Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/wklakTNSUWrNx8mguNwtuRO319c.roa
File:                     wklakTNSUWrNx8mguNwtuRO319c.roa (raw, json)
Hash identifier:          9+YXvEiXbi9rwlpQ7SRQC8nAEz/b5v2gybutXCk0ChE=
Subject key identifier:   C2:49:5A:91:33:52:51:6A:CD:C7:C9:A0:B8:DC:2D:B9:13:B7:D7:D7
Certificate issuer:       /CN=7c20132883c41244eab1d8f32180709c5640cafa
Certificate serial:       0CF57C
Authority key identifier: 7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/wklakTNSUWrNx8mguNwtuRO319c.roa
Signing time:             Tue 17 May 2022 06:36:30 +0000
ROA not before:           Tue 17 May 2022 06:36:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6453
IP address blocks:        79.110.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849276 (0xcf57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c20132883c41244eab1d8f32180709c5640cafa
        Validity
            Not Before: May 17 06:36:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2495a913352516acdc7c9a0b8dc2db913b7d7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:ff:0a:96:66:16:b9:c5:6b:1c:43:5d:ac:
                    6f:fb:76:81:02:c6:12:50:ec:f4:14:34:e2:55:a9:
                    f1:3e:a1:be:61:89:ad:5c:5b:62:1e:cd:bb:f8:e1:
                    0c:f1:3d:b1:5d:6c:ac:03:fe:51:49:94:ae:ce:e9:
                    09:cd:02:84:78:41:58:75:4a:c8:7b:bf:5c:5f:d4:
                    53:e2:13:67:d5:b8:e5:b6:5a:79:49:63:41:19:14:
                    3e:18:15:f2:36:bd:f9:5a:fd:99:0a:97:8f:f6:b6:
                    a6:f7:eb:3a:44:8a:85:f2:76:04:32:9d:f0:ab:5b:
                    38:04:aa:2b:9d:14:28:63:71:9e:ec:0f:f1:70:77:
                    ad:f9:19:17:ba:f2:90:7a:72:7c:5f:b6:eb:5d:8a:
                    f9:c2:31:17:33:03:d4:3d:29:e1:08:ce:8f:76:0d:
                    12:a2:e6:cd:c1:e5:77:83:e2:72:69:61:10:9a:db:
                    80:e7:ed:7c:e7:c0:f7:d1:18:0f:0b:6d:a1:67:0a:
                    21:62:38:64:1c:9e:52:ff:ea:d0:36:4d:d5:bf:74:
                    0f:d0:aa:59:02:b4:73:20:af:2d:43:a9:f6:4c:7b:
                    53:e5:6e:ff:9f:bc:a0:2e:d7:d4:d5:94:8b:78:a3:
                    6a:d2:a9:04:eb:4b:e4:51:cc:cf:ca:f2:b3:cc:53:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:49:5A:91:33:52:51:6A:CD:C7:C9:A0:B8:DC:2D:B9:13:B7:D7:D7
            X509v3 Authority Key Identifier:
                keyid:7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/wklakTNSUWrNx8mguNwtuRO319c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:49:3f:4c:23:06:e6:50:e2:6e:c7:7a:c4:f4:c3:33:63:1c:
         43:4c:62:e8:cc:8c:a5:47:a4:61:ce:a9:59:cb:6a:f3:b2:da:
         3d:4e:af:7e:c1:7a:f3:50:fe:f5:c3:7a:92:7a:2c:54:69:e4:
         9c:a8:f9:c1:34:e3:f7:bd:e4:11:61:02:32:51:37:79:d7:12:
         3b:db:66:e0:66:94:a7:d8:20:ce:fd:96:5c:24:81:5d:8b:0a:
         45:b7:8d:05:9b:7a:86:39:eb:f5:72:6f:98:e6:9e:f3:d1:cf:
         cf:e2:80:d3:d1:d3:ae:3d:65:11:db:0c:c8:5b:0b:21:7f:e0:
         dd:68:90:02:87:11:6c:8c:41:d9:b9:17:b9:f9:a8:0f:7c:ab:
         ed:90:9a:df:4b:1f:9a:f2:7e:6c:0f:f1:ad:cd:0f:3e:7e:4f:
         ed:9b:ee:30:c2:c9:44:96:2c:d5:96:15:b2:d0:8a:10:0a:da:
         84:24:8c:44:0c:fa:80:3a:3a:4c:c6:05:0e:c1:ba:2a:f3:c0:
         a2:c3:a5:55:78:22:3f:a3:63:27:81:bf:97:2d:6c:a3:04:a3:
         e8:62:fa:e8:d7:33:43:4e:a4:93:c6:77:52:33:a3:99:51:34:
         5c:99:53:90:bf:1d:b4:ef:a5:ff:94:3b:3b:52:42:2a:77:2d:
         a4:fe:98:91
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDDPV8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
MjAxMzI4ODNjNDEyNDRlYWIxZDhmMzIxODA3MDljNTY0MGNhZmEwHhcNMjIwNTE3
MDYzNjMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMjQ5NWE5MTMzNTI1
MTZhY2RjN2M5YTBiOGRjMmRiOTEzYjdkN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAriH/CpZmFrnFaxxDXaxv+3aBAsYSUOz0FDTiVanxPqG+YYmt
XFtiHs27+OEM8T2xXWysA/5RSZSuzukJzQKEeEFYdUrIe79cX9RT4hNn1bjltlp5
SWNBGRQ+GBXyNr35Wv2ZCpeP9ram9+s6RIqF8nYEMp3wq1s4BKornRQoY3Ge7A/x
cHet+RkXuvKQenJ8X7brXYr5wjEXMwPUPSnhCM6Pdg0SoubNweV3g+JyaWEQmtuA
5+1858D30RgPC22hZwohYjhkHJ5S/+rQNk3Vv3QP0KpZArRzIK8tQ6n2THtT5W7/
n7ygLtfU1ZSLeKNq0qkE60vkUczPyvKzzFP01wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMJJWpEzUlFqzcfJoLjcLbkTt9fXMB8GA1UdIwQYMBaAFHwgEyiDxBJE6rHY
8yGAcJxWQMr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZkNBVEtJUEVFa1Rxc2RqeklZQnduRlpBeXZvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mMC85MjY0ZGYtZDhiZS00ZGUzLThkNGMtNzA5NWI5NzJlNjc0LzEv
d2tsYWtUTlNVV3JOeDhtZ3VOd3R1Uk8zMTljLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85
MjY0ZGYtZDhiZS00ZGUzLThkNGMtNzA5NWI5NzJlNjc0LzEvZkNBVEtJUEVFa1Rx
c2RqeklZQnduRlpBeXZvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27lMA0GCSqGSIb3DQEBCwUAA4IB
AQA1ST9MIwbmUOJux3rE9MMzYxxDTGLozIylR6RhzqlZy2rzsto9Tq9+wXrzUP71
w3qSeixUaeScqPnBNOP3veQRYQIyUTd51xI722bgZpSn2CDO/ZZcJIFdiwpFt40F
m3qGOev1cm+Y5p7z0c/P4oDT0dOuPWUR2wzIWwshf+DdaJAChxFsjEHZuRe5+agP
fKvtkJrfSx+a8n5sD/GtzQ8+fk/tm+4wwslElizVlhWy0IoQCtqEJIxEDPqAOjpM
xgUOwboq88Ciw6VVeCI/o2Mngb+XLWyjBKPoYvro1zNDTqSTxndSM6OZUTRcmVOQ
vx2076X/lDs7UkIqdy2k/piR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org