Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/hmRRgEumcDSONJPiMvni7l7ECq4.roa
File:                     hmRRgEumcDSONJPiMvni7l7ECq4.roa (raw, json)
Hash identifier:          SeFiHqkNLjHcV+XRoFUoX1AeDRC7TAPk8dpl930vWOg=
Subject key identifier:   86:64:51:80:4B:A6:70:34:8E:34:93:E2:32:F9:E2:EE:5E:C4:0A:AE
Certificate issuer:       /CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Certificate serial:       01E51A76
Authority key identifier: 6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/hmRRgEumcDSONJPiMvni7l7ECq4.roa
Signing time:             Wed 29 Jun 2022 09:23:02 +0000
ROA not before:           Wed 29 Jun 2022 09:23:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44349
IP address blocks:        212.23.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31791734 (0x1e51a76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
        Validity
            Not Before: Jun 29 09:23:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=866451804ba670348e3493e232f9e2ee5ec40aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:0c:18:05:01:35:8e:85:76:6a:c8:ae:63:
                    ac:03:ad:6a:ed:1e:8a:35:98:6d:5d:39:e3:df:42:
                    f7:76:b1:88:57:0b:5a:16:83:d5:8d:b9:87:67:c1:
                    f1:fc:2f:c9:ef:0d:96:8d:86:ae:0f:0d:8e:f7:34:
                    71:6b:a8:0f:a7:6e:a5:66:ac:80:d9:c9:06:38:53:
                    f0:c7:65:35:ed:a1:4c:e7:ed:0e:dd:bc:82:5a:6f:
                    76:51:b9:cc:35:18:aa:ed:03:3e:bc:c8:d0:72:2f:
                    7f:21:d3:a0:a8:96:7d:d9:17:89:e3:7c:b1:4e:86:
                    9c:86:15:7b:31:ca:e8:0c:c4:cb:fc:0b:b0:a0:18:
                    92:68:8b:f2:c8:91:39:39:58:0d:76:5f:cc:99:08:
                    10:10:30:0b:1b:8a:89:d2:22:b4:7f:34:f3:96:56:
                    da:67:5e:e7:5f:1e:37:ae:fc:36:f2:c3:8b:f1:c9:
                    db:f0:46:f6:b6:d5:57:10:5a:7c:49:53:fd:d1:3f:
                    73:32:f6:07:e5:2b:9c:bc:d9:98:bc:70:38:79:42:
                    7a:2e:b4:61:4c:57:56:1d:b6:d0:d5:eb:dc:1d:cd:
                    9c:6c:0a:4f:10:8a:c7:ce:80:b5:dd:64:0c:db:9e:
                    a4:57:e2:ef:6f:54:2c:e8:dc:cb:7c:40:58:3c:03:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:51:80:4B:A6:70:34:8E:34:93:E2:32:F9:E2:EE:5E:C4:0A:AE
            X509v3 Authority Key Identifier:
                keyid:6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/hmRRgEumcDSONJPiMvni7l7ECq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:49:de:76:28:cb:5d:a2:eb:5f:71:7f:ba:f2:76:aa:53:1a:
         fc:d9:17:a4:b1:cc:51:61:5d:4a:db:74:fc:1e:0f:f9:6e:5f:
         19:3d:7e:8f:62:8f:b1:29:66:63:33:c8:87:98:29:30:dd:4e:
         af:3b:7d:a1:7c:cf:34:ad:c8:d4:fe:74:07:bd:9b:36:4e:fe:
         55:b0:c5:e3:eb:01:d8:90:b8:0f:d5:19:0a:68:df:14:a2:b7:
         33:ab:b7:d9:01:fa:d6:31:71:af:f2:46:ec:ff:73:0c:27:85:
         58:88:d3:b6:0f:9a:cf:84:e7:bb:50:5c:98:1d:3b:9c:70:0a:
         61:65:d5:57:be:ce:45:c3:a2:2d:8a:b0:70:05:58:80:d9:fd:
         98:a2:c0:c6:a1:b8:07:b2:64:25:db:2d:86:dd:cf:ef:1c:5c:
         40:06:57:12:7b:18:9e:a7:64:02:fb:13:7f:2b:59:8f:62:e7:
         ab:d9:1c:b6:d8:c8:eb:54:45:ab:c7:1f:44:9a:54:2c:2b:57:
         1c:c4:fa:cb:00:04:f3:3e:c5:b0:23:40:78:bc:98:33:f8:76:
         58:24:a4:01:f6:77:06:80:78:3a:4f:b9:e0:82:ee:2b:80:b0:
         33:d5:77:46:7b:fb:7c:b0:b8:62:48:14:18:e4:10:e7:60:37:
         2f:97:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:19 2024 by rpki-client on console-ams.rpki-client.org