Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/p4sY_JtIslWlNrKlKw9fgdiUnTY.roa
File:                     p4sY_JtIslWlNrKlKw9fgdiUnTY.roa (raw, json)
Hash identifier:          JqDZQccACpC46IQ38DhDjNJww9qyPzrqFukvrVC3x4k=
Subject key identifier:   A7:8B:18:FC:9B:48:B2:55:A5:36:B2:A5:2B:0F:5F:81:D8:94:9D:36
Certificate issuer:       /CN=948b09d6772a1417f17f60468ab33b3bb112f229
Certificate serial:       01867CEEE84A78C75902D313C53EBE729FCA
Authority key identifier: 94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/p4sY_JtIslWlNrKlKw9fgdiUnTY.roa
Signing time:             Thu 23 Feb 2023 06:21:17 +0000
ROA not before:           Thu 23 Feb 2023 06:21:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210439
IP address blocks:        188.244.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7c:ee:e8:4a:78:c7:59:02:d3:13:c5:3e:be:72:9f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948b09d6772a1417f17f60468ab33b3bb112f229
        Validity
            Not Before: Feb 23 06:21:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a78b18fc9b48b255a536b2a52b0f5f81d8949d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:56:95:21:b7:b6:10:10:02:98:0b:8c:e3:
                    09:72:ad:59:06:ba:f1:1a:79:34:61:e4:69:0a:3b:
                    01:e1:5e:8f:4c:e0:3f:1c:6d:3b:08:1f:79:d9:2e:
                    22:fd:9c:c4:30:a2:23:b0:26:60:20:14:34:b8:f9:
                    9a:e2:8d:49:45:89:a1:8e:f2:b8:ae:ea:68:1b:80:
                    86:a3:4a:c8:94:a7:ba:9d:26:8b:5a:82:88:0b:f4:
                    0e:1d:e3:62:3c:5a:fb:b5:de:42:86:e4:fe:18:0b:
                    3a:dd:50:4d:69:66:ad:ca:08:be:7b:e1:be:3c:de:
                    db:1a:75:16:89:49:4b:72:14:7f:af:8e:ca:0a:73:
                    83:66:1f:4f:c9:23:c6:b5:9f:a8:b0:fe:94:44:74:
                    e3:67:ed:35:46:55:df:54:9d:e7:bf:1e:4a:f4:eb:
                    b4:0c:a2:61:99:f8:56:d9:f3:ea:a8:b0:b1:1f:8e:
                    7e:2c:8c:76:e6:0e:6a:b8:9e:91:af:97:0c:ed:d5:
                    15:2c:db:53:04:4b:a2:a5:01:f4:3a:5c:fd:48:5c:
                    29:12:34:76:0b:01:0f:c1:bd:bb:6e:53:72:80:c2:
                    66:79:19:c2:4a:0a:d8:92:e5:26:1e:e6:98:c1:32:
                    e2:43:c1:fc:19:9b:bc:aa:32:81:6d:2e:b4:1d:05:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8B:18:FC:9B:48:B2:55:A5:36:B2:A5:2B:0F:5F:81:D8:94:9D:36
            X509v3 Authority Key Identifier:
                keyid:94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/p4sY_JtIslWlNrKlKw9fgdiUnTY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:23:a7:fe:b7:05:53:37:86:43:2a:3b:b1:c0:40:bf:3c:
         da:40:d4:1f:0b:d3:05:34:ee:9f:88:97:e0:d6:9d:e1:04:36:
         f4:7f:3b:c9:33:b0:83:a4:f5:07:8a:54:32:34:fa:61:c1:88:
         64:87:f6:a6:2a:1c:15:1b:53:9f:62:79:b9:b4:84:a9:1c:6c:
         8a:9f:e1:71:6e:1c:dc:4a:65:ba:66:20:3e:aa:eb:ac:f8:0f:
         55:e1:be:57:7c:bb:27:23:fa:61:57:5e:f7:50:0b:15:4c:ed:
         fa:2e:9f:e5:16:de:f1:67:10:df:b6:4b:fd:2d:dd:a3:69:ee:
         f7:58:b9:39:05:35:f8:a1:92:a1:47:cb:57:28:59:4d:cb:c4:
         1a:07:ff:5f:87:98:1c:76:82:ec:04:a7:d3:24:33:b3:1a:f9:
         63:05:9b:77:4d:c3:35:d3:9d:9b:f1:df:82:9f:27:69:26:17:
         c8:0f:3a:8c:22:ad:21:e7:5c:a7:6b:bc:d4:42:52:18:f9:da:
         27:fe:e8:dc:b1:c6:15:66:0b:b1:ce:77:f9:70:23:17:08:f7:
         c7:d9:41:28:d8:74:b6:49:5e:58:a1:f6:24:3c:8f:fa:d1:5e:
         18:0a:51:1e:d2:db:86:fb:2a:f3:07:e3:05:70:d5:2c:e3:35:
         7f:07:b4:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ87uhKeMdZAtMTxT6+cp/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGIwOWQ2NzcyYTE0MTdmMTdmNjA0NjhhYjMzYjNiYjEx
MmYyMjkwHhcNMjMwMjIzMDYyMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzhiMThmYzliNDhiMjU1YTUzNmIyYTUyYjBmNWY4MWQ4OTQ5ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh11WlSG3thAQApgLjOMJcq1ZBrrx
Gnk0YeRpCjsB4V6PTOA/HG07CB952S4i/ZzEMKIjsCZgIBQ0uPma4o1JRYmhjvK4
rupoG4CGo0rIlKe6nSaLWoKIC/QOHeNiPFr7td5ChuT+GAs63VBNaWatygi+e+G+
PN7bGnUWiUlLchR/r47KCnODZh9PySPGtZ+osP6URHTjZ+01RlXfVJ3nvx5K9Ou0
DKJhmfhW2fPqqLCxH45+LIx25g5quJ6Rr5cM7dUVLNtTBEuipQH0Olz9SFwpEjR2
CwEPwb27blNygMJmeRnCSgrYkuUmHuaYwTLiQ8H8GZu8qjKBbS60HQXCAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKeLGPybSLJVpTaypSsPX4HYlJ02MB8GA1UdIwQY
MBaAFJSLCdZ3KhQX8X9gRoqzOzuxEvIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElzSjFuY3FGQmZ4ZjJCR2lyTTdPN0VTOGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMzRhNWItZTQ3OC00ZDIzLTljODIt
MDI5ZjY3OGQxNDhkLzEvcDRzWV9KdElzbFdsTnJLbEt3OWZnZGlVblRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMzRhNWItZTQ3OC00ZDIzLTljODItMDI5ZjY3OGQxNDhk
LzEvbElzSjFuY3FGQmZ4ZjJCR2lyTTdPN0VTOGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPR/MA0G
CSqGSIb3DQEBCwUAA4IBAQB8JCOn/rcFUzeGQyo7scBAvzzaQNQfC9MFNO6fiJfg
1p3hBDb0fzvJM7CDpPUHilQyNPphwYhkh/amKhwVG1OfYnm5tISpHGyKn+Fxbhzc
SmW6ZiA+quus+A9V4b5XfLsnI/phV173UAsVTO36Lp/lFt7xZxDftkv9Ld2jae73
WLk5BTX4oZKhR8tXKFlNy8QaB/9fh5gcdoLsBKfTJDOzGvljBZt3TcM1052b8d+C
nydpJhfIDzqMIq0h51yna7zUQlIY+don/ujcscYVZguxznf5cCMXCPfH2UEo2HS2
SV5YofYkPI/60V4YClEe0tuG+yrzB+MFcNUs4zV/B7R3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:25 2024 by rpki-client on console-fra.rpki-client.org