Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/8W-xJyQMCyOHKJpKnLy1ihCjaMQ.roa
File:                     8W-xJyQMCyOHKJpKnLy1ihCjaMQ.roa (raw, json)
Hash identifier:          cQDoy/HRs66o6Ew0wL3kbvDSynTvYs7XiQaiprDAGdQ=
Subject key identifier:   F1:6F:B1:27:24:0C:0B:23:87:28:9A:4A:9C:BC:B5:8A:10:A3:68:C4
Certificate issuer:       /CN=05ccb1770ef70619bcad6baac7a8372bc900711f
Certificate serial:       01878366BECE2DA53E27BA5A22ABEC007E3E
Authority key identifier: 05:CC:B1:77:0E:F7:06:19:BC:AD:6B:AA:C7:A8:37:2B:C9:00:71:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/8W-xJyQMCyOHKJpKnLy1ihCjaMQ.roa
Signing time:             Sat 15 Apr 2023 05:32:41 +0000
ROA not before:           Sat 15 Apr 2023 05:32:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19437
IP address blocks:        91.246.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:83:66:be:ce:2d:a5:3e:27:ba:5a:22:ab:ec:00:7e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ccb1770ef70619bcad6baac7a8372bc900711f
        Validity
            Not Before: Apr 15 05:32:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f16fb127240c0b2387289a4a9cbcb58a10a368c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:21:82:f7:d6:4e:46:c3:85:ea:d6:5a:1f:
                    e6:9b:97:8d:a4:d6:0e:99:53:43:3a:fb:48:fa:0f:
                    18:9e:08:a0:dc:4d:5b:dd:81:5d:93:a8:7f:f4:11:
                    39:2a:2a:50:71:58:3b:fc:c9:6b:e6:8b:56:fe:92:
                    a5:ac:e7:5b:45:cc:a5:65:9e:b2:b1:1a:6a:fa:3f:
                    e9:65:d9:ef:0b:35:01:22:1c:67:32:c7:65:b1:2a:
                    aa:a5:61:cc:7d:41:94:e7:ca:04:bd:83:30:05:e7:
                    06:2e:77:cb:52:0e:2e:ac:1f:da:58:3f:6f:59:0e:
                    01:86:46:4d:57:52:41:a8:c5:7a:df:47:65:17:da:
                    08:23:33:2f:f5:7c:15:f3:3a:b1:db:06:56:63:1e:
                    67:34:0c:5f:b5:d6:94:3e:3f:fa:f2:e7:bb:f8:64:
                    7d:9a:61:c4:d3:5a:69:a0:c4:ae:78:9b:72:e4:ad:
                    3e:b7:c7:56:ea:d2:6a:b6:d0:4d:7a:7a:65:6f:c5:
                    9c:68:b7:ab:32:2b:4b:2c:0e:ad:90:1f:34:c3:49:
                    39:b1:6e:d8:80:98:e9:79:3d:00:ef:35:76:07:74:
                    2a:ac:26:7d:a8:4e:08:25:1d:93:0b:b4:7d:cc:bf:
                    06:13:cc:57:07:15:2e:4b:11:ec:58:f0:41:81:5b:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6F:B1:27:24:0C:0B:23:87:28:9A:4A:9C:BC:B5:8A:10:A3:68:C4
            X509v3 Authority Key Identifier:
                keyid:05:CC:B1:77:0E:F7:06:19:BC:AD:6B:AA:C7:A8:37:2B:C9:00:71:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/8W-xJyQMCyOHKJpKnLy1ihCjaMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e81781-ba83-47a3-aa6b-8cbd81aef494/1/Bcyxdw73Bhm8rWuqx6g3K8kAcR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:bf:15:76:f9:46:26:d8:b1:ff:1f:5e:8c:c3:68:26:e8:da:
         e2:dd:39:75:9d:6f:d8:24:82:25:b0:ac:91:bb:03:63:0e:17:
         cc:27:ec:bb:3f:eb:63:44:a1:92:d0:88:eb:c2:43:54:ae:fc:
         20:07:8d:0a:af:aa:dc:67:9b:46:dc:55:b8:1c:90:e1:11:b0:
         5b:4f:9e:6e:c7:a4:3a:b4:d3:ee:f9:0a:2e:2c:b1:cb:9e:9c:
         19:31:2b:32:d6:b8:ed:20:9a:61:fe:14:07:3b:0a:52:6d:6b:
         61:de:59:4a:c6:e2:4f:cf:b0:14:f0:b7:00:9f:64:a0:26:b1:
         85:cb:b4:30:25:5e:ea:c1:cb:04:a6:68:d6:9c:c5:bc:51:0f:
         ab:4d:ac:31:f7:97:1b:ba:d8:b2:80:d2:f3:28:5f:1e:32:8c:
         88:0a:2b:77:f7:a9:07:9f:85:2e:e9:d2:fb:dc:4d:52:e3:63:
         62:d7:cf:56:03:b6:f2:cc:46:f8:62:c6:9d:77:45:61:ac:ce:
         df:89:0c:d5:52:ac:6e:a7:c8:f7:bb:c2:f0:18:2a:be:81:0f:
         ff:9c:54:da:5a:83:0d:55:55:4a:a3:39:3b:a9:7a:ac:7d:c1:
         04:14:16:da:8b:02:08:30:77:c1:ec:3a:42:e9:16:b0:c0:71:
         2b:9e:06:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeDZr7OLaU+J7paIqvsAH4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2NiMTc3MGVmNzA2MTliY2FkNmJhYWM3YTgzNzJiYzkw
MDcxMWYwHhcNMjMwNDE1MDUzMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTZmYjEyNzI0MGMwYjIzODcyODlhNGE5Y2JjYjU4YTEwYTM2OGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkhgvfWTkbDherWWh/mm5eNpNYO
mVNDOvtI+g8Yngig3E1b3YFdk6h/9BE5KipQcVg7/Mlr5otW/pKlrOdbRcylZZ6y
sRpq+j/pZdnvCzUBIhxnMsdlsSqqpWHMfUGU58oEvYMwBecGLnfLUg4urB/aWD9v
WQ4BhkZNV1JBqMV630dlF9oIIzMv9XwV8zqx2wZWYx5nNAxftdaUPj/68ue7+GR9
mmHE01ppoMSueJty5K0+t8dW6tJqttBNenplb8WcaLerMitLLA6tkB80w0k5sW7Y
gJjpeT0A7zV2B3QqrCZ9qE4IJR2TC7R9zL8GE8xXBxUuSxHsWPBBgVs0MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFvsSckDAsjhyiaSpy8tYoQo2jEMB8GA1UdIwQY
MBaAFAXMsXcO9wYZvK1rqseoNyvJAHEfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmN5eGR3NzNCaG04cld1cXg2ZzNLOGtBY1I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lODE3ODEtYmE4My00N2EzLWFhNmIt
OGNiZDgxYWVmNDk0LzEvOFcteEp5UU1DeU9IS0pwS25MeTFpaENqYU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lODE3ODEtYmE4My00N2EzLWFhNmItOGNiZDgxYWVmNDk0
LzEvQmN5eGR3NzNCaG04cld1cXg2ZzNLOGtBY1I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y7MA0G
CSqGSIb3DQEBCwUAA4IBAQBOvxV2+UYm2LH/H16Mw2gm6Nri3Tl1nW/YJIIlsKyR
uwNjDhfMJ+y7P+tjRKGS0IjrwkNUrvwgB40Kr6rcZ5tG3FW4HJDhEbBbT55ux6Q6
tNPu+QouLLHLnpwZMSsy1rjtIJph/hQHOwpSbWth3llKxuJPz7AU8LcAn2SgJrGF
y7QwJV7qwcsEpmjWnMW8UQ+rTawx95cbutiygNLzKF8eMoyICit396kHn4Uu6dL7
3E1S42Ni189WA7byzEb4Ysadd0VhrM7fiQzVUqxup8j3u8LwGCq+gQ//nFTaWoMN
VVVKozk7qXqsfcEEFBbaiwIIMHfB7DpC6RawwHErngay
-----END CERTIFICATE-----
Generated at Mon Oct 30 14:25:48 2023 by rpki-client on console-fra.rpki-client.org