Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/0rvswbFOlQNJKb2VW0eP8lac7kA.roa
File:                     0rvswbFOlQNJKb2VW0eP8lac7kA.roa (raw, json)
Hash identifier:          D2nADw+np1dfWTty+MX+oCsfgBpjCBSxaPsVwN3R1Lo=
Subject key identifier:   D2:BB:EC:C1:B1:4E:95:03:49:29:BD:95:5B:47:8F:F2:56:9C:EE:40
Certificate issuer:       /CN=abb558699207297438090cbee19f022b6eeab982
Certificate serial:       5590A9
Authority key identifier: AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/0rvswbFOlQNJKb2VW0eP8lac7kA.roa
Signing time:             Tue 01 Feb 2022 11:31:07 +0000
ROA not before:           Tue 01 Feb 2022 11:31:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43624
IP address blocks:        146.19.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5607593 (0x5590a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb558699207297438090cbee19f022b6eeab982
        Validity
            Not Before: Feb  1 11:31:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2bbecc1b14e95034929bd955b478ff2569cee40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:6c:7c:c1:c8:58:c6:10:ec:a1:ca:90:c0:
                    29:e3:9e:38:40:42:3a:64:0a:05:b1:f0:81:a5:eb:
                    7d:6a:c6:7e:fb:bc:a0:8a:7d:56:5e:94:a3:ae:aa:
                    53:06:69:23:38:ea:58:4f:11:f9:c6:f8:f7:79:cf:
                    05:a9:26:b4:14:4b:c3:f8:3e:0a:2e:7d:97:93:0a:
                    bd:31:c9:76:53:3e:83:7c:26:8b:1f:26:c5:4d:29:
                    e7:63:0d:74:bb:55:ed:51:72:9e:22:05:7a:e3:67:
                    3e:6d:f5:44:94:ea:05:92:b7:ac:2e:46:de:e9:6f:
                    14:09:58:0d:88:29:0d:86:ec:08:9c:d2:55:cf:b3:
                    cb:26:91:d2:49:e2:ee:77:37:c3:36:30:04:a5:fd:
                    98:19:47:9f:70:59:d6:06:6f:4b:9a:9c:6a:96:89:
                    d7:4d:5a:b1:cd:48:f8:bb:9e:fc:a8:53:68:22:3f:
                    b0:7d:f3:27:f6:01:a0:8a:1e:fc:cb:a9:6d:0d:29:
                    5d:c1:0d:f2:20:13:34:cd:8f:d3:e7:eb:8d:e9:2c:
                    f6:35:88:0f:11:22:7d:b2:eb:0c:12:bb:f6:8e:ae:
                    90:60:99:a7:aa:42:a3:5b:7f:33:ef:ab:e7:a8:13:
                    38:93:fe:51:09:96:09:73:d1:e5:63:01:1f:d3:8f:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BB:EC:C1:B1:4E:95:03:49:29:BD:95:5B:47:8F:F2:56:9C:EE:40
            X509v3 Authority Key Identifier:
                keyid:AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/0rvswbFOlQNJKb2VW0eP8lac7kA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:3b:f8:30:2f:26:f4:cd:c2:27:90:66:d5:a6:b0:80:80:
         d1:da:f1:56:09:df:42:cc:58:36:ee:b0:7e:16:ce:af:9a:18:
         f7:69:a7:02:95:85:10:74:6a:4f:23:08:e5:59:8a:86:c8:7a:
         0c:49:df:a0:61:cf:3d:eb:4d:4b:78:df:8e:de:cb:7a:a8:16:
         8d:77:29:32:92:47:c7:70:f7:e1:15:96:f6:0e:7b:1a:68:94:
         37:57:e5:ba:9f:27:16:48:05:94:dc:d5:8b:21:dc:b4:a8:ca:
         8d:f7:1e:80:be:f9:6d:80:58:e1:9f:a2:93:d9:b8:38:8a:6d:
         53:0e:cc:fb:18:07:69:ce:93:26:59:62:b8:3e:e3:e7:a7:73:
         ae:07:c0:70:b7:b8:97:f5:7d:d8:f1:a6:d1:aa:e8:56:6f:8d:
         c3:48:0d:f5:a9:47:5c:ce:a4:e0:fe:dc:48:68:29:d0:eb:44:
         0f:7a:48:d9:a9:a6:b9:7a:c5:72:96:4d:c5:6e:fa:72:cf:4a:
         cc:47:19:ce:af:39:12:41:5a:c0:e3:f0:a2:de:c0:87:84:0e:
         2c:39:17:b4:7e:e0:55:d7:2e:c8:de:2e:ca:c9:6f:e5:fc:75:
         72:d4:57:08:05:e6:d0:46:ba:d3:43:2f:87:37:48:da:46:d3:
         96:e4:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org