Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/YujoL_3m6GilomOf8xPwLPgDGjE.roa
File:                     YujoL_3m6GilomOf8xPwLPgDGjE.roa (raw, json)
Hash identifier:          uID03hnFIrUCbn/CmYYfKRfpmriqU2rTS9SIVQWO0tA=
Subject key identifier:   62:E8:E8:2F:FD:E6:E8:68:A5:A2:63:9F:F3:13:F0:2C:F8:03:1A:31
Certificate issuer:       /CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Certificate serial:       01856EEFDB422455C9178786956F5C834A3A
Authority key identifier: 7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/YujoL_3m6GilomOf8xPwLPgDGjE.roa
Signing time:             Sun 01 Jan 2023 20:04:51 +0000
ROA not before:           Sun 01 Jan 2023 20:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210636
IP address blocks:        217.74.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:db:42:24:55:c9:17:87:86:95:6f:5c:83:4a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
        Validity
            Not Before: Jan  1 20:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62e8e82ffde6e868a5a2639ff313f02cf8031a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:22:1b:de:e3:f2:bd:63:cd:2c:0b:85:5d:
                    4b:ae:3c:eb:2f:60:d9:98:b5:62:d6:89:fa:9a:32:
                    46:a6:b8:22:84:c9:06:6f:c9:07:ab:cd:ae:d2:1e:
                    32:6c:a3:46:4e:c5:97:5a:01:46:a3:ae:f3:3d:47:
                    76:f3:7a:87:03:06:e4:56:91:b9:31:80:e3:73:67:
                    8f:b3:f2:82:fb:24:e4:a8:82:9b:94:3b:d9:ec:8b:
                    73:78:c9:86:1e:3c:e2:33:f6:da:33:87:3b:84:b5:
                    0f:fe:51:aa:93:5e:1e:d3:98:05:f4:41:7c:96:4d:
                    29:49:48:48:ad:9c:9f:2f:70:16:d3:40:48:e0:a6:
                    37:5e:3f:8b:13:05:75:df:10:c6:3d:78:2f:e3:97:
                    9a:63:e4:07:a7:2b:d7:ce:22:83:ff:23:7b:d3:21:
                    55:d0:ab:17:bf:b0:8f:0b:b4:e9:f6:37:4c:9d:58:
                    12:64:c8:0d:8a:1c:f5:cb:c0:29:51:bf:ff:ff:9a:
                    4f:8e:40:86:70:24:bd:0b:e8:47:dc:68:e5:dc:e7:
                    7a:a4:f9:50:5a:03:9e:cf:28:ab:2e:1c:3d:48:f3:
                    f1:f3:ff:54:aa:5f:2b:73:16:98:a7:a7:27:98:b9:
                    3e:70:48:69:75:1e:e6:84:43:c5:a3:89:e0:c5:26:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E8:E8:2F:FD:E6:E8:68:A5:A2:63:9F:F3:13:F0:2C:F8:03:1A:31
            X509v3 Authority Key Identifier:
                keyid:7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/YujoL_3m6GilomOf8xPwLPgDGjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.74.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bd:9f:f8:9e:5c:0c:d8:65:9f:4c:97:fe:ac:4c:04:bc:51:
         0d:99:e4:09:50:16:8f:91:61:9b:55:72:4b:3f:20:2d:8f:a3:
         1c:17:1b:38:2c:db:c6:a7:a4:c5:42:d4:6b:44:9c:64:fb:8d:
         8a:26:75:60:08:de:35:d6:a2:ff:f4:f0:3f:63:d5:0b:a2:cc:
         c3:60:54:02:af:e9:4a:cc:89:5c:04:9b:94:c9:97:e6:c7:c1:
         3a:97:c7:c2:b6:46:44:01:09:f1:25:b7:c8:0c:23:2b:94:5a:
         48:1e:e7:8a:cd:a4:79:cd:05:ee:a2:24:4b:7d:7f:78:85:8c:
         c6:c4:35:bc:05:b4:07:db:29:fc:83:39:b3:c3:ff:e5:08:5e:
         59:15:b1:63:ba:13:74:22:94:b6:d7:24:77:15:50:51:5a:f9:
         f5:a6:79:2d:31:d0:d0:4c:dc:25:00:33:16:9f:df:05:2e:a8:
         66:6c:3c:28:34:12:0e:eb:68:2d:2f:4a:11:95:4b:76:d7:b6:
         52:17:af:f4:c5:3b:40:c4:ca:84:bc:0b:da:c6:19:f2:96:6e:
         b8:51:7d:fa:73:a6:a9:1f:f7:7d:bb:a5:df:5a:38:92:98:a5:
         e7:42:e0:e8:b4:4f:74:9e:6c:3b:7b:29:90:30:89:00:86:a0:
         8e:dd:8a:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu79tCJFXJF4eGlW9cg0o6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZTliZWIxNGU1NTcyYmFjNGZjOTMwYjI2Y2FjZjNkOTIw
Mjk2NjIwHhcNMjMwMTAxMjAwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmU4ZTgyZmZkZTZlODY4YTVhMjYzOWZmMzEzZjAyY2Y4MDMxYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW4iG97j8r1jzSwLhV1LrjzrL2DZ
mLVi1on6mjJGprgihMkGb8kHq82u0h4ybKNGTsWXWgFGo67zPUd283qHAwbkVpG5
MYDjc2ePs/KC+yTkqIKblDvZ7ItzeMmGHjziM/baM4c7hLUP/lGqk14e05gF9EF8
lk0pSUhIrZyfL3AW00BI4KY3Xj+LEwV13xDGPXgv45eaY+QHpyvXziKD/yN70yFV
0KsXv7CPC7Tp9jdMnVgSZMgNihz1y8ApUb///5pPjkCGcCS9C+hH3Gjl3Od6pPlQ
WgOezyirLhw9SPPx8/9Uql8rcxaYp6cnmLk+cEhpdR7mhEPFo4ngxSanjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLo6C/95uhopaJjn/MT8Cz4AxoxMB8GA1UdIwQY
MBaAFHrpvrFOVXK6xPyTCybKzz2SApZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXVtLXNVNVZjcnJFX0pNTEpzclBQWklDbG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZThjOGQtZjY1MC00ZDVhLTllOGMt
MjAxNmIxZTk3ZjliLzEvWXVqb0xfM202R2lsb21PZjh4UHdMUGdER2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xZThjOGQtZjY1MC00ZDVhLTllOGMtMjAxNmIxZTk3Zjli
LzEvZXVtLXNVNVZjcnJFX0pNTEpzclBQWklDbG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UoUMA0G
CSqGSIb3DQEBCwUAA4IBAQBHvZ/4nlwM2GWfTJf+rEwEvFENmeQJUBaPkWGbVXJL
PyAtj6McFxs4LNvGp6TFQtRrRJxk+42KJnVgCN411qL/9PA/Y9ULoszDYFQCr+lK
zIlcBJuUyZfmx8E6l8fCtkZEAQnxJbfIDCMrlFpIHueKzaR5zQXuoiRLfX94hYzG
xDW8BbQH2yn8gzmzw//lCF5ZFbFjuhN0IpS21yR3FVBRWvn1pnktMdDQTNwlADMW
n98FLqhmbDwoNBIO62gtL0oRlUt217ZSF6/0xTtAxMqEvAvaxhnylm64UX36c6ap
H/d9u6XfWjiSmKXnQuDotE90nmw7eymQMIkAhqCO3Yps
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:06 2024 by rpki-client on console-fra.rpki-client.org