Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/ByySi_KObS6TDUDzQNZJjvpQKg8.roa
File:                     ByySi_KObS6TDUDzQNZJjvpQKg8.roa (raw, json)
Hash identifier:          vIRLCsoNo5eeTJiU0n1mJsaoBL5M/WhTVmc0ZFwFUoY=
Subject key identifier:   07:2C:92:8B:F2:8E:6D:2E:93:0D:40:F3:40:D6:49:8E:FA:50:2A:0F
Certificate issuer:       /CN=754c959d94ef8c7cb96d86c6c4b9236df12fa87d
Certificate serial:       04C3E0D0
Authority key identifier: 75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/ByySi_KObS6TDUDzQNZJjvpQKg8.roa
Signing time:             Tue 22 Mar 2022 15:55:35 +0000
ROA not before:           Tue 22 Mar 2022 15:55:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49792
IP address blocks:        2a0e:db40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79945936 (0x4c3e0d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754c959d94ef8c7cb96d86c6c4b9236df12fa87d
        Validity
            Not Before: Mar 22 15:55:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=072c928bf28e6d2e930d40f340d6498efa502a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:52:74:d8:5a:9e:d4:61:cd:ea:ba:dd:a0:
                    a8:0e:18:57:15:bf:56:e7:38:ce:f7:45:c8:0d:eb:
                    d4:bd:1b:0a:5e:7d:fd:6e:08:0e:44:49:22:8a:00:
                    a1:93:fa:f4:93:60:76:72:bd:e9:10:fa:51:e8:92:
                    89:ed:26:19:75:75:4d:f2:3f:ae:fa:ac:f0:d4:3d:
                    d1:a9:00:62:68:e2:59:79:45:40:f6:1c:59:03:17:
                    02:93:56:e0:0d:f5:d4:7a:bc:0e:4b:29:d9:98:a7:
                    65:71:90:cc:24:31:ad:e2:b6:d8:90:26:c0:10:02:
                    c7:01:6b:56:db:61:df:d0:a7:3a:9f:52:d4:56:89:
                    3a:8a:57:40:d5:4e:d9:73:01:b8:79:86:cb:bd:0d:
                    67:af:4f:c5:8a:0f:82:ac:16:d1:71:96:2f:fa:ce:
                    cb:73:dd:9d:e6:fb:46:a1:a9:5e:ef:ba:5a:14:44:
                    13:77:0c:35:dc:e1:e1:5e:8d:ab:8d:37:9b:e8:7f:
                    15:91:24:37:8e:72:b5:f7:47:b2:e6:48:3b:ef:af:
                    d2:9a:0e:53:68:ad:23:91:56:32:a0:e1:1e:16:30:
                    9b:fe:60:98:6a:d4:ee:da:8f:7d:74:2b:76:ef:be:
                    98:8e:36:e1:02:34:34:b9:bb:f2:b2:86:b0:13:14:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2C:92:8B:F2:8E:6D:2E:93:0D:40:F3:40:D6:49:8E:FA:50:2A:0F
            X509v3 Authority Key Identifier:
                keyid:75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/ByySi_KObS6TDUDzQNZJjvpQKg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/dUyVnZTvjHy5bYbGxLkjbfEvqH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:db40::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:56:8b:67:f2:08:94:e3:21:85:23:8b:57:db:ae:45:27:ef:
         e1:08:88:c2:e2:6c:4d:68:02:4f:e3:96:b9:4a:2f:ff:bc:59:
         05:9f:96:f2:c8:71:43:52:ca:50:da:9d:7e:b6:57:0f:30:b6:
         02:02:05:8f:ac:a9:9f:3d:9c:6c:88:21:9b:87:7c:e3:8f:7c:
         05:3a:b8:a0:55:6b:93:c4:92:c0:68:b3:63:f1:55:1a:b8:5a:
         65:e8:2c:05:99:a3:71:27:f0:91:a1:6c:7a:5b:fd:7c:96:4c:
         c5:1d:51:b3:7a:84:f2:df:20:c5:07:e2:8e:c3:80:6f:c6:5f:
         07:ab:2c:5a:06:2b:4e:c4:15:7c:df:cb:29:fc:18:8d:8e:4f:
         42:e4:13:d2:39:7c:86:a9:5a:4d:a1:c6:a5:66:26:ae:c9:a2:
         2a:07:6a:da:02:63:11:dc:3b:4e:c6:b7:35:9a:91:56:15:e1:
         ed:ab:dc:ee:87:66:2f:29:4a:55:61:d3:7b:5e:1d:97:4c:f2:
         76:5b:4f:29:09:44:78:33:bd:07:a1:7e:e9:33:07:85:0a:c3:
         61:2f:5a:d3:6a:c9:29:aa:3f:5b:51:a6:3d:c2:76:b1:93:04:
         e2:73:f4:7f:39:b0:f2:30:4c:77:5b:35:27:84:2d:9b:57:70:
         f6:5e:1a:ce
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBMPg0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NTRjOTU5ZDk0ZWY4YzdjYjk2ZDg2YzZjNGI5MjM2ZGYxMmZhODdkMB4XDTIyMDMy
MjE1NTUzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDcyYzkyOGJmMjhl
NmQyZTkzMGQ0MGYzNDBkNjQ5OGVmYTUwMmEwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJdPUnTYWp7UYc3qut2gqA4YVxW/Vuc4zvdFyA3r1L0bCl59
/W4IDkRJIooAoZP69JNgdnK96RD6UeiSie0mGXV1TfI/rvqs8NQ90akAYmjiWXlF
QPYcWQMXApNW4A311Hq8Dksp2ZinZXGQzCQxreK22JAmwBACxwFrVtth39CnOp9S
1FaJOopXQNVO2XMBuHmGy70NZ69PxYoPgqwW0XGWL/rOy3Pdneb7RqGpXu+6WhRE
E3cMNdzh4V6Nq403m+h/FZEkN45ytfdHsuZIO++v0poOU2itI5FWMqDhHhYwm/5g
mGrU7tqPfXQrdu++mI424QI0NLm78rKGsBMU9TkCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQHLJKL8o5tLpMNQPNA1kmO+lAqDzAfBgNVHSMEGDAWgBR1TJWdlO+MfLlt
hsbEuSNt8S+ofTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RVeVZuWlR2akh5NWJZYkd4TGtqYmZFdnFIMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvMTEyODFmLTlhZjEtNDE1MC05ZmI4LWM4Yjk3NWYwYjEwNy8x
L0J5eVNpX0tPYlM2VERVRHpRTlpKanZwUUtnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
MTEyODFmLTlhZjEtNDE1MC05ZmI4LWM4Yjk3NWYwYjEwNy8xL2RVeVZuWlR2akh5
NWJZYkd4TGtqYmZFdnFIMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoO20AwDQYJKoZIhvcNAQELBQAD
ggEBAEhWi2fyCJTjIYUji1fbrkUn7+EIiMLibE1oAk/jlrlKL/+8WQWflvLIcUNS
ylDanX62Vw8wtgICBY+sqZ89nGyIIZuHfOOPfAU6uKBVa5PEksBos2PxVRq4WmXo
LAWZo3En8JGhbHpb/XyWTMUdUbN6hPLfIMUH4o7DgG/GXwerLFoGK07EFXzfyyn8
GI2OT0LkE9I5fIapWk2hxqVmJq7JoioHatoCYxHcO07GtzWakVYV4e2r3O6HZi8p
SlVh03teHZdM8nZbTykJRHgzvQehfukzB4UKw2EvWtNqySmqP1tRpj3CdrGTBOJz
9H85sPIwTHdbNSeELZtXcPZeGs4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:51 2024 by rpki-client on console-ams.rpki-client.org