Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/CcqL3JbmY5UiwnYsByO4EvNWcs4.roa
File:                     CcqL3JbmY5UiwnYsByO4EvNWcs4.roa (raw, json)
Hash identifier:          dnYyH3lDGKBCCmInlna4oR3x17Wzy5RAdjhXSv7KPpY=
Subject key identifier:   09:CA:8B:DC:96:E6:63:95:22:C2:76:2C:07:23:B8:12:F3:56:72:CE
Certificate issuer:       /CN=dd9261fe07545d893fadb09996691f3cb0757d51
Certificate serial:       01870E1AB9088E92BC46AE2EE4C3EC020641
Authority key identifier: DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/CcqL3JbmY5UiwnYsByO4EvNWcs4.roa
Signing time:             Thu 23 Mar 2023 10:54:05 +0000
ROA not before:           Thu 23 Mar 2023 10:54:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        212.52.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0e:1a:b9:08:8e:92:bc:46:ae:2e:e4:c3:ec:02:06:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9261fe07545d893fadb09996691f3cb0757d51
        Validity
            Not Before: Mar 23 10:54:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=09ca8bdc96e6639522c2762c0723b812f35672ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:78:b5:38:6b:64:04:3a:b3:0d:7a:c6:06:
                    12:76:80:81:dd:48:3b:33:33:26:63:a9:99:4a:9f:
                    a2:c2:af:3f:57:aa:a4:67:69:85:73:bf:2e:bf:64:
                    59:50:bb:ad:d8:d0:94:0f:1e:d2:8a:bd:61:06:6a:
                    84:76:1a:a5:68:f8:f1:ae:97:40:79:a8:6a:51:4e:
                    8f:f0:02:e5:d4:0a:58:55:3a:c1:73:48:e4:01:95:
                    3b:e7:3c:c3:7a:bb:db:01:c7:d6:25:31:05:c3:28:
                    f3:44:47:41:d3:5f:b4:15:1a:ba:1c:56:a5:ee:82:
                    a2:f2:6d:75:cf:b9:55:af:30:1e:1a:f8:99:9e:0b:
                    c9:b6:f1:c5:70:63:89:a6:01:e6:f4:2f:03:8f:22:
                    49:58:2b:20:3b:e7:49:af:77:bd:82:c2:12:39:e4:
                    37:de:5b:b4:fc:07:83:04:e8:20:93:10:5b:1f:7a:
                    f5:56:3e:1d:4d:f1:25:60:82:08:0c:89:d2:d4:08:
                    91:8d:e9:e3:b8:2e:42:b5:d8:bc:f1:2a:a8:7d:f2:
                    94:4b:83:0a:e9:e2:5c:c6:4a:91:d4:a0:64:5d:d1:
                    a9:e6:0f:8b:00:8e:b8:a4:5d:ab:44:6c:66:e4:0e:
                    0a:ba:a7:46:7f:f1:54:a9:c7:7a:eb:b2:ce:fb:84:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CA:8B:DC:96:E6:63:95:22:C2:76:2C:07:23:B8:12:F3:56:72:CE
            X509v3 Authority Key Identifier:
                keyid:DD:92:61:FE:07:54:5D:89:3F:AD:B0:99:96:69:1F:3C:B0:75:7D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/CcqL3JbmY5UiwnYsByO4EvNWcs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/867549-2588-4589-9fd4-9089c92ac045/1/3ZJh_gdUXYk_rbCZlmkfPLB1fVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:c8:6d:e5:e9:36:fb:91:da:64:ed:89:9b:88:16:54:4f:25:
         2c:e3:6f:59:e4:d8:de:ce:a1:31:e0:ee:70:0f:c8:8a:11:f7:
         ab:76:a1:ab:62:fe:70:2d:80:82:72:8d:32:66:65:35:cb:78:
         06:3c:35:cd:bc:b4:0e:a4:8a:27:58:e3:7f:e5:90:7c:58:1b:
         32:ec:c3:be:3a:f6:71:63:9c:40:9c:09:75:17:87:fd:6e:e4:
         aa:77:f4:a7:c4:56:6f:07:5c:00:b9:36:82:51:f0:db:b6:45:
         42:d4:2e:a2:34:b8:56:1f:b3:69:75:25:ab:b8:ed:7b:30:8b:
         b0:a1:0f:fc:37:bc:7c:54:d3:60:f5:d3:1c:c8:3b:7c:fa:64:
         44:e0:aa:b2:c2:32:5f:b5:23:54:b3:a3:5e:66:e9:84:05:50:
         b7:44:e2:9d:43:df:4c:4a:12:6e:0b:e6:24:37:26:0d:c6:26:
         8a:ff:a7:38:da:61:99:7d:a9:76:9c:79:a5:0e:2a:82:8e:4b:
         92:82:80:1b:82:b0:08:22:db:d1:7d:1f:dc:44:2d:e8:57:98:
         15:27:72:c0:5e:a8:1e:28:50:26:84:fb:18:ff:44:cc:e0:7c:
         10:e0:20:94:b8:1d:d8:61:bc:e0:2d:a3:7e:51:a9:0d:30:da:
         a7:b5:c3:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcOGrkIjpK8Rq4u5MPsAgZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTI2MWZlMDc1NDVkODkzZmFkYjA5OTk2NjkxZjNjYjA3
NTdkNTEwHhcNMjMwMzIzMTA1NDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWNhOGJkYzk2ZTY2Mzk1MjJjMjc2MmMwNzIzYjgxMmYzNTY3MmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBR4tThrZAQ6sw16xgYSdoCB3Ug7
MzMmY6mZSp+iwq8/V6qkZ2mFc78uv2RZULut2NCUDx7Sir1hBmqEdhqlaPjxrpdA
eahqUU6P8ALl1ApYVTrBc0jkAZU75zzDervbAcfWJTEFwyjzREdB01+0FRq6HFal
7oKi8m11z7lVrzAeGviZngvJtvHFcGOJpgHm9C8DjyJJWCsgO+dJr3e9gsISOeQ3
3lu0/AeDBOggkxBbH3r1Vj4dTfElYIIIDInS1AiRjenjuC5Ctdi88SqoffKUS4MK
6eJcxkqR1KBkXdGp5g+LAI64pF2rRGxm5A4KuqdGf/FUqcd667LO+4QxcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnKi9yW5mOVIsJ2LAcjuBLzVnLOMB8GA1UdIwQY
MBaAFN2SYf4HVF2JP62wmZZpHzywdX1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pKaF9nZFVYWWtfcmJDWmxta2ZQTEIxZlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84Njc1NDktMjU4OC00NTg5LTlmZDQt
OTA4OWM5MmFjMDQ1LzEvQ2NxTDNKYm1ZNVVpd25Zc0J5TzRFdk5XY3M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84Njc1NDktMjU4OC00NTg5LTlmZDQtOTA4OWM5MmFjMDQ1
LzEvM1pKaF9nZFVYWWtfcmJDWmxta2ZQTEIxZlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQBMA0G
CSqGSIb3DQEBCwUAA4IBAQCsyG3l6Tb7kdpk7YmbiBZUTyUs429Z5NjezqEx4O5w
D8iKEferdqGrYv5wLYCCco0yZmU1y3gGPDXNvLQOpIonWON/5ZB8WBsy7MO+OvZx
Y5xAnAl1F4f9buSqd/SnxFZvB1wAuTaCUfDbtkVC1C6iNLhWH7NpdSWruO17MIuw
oQ/8N7x8VNNg9dMcyDt8+mRE4KqywjJftSNUs6NeZumEBVC3ROKdQ99MShJuC+Yk
NyYNxiaK/6c42mGZfal2nHmlDiqCjkuSgoAbgrAIItvRfR/cRC3oV5gVJ3LAXqge
KFAmhPsY/0TM4HwQ4CCUuB3YYbzgLaN+UakNMNqntcPY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org