d2:cc:0e:85:1b:9a:29:21:4d:7d:4f:63:39:31:a1:21:c5:8d:
         19:4d:1c:fd:ae:87:f6:c7:af:96:0e:44:72:f5:2b:4b:f0:fc:
         d7:45:a4:f1:b6:3e:40:a2:c5:7c:db:b5:6b:e0:1c:12:cc:63:
         bf:61:57:9d:af:a0:a1:88:0f:7b:3e:07:15:18:ac:46:19:bf:
         0b:9c:d4:44:0f:ad:85:26:66:c3:50:45:cb:df:f3:24:3e:1a:
         97:bd:fd:93:7b:87:1d:88:95:04:c1:33:6c:4a:9b:1d:9e:35:
         4a:a8:cf:ff
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENQbEyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MTQ2N2M3NjliZjY2YWRhN2Q1NzgwYTY5ZGNlMTM3MWJlOTg0OWRlMB4XDTIyMDEw
MTA5NTMxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWZlZGQzZmQ4M2Ez
NzA1NWEyYTc2YmY0YzEwMGNlZDRmZTRiNmYyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK81CJ9mS5OsKkR49gNcS9OZhZdxXbUfkfe1CzRl8TlJohRk
S807/0kpaacpJxYlnkZb+ggpxMqqTPoXG/2C8Mua+dBy10qNBwoMvfNU7x9+l41s
vte+k0umoA1NO7kStzQPsOphuiHSQN6706C2Oy4DlhFiJF3dby8Ng7BcsNoYCOHR
bHXux6TcU+edv0vvYdtmA+ogn3zSKLBGdA48hCaK5MUwx70I2ZpPZT0Vhjd8yGWY
NwLjE8DkGKINpwL5xB6SBRhfTQjMxzp6UlWdAlKQSKCNWS/ErsJxJy4PBdN9iuW1
JvzVobz7/Zwms5yP2zFEwiDaQtf4cgatfjQckncCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTv7dP9g6NwVaKna/TBAM7U/ktvLTAfBgNVHSMEGDAWgBRBRnx2m/Zq2n1X
gKadzhNxvphJ3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FVWjhkcHYyYXRwOVY0Q21uYzRUY2I2WVNkNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvNWNmM2ZkLWU3N2QtNGM4Mi1iNGM3LTUyMTU1NmJlODEzYS8x
LzctM1RfWU9qY0ZXaXAydjB3UURPMVA1TGJ5MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
NWNmM2ZkLWU3N2QtNGM4Mi1iNGM3LTUyMTU1NmJlODEzYS8xL1FVWjhkcHYyYXRw
OVY0Q21uYzRUY2I2WVNkNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1pkTANBgkqhkiG9w0BAQsFAAOC
AQEAZuj7y3HvtNeU0kqUwxvbwSQYNCAD+Z+iKwTABqe/2ACwlds4u82mEF1WBB2R
mUvkcH7EUU972DccHUd6+pMC1D9pexI9ebNvCjekZA2+Tm4s3EzbEPwKhqyizS/F
vCdC8FNSXGilAqaH3zpvQtsSY8b4Gf5u2x5F9fU/uo1/6BmaHr1oVprjk5EozY7e
A9iZ0swOhRuaKSFNfU9jOTGhIcWNGU0c/a6H9sevlg5EcvUrS/D810Wk8bY+QKLF
fNu1a+AcEsxjv2FXna+goYgPez4HFRisRhm/C5zURA+thSZmw1BFy9/zJD4al739
k3uHHYiVBMEzbEqbHZ41SqjP/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:30 2024 by rpki-client on console-ams.rpki-client.org