Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/t3mWuhahBNCdxl7P0x_x8E2g830.roa
File:                     t3mWuhahBNCdxl7P0x_x8E2g830.roa (raw, json)
Hash identifier:          bo+tNxivt/9rKkOLFs6taV8tLID9/rj/wlBgsQGjQpQ=
Subject key identifier:   B7:79:96:BA:16:A1:04:D0:9D:C6:5E:CF:D3:1F:F1:F0:4D:A0:F3:7D
Certificate issuer:       /CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Certificate serial:       018263BE2A49A51E1259C5E45F27F717E796
Authority key identifier: 6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/t3mWuhahBNCdxl7P0x_x8E2g830.roa
Signing time:             Wed 03 Aug 2022 12:46:23 +0000
ROA not before:           Wed 03 Aug 2022 12:46:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12697
IP address blocks:        212.23.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:63:be:2a:49:a5:1e:12:59:c5:e4:5f:27:f7:17:e7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
        Validity
            Not Before: Aug  3 12:46:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b77996ba16a104d09dc65ecfd31ff1f04da0f37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:90:e7:af:67:44:64:f5:9e:22:e5:bf:f3:
                    92:2b:08:e1:1f:3c:0b:37:98:78:3a:00:d3:4e:8a:
                    95:60:1b:a4:95:bf:6e:41:3b:c0:8a:c2:96:54:f8:
                    b3:9b:c5:22:30:c7:8c:27:20:ec:45:1d:28:7a:b5:
                    cc:1c:0e:fe:d3:a4:c6:a2:e7:2d:3c:65:cc:c6:6a:
                    67:f0:4a:ad:41:7d:1e:9a:a6:31:2d:c8:60:7a:a4:
                    65:75:18:da:68:14:cd:ed:90:0b:c5:15:b1:48:4a:
                    f9:69:57:10:91:37:4e:0c:13:d2:fc:e7:e4:30:e4:
                    86:ac:26:98:f5:3e:a1:c6:f9:38:c0:e7:58:75:d9:
                    09:61:00:4b:44:b5:d2:dc:ef:ec:3b:b3:4a:d5:44:
                    92:19:50:57:94:d9:9e:3b:6e:72:4b:48:1c:86:6a:
                    5c:d9:06:db:77:97:5d:0f:5c:0d:3a:c3:84:8d:a4:
                    40:2c:90:de:77:46:d9:31:f8:3a:af:ed:49:13:d9:
                    3b:8f:80:5a:8b:14:84:45:e4:46:8c:6a:6e:84:45:
                    42:cf:6a:b2:d5:7c:e9:e6:8c:4f:25:34:5d:3c:a9:
                    5c:fa:4c:3a:e0:8b:d9:33:65:51:66:51:4f:ce:41:
                    9a:8a:7f:ec:7b:65:10:d5:24:3c:9e:bc:01:a8:8e:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:96:BA:16:A1:04:D0:9D:C6:5E:CF:D3:1F:F1:F0:4D:A0:F3:7D
            X509v3 Authority Key Identifier:
                keyid:6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/t3mWuhahBNCdxl7P0x_x8E2g830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:ea:3e:32:52:94:fc:7d:17:db:36:8e:d1:85:8a:ea:9c:
         8e:7e:1b:d2:8a:75:e6:1a:d3:24:0b:e6:c6:5e:e0:80:3a:aa:
         df:09:af:9d:75:58:08:7d:57:32:e5:24:eb:8c:29:35:ef:a2:
         7a:5d:e8:9c:14:a5:10:69:23:16:b0:5a:5a:5c:33:96:36:ad:
         2b:7f:df:6e:70:64:42:27:db:f8:65:01:1f:d3:90:d2:72:06:
         0c:3b:8d:73:2a:d0:fb:d1:ea:bd:ab:8a:6a:8a:96:c3:4e:35:
         7a:b4:97:f3:f0:ee:d8:3a:d7:88:69:49:b9:c0:51:76:2e:74:
         77:8e:dc:c6:ea:8a:aa:b9:63:1a:64:90:66:89:0a:8b:79:45:
         0d:ca:7f:e0:0c:00:a2:7a:3d:61:e2:d0:2c:be:c6:84:00:3b:
         3b:76:b8:3e:96:be:d5:fb:72:6d:1f:c0:fe:b2:99:2d:f1:df:
         3f:8d:c9:4f:7d:d8:7a:dd:29:f4:78:05:1e:44:b6:fe:9b:1a:
         96:b4:db:ad:26:57:68:ab:54:e9:2c:5c:2a:a2:9f:1e:84:1b:
         13:fc:3e:40:72:7f:df:c5:aa:a6:98:32:81:84:af:8c:0c:55:
         aa:13:d7:9a:ea:0b:2b:07:f1:39:78:25:f0:39:44:e0:cb:5d:
         5a:f1:81:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJjvipJpR4SWcXkXyf3F+eWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGI1ZTY5MTQ4YTMzMTBjMzQ4NzEzMjRiYzU2ZmU4NGI4
OTFkZmYwHhcNMjIwODAzMTI0NjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzc5OTZiYTE2YTEwNGQwOWRjNjVlY2ZkMzFmZjFmMDRkYTBmMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXKQ569nRGT1niLlv/OSKwjhHzwL
N5h4OgDTToqVYBuklb9uQTvAisKWVPizm8UiMMeMJyDsRR0oerXMHA7+06TGouct
PGXMxmpn8EqtQX0emqYxLchgeqRldRjaaBTN7ZALxRWxSEr5aVcQkTdODBPS/Ofk
MOSGrCaY9T6hxvk4wOdYddkJYQBLRLXS3O/sO7NK1USSGVBXlNmeO25yS0gchmpc
2Qbbd5ddD1wNOsOEjaRALJDed0bZMfg6r+1JE9k7j4BaixSEReRGjGpuhEVCz2qy
1Xzp5oxPJTRdPKlc+kw64IvZM2VRZlFPzkGain/se2UQ1SQ8nrwBqI7FOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLd5lroWoQTQncZez9Mf8fBNoPN9MB8GA1UdIwQY
MBaAFGtLXmkUijMQw0hxMkvFb+hLiR3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTB0ZWFSU0tNeEREU0hFeVM4VnY2RXVKSGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zNmM3YjktYmUyOS00NmM3LTgzNGMt
M2Q4ZjM5MDIyZTQ0LzEvdDNtV3VoYWhCTkNkeGw3UDB4X3g4RTJnODMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zNmM3YjktYmUyOS00NmM3LTgzNGMtM2Q4ZjM5MDIyZTQ0
LzEvYTB0ZWFSU0tNeEREU0hFeVM4VnY2RXVKSGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfWMA0G
CSqGSIb3DQEBCwUAA4IBAQBUT+o+MlKU/H0X2zaO0YWK6pyOfhvSinXmGtMkC+bG
XuCAOqrfCa+ddVgIfVcy5STrjCk176J6XeicFKUQaSMWsFpaXDOWNq0rf99ucGRC
J9v4ZQEf05DScgYMO41zKtD70eq9q4pqipbDTjV6tJfz8O7YOteIaUm5wFF2LnR3
jtzG6oqquWMaZJBmiQqLeUUNyn/gDACiej1h4tAsvsaEADs7drg+lr7V+3JtH8D+
spkt8d8/jclPfdh63Sn0eAUeRLb+mxqWtNutJldoq1TpLFwqop8ehBsT/D5Acn/f
xaqmmDKBhK+MDFWqE9ea6gsrB/E5eCXwOUTgy11a8YHO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:53 2024 by rpki-client on console-fra.rpki-client.org