Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/y6k_RXSExmyOuza777ZeMa_XhLQ.roa
File:                     y6k_RXSExmyOuza777ZeMa_XhLQ.roa (raw, json)
Hash identifier:          qfXtdiVN0roT6qEy8t0WIjDNrskKaBilQXU7OSIEzz8=
Subject key identifier:   CB:A9:3F:45:74:84:C6:6C:8E:BB:36:BB:EF:B6:5E:31:AF:D7:84:B4
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       01856F0229C804A5A4A570B4049B161AE39A
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/y6k_RXSExmyOuza777ZeMa_XhLQ.roa
Signing time:             Sun 01 Jan 2023 20:24:50 +0000
ROA not before:           Sun 01 Jan 2023 20:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209915
IP address blocks:        212.119.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:29:c8:04:a5:a4:a5:70:b4:04:9b:16:1a:e3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 20:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cba93f457484c66c8ebb36bbefb65e31afd784b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:29:ad:e7:49:d7:92:4e:64:97:46:e2:c2:
                    c1:1c:25:f8:1e:42:82:92:02:a1:e7:ba:8f:e3:85:
                    6b:a2:61:fb:50:1b:d8:79:af:c5:e9:44:ec:5f:9a:
                    b2:b0:fb:7b:b4:10:08:23:95:2b:0b:29:93:35:dc:
                    c6:2a:7d:50:fd:7d:4d:24:14:00:2b:4a:b3:81:84:
                    4d:49:6a:97:65:4d:de:1b:85:29:7e:de:c9:e4:9c:
                    93:fa:83:c3:a4:5f:23:40:3b:cc:5e:e6:03:af:97:
                    22:56:c5:24:bf:79:48:39:4a:be:50:ef:68:ca:12:
                    6b:ae:c5:a9:1e:ad:ba:3b:bd:a3:c7:4d:aa:a9:a6:
                    c2:99:75:0a:27:56:4f:52:f9:41:60:05:42:75:6b:
                    68:5c:b4:bb:0a:c2:89:74:74:53:c6:77:9f:bc:ee:
                    4c:cf:22:fc:96:8f:b3:e3:a3:12:9a:f9:74:1b:23:
                    a1:2f:fe:74:c2:8c:16:2c:a5:4b:44:e3:52:b4:0e:
                    0b:74:28:3c:ca:90:94:52:7d:1e:da:97:70:45:c3:
                    75:a3:6e:fe:44:da:f3:36:7e:3e:9b:6c:8e:3b:42:
                    4b:68:3d:69:17:59:23:00:64:21:02:a2:7c:a8:c9:
                    5a:7c:60:cc:98:64:cb:f8:92:ca:57:f9:c7:fd:1a:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:3F:45:74:84:C6:6C:8E:BB:36:BB:EF:B6:5E:31:AF:D7:84:B4
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/y6k_RXSExmyOuza777ZeMa_XhLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.119.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:4b:ad:8e:1a:79:b5:85:bf:e7:a6:bf:b0:10:ff:c5:a9:e8:
         ec:b6:b2:b4:0c:13:c7:c3:bb:c3:c8:ac:bf:81:d9:46:b2:4c:
         3a:24:9a:59:a5:f4:7e:2d:fe:e5:f4:8e:c8:a4:e8:42:e4:c8:
         30:30:55:0e:75:ff:36:00:92:f1:a6:45:71:1d:99:d7:2d:94:
         5a:18:e7:d9:5f:ec:a9:cd:e9:a3:f3:c0:62:09:cc:e4:e0:35:
         12:89:c7:ba:de:af:c5:86:38:8d:5c:36:30:73:41:2c:db:0b:
         d3:31:07:c3:a4:c7:03:db:e7:71:51:1a:ed:ee:cc:4d:fb:73:
         ee:5d:c2:7e:f9:85:15:6a:d3:3b:d2:37:5f:03:5d:82:b0:02:
         d0:1b:54:72:bd:0a:db:8c:09:39:f8:d2:51:81:d3:cc:9f:e8:
         8b:6a:ef:7e:e7:c4:68:82:71:fe:ed:3f:81:3b:e9:81:ea:32:
         9b:dd:fe:7b:2f:38:c1:95:bd:c2:93:d0:1c:32:39:4d:05:05:
         a5:42:e8:6b:8d:dd:07:87:59:6f:49:38:08:38:eb:82:08:07:
         76:ed:4c:8f:ea:92:c6:db:bd:44:17:a0:4f:50:b1:0f:49:ea:
         9c:c5:1d:35:41:ef:ce:79:2f:fa:20:95:f7:cd:f9:13:1d:fe:
         13:32:11:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAinIBKWkpXC0BJsWGuOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZGFiNTA3YzA4OTc2Y2MyOWQxNzczNzNkZTYyN2ExY2U4
NmVmYWUwHhcNMjMwMTAxMjAyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmE5M2Y0NTc0ODRjNjZjOGViYjM2YmJlZmI2NWUzMWFmZDc4NGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltcpredJ15JOZJdG4sLBHCX4HkKC
kgKh57qP44VromH7UBvYea/F6UTsX5qysPt7tBAII5UrCymTNdzGKn1Q/X1NJBQA
K0qzgYRNSWqXZU3eG4Upft7J5JyT+oPDpF8jQDvMXuYDr5ciVsUkv3lIOUq+UO9o
yhJrrsWpHq26O72jx02qqabCmXUKJ1ZPUvlBYAVCdWtoXLS7CsKJdHRTxnefvO5M
zyL8lo+z46MSmvl0GyOhL/50wowWLKVLRONStA4LdCg8ypCUUn0e2pdwRcN1o27+
RNrzNn4+m2yOO0JLaD1pF1kjAGQhAqJ8qMlafGDMmGTL+JLKV/nH/RrYEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMupP0V0hMZsjrs2u++2XjGv14S0MB8GA1UdIwQY
MBaAFEXatQfAiXbMKdF3Nz3mJ6HOhu+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODIt
YWEwYjExNTY0YTMyLzEveTZrX1JYU0V4bXlPdXphNzc3WmVNYV9YaExRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODItYWEwYjExNTY0YTMy
LzEvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HcFMA0G
CSqGSIb3DQEBCwUAA4IBAQBJS62OGnm1hb/npr+wEP/FqejstrK0DBPHw7vDyKy/
gdlGskw6JJpZpfR+Lf7l9I7IpOhC5MgwMFUOdf82AJLxpkVxHZnXLZRaGOfZX+yp
zemj88BiCczk4DUSice63q/FhjiNXDYwc0Es2wvTMQfDpMcD2+dxURrt7sxN+3Pu
XcJ++YUVatM70jdfA12CsALQG1RyvQrbjAk5+NJRgdPMn+iLau9+58RognH+7T+B
O+mB6jKb3f57LzjBlb3Ck9AcMjlNBQWlQuhrjd0Hh1lvSTgIOOuCCAd27UyP6pLG
271EF6BPULEPSeqcxR01Qe/OeS/6IJX3zfkTHf4TMhFI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:14 2023 by rpki-client on console-fra.rpki-client.org