Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/V35vuGVRe0-4ROK_6KuiUmivI7w.roa
File:                     V35vuGVRe0-4ROK_6KuiUmivI7w.roa (raw, json)
Hash identifier:          FjDZmHJK7+MVxrU0to6DOAKnssE8K/djkNEUEyhQkUs=
Subject key identifier:   57:7E:6F:B8:65:51:7B:4F:B8:44:E2:BF:E8:AB:A2:52:68:AF:23:BC
Certificate issuer:       /CN=c96d86d86495dc676b7f13dba7d258a6362acd24
Certificate serial:       01856C0A5125A8C28B43F844D7B418DE286C
Authority key identifier: C9:6D:86:D8:64:95:DC:67:6B:7F:13:DB:A7:D2:58:A6:36:2A:CD:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/V35vuGVRe0-4ROK_6KuiUmivI7w.roa
Signing time:             Sun 01 Jan 2023 06:34:53 +0000
ROA not before:           Sun 01 Jan 2023 06:34:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212862
IP address blocks:        91.205.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:0a:51:25:a8:c2:8b:43:f8:44:d7:b4:18:de:28:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96d86d86495dc676b7f13dba7d258a6362acd24
        Validity
            Not Before: Jan  1 06:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=577e6fb865517b4fb844e2bfe8aba25268af23bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:07:d9:ee:a2:b2:4d:ed:b4:e9:fe:00:0c:
                    d0:7c:43:1e:63:dd:bc:41:93:e0:31:d5:65:41:27:
                    6d:7c:5f:2d:e4:b7:cb:a4:b4:35:c3:bd:5a:8a:28:
                    6b:40:35:00:9a:3d:aa:6d:94:b1:dc:22:87:9a:66:
                    c1:77:1e:66:17:65:9e:02:31:93:23:cf:8e:7e:2c:
                    e5:f5:3e:b4:66:d2:65:34:14:ce:23:64:82:f9:c2:
                    86:c7:f6:a9:65:00:6c:c5:70:de:c1:06:1f:4c:78:
                    62:e5:4c:84:06:10:93:12:60:f8:83:24:9a:20:d7:
                    4d:c8:34:1e:51:cf:85:de:ff:73:c3:00:41:bf:45:
                    b0:96:64:2e:33:b3:e6:13:ba:1f:d9:6f:3f:65:66:
                    ee:78:06:6b:a3:59:fe:fa:b5:3a:33:25:1a:11:b3:
                    73:f6:85:1d:2c:67:69:c6:2f:10:19:0d:62:fc:16:
                    7f:70:c9:a7:82:72:78:38:22:87:5d:a4:bc:2b:a3:
                    52:7c:80:5e:51:66:8a:66:65:b3:a6:c5:fe:76:9e:
                    bb:93:46:72:36:a6:d8:23:64:58:63:9b:5f:53:a5:
                    9f:13:a3:2a:4e:aa:86:1d:d3:5a:6b:a3:1e:7f:e7:
                    0e:da:03:de:77:a2:6a:2d:56:62:8a:57:73:4b:f6:
                    51:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7E:6F:B8:65:51:7B:4F:B8:44:E2:BF:E8:AB:A2:52:68:AF:23:BC
            X509v3 Authority Key Identifier:
                keyid:C9:6D:86:D8:64:95:DC:67:6B:7F:13:DB:A7:D2:58:A6:36:2A:CD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/V35vuGVRe0-4ROK_6KuiUmivI7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a6e89e-bb99-4435-9e50-20c41d2c24db/1/yW2G2GSV3GdrfxPbp9JYpjYqzSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:31:89:b9:c9:a2:7d:ae:2c:fa:5c:7b:b1:2f:52:8c:18:
         bc:f6:b9:9a:74:f5:90:7c:9c:67:63:fc:f9:66:f3:25:35:36:
         f8:de:6d:ea:b6:24:11:fd:ba:a2:22:43:bb:fd:d0:e3:6e:14:
         3c:80:6c:e4:6b:1c:3b:8d:13:2d:24:45:03:ae:88:b6:b2:a5:
         9c:e7:f3:5c:94:39:17:b6:3b:48:b7:be:51:a6:f8:fa:68:95:
         4e:e1:0f:aa:87:bf:6f:c4:fb:4d:64:e8:56:9f:5c:62:23:d7:
         6b:19:36:9f:4b:b9:51:d4:a0:c5:65:9c:83:87:04:e9:8b:44:
         cd:10:05:74:e3:c9:b8:37:73:9e:85:6e:98:16:aa:94:f1:db:
         af:a6:a6:5a:ae:89:4b:0b:b3:82:09:ee:6c:52:da:bd:f3:b4:
         f4:33:9f:a5:f3:12:ed:37:5f:76:63:c3:06:d9:01:77:a8:9f:
         f4:4b:f6:ec:2c:18:43:2c:16:fe:23:e9:f4:d2:4b:fa:21:05:
         0b:17:5a:5a:63:db:e7:fb:ca:82:36:f7:5a:8c:ac:2b:87:1f:
         4a:88:6c:76:c9:bd:c7:3f:31:10:e5:2c:49:59:5c:3b:ef:a1:
         59:f7:7b:01:4c:a2:c5:3e:5a:7a:4f:e5:d3:6d:99:a8:75:e0:
         34:57:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:23 2024 by rpki-client on console-ams.rpki-client.org