Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/MiYZAJ2SqYkH6U06gPjQqRSbRiA.roa
File:                     MiYZAJ2SqYkH6U06gPjQqRSbRiA.roa (raw, json)
Hash identifier:          YgF0ATi2lG6u2e7J2viveDRJv41+DMFJtbrfZfEgrrw=
Subject key identifier:   32:26:19:00:9D:92:A9:89:07:E9:4D:3A:80:F8:D0:A9:14:9B:46:20
Certificate issuer:       /CN=abb558699207297438090cbee19f022b6eeab982
Certificate serial:       0185E952C34A9DC37D107CA84C2A3DC88EC7
Authority key identifier: AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/MiYZAJ2SqYkH6U06gPjQqRSbRiA.roa
Signing time:             Wed 25 Jan 2023 14:26:33 +0000
ROA not before:           Wed 25 Jan 2023 14:26:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     26548
IP address blocks:        146.19.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e9:52:c3:4a:9d:c3:7d:10:7c:a8:4c:2a:3d:c8:8e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb558699207297438090cbee19f022b6eeab982
        Validity
            Not Before: Jan 25 14:26:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=322619009d92a98907e94d3a80f8d0a9149b4620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:36:22:7b:45:b0:7a:f1:4d:0c:5a:48:81:
                    3d:cf:ba:d3:35:f8:96:1f:50:82:d0:18:e7:7a:39:
                    56:99:4f:e5:49:e3:60:31:24:d8:16:bf:79:2a:59:
                    ba:4b:e4:dc:49:2f:81:2f:c3:37:ab:d9:05:f5:93:
                    5d:a8:e2:d6:c9:17:55:5e:eb:d1:52:18:62:94:ea:
                    7d:66:e0:cf:1b:c3:f8:5c:43:0f:50:2f:58:3f:78:
                    60:6e:ac:e4:24:a0:6c:49:03:59:64:df:e7:21:5b:
                    00:88:38:b1:b5:3c:29:cf:f5:06:81:44:e7:74:8c:
                    89:b9:a8:08:a0:66:24:74:a8:5a:4e:6f:d4:12:74:
                    ed:8d:d0:4a:f0:8f:76:c9:1e:4d:b8:02:30:fe:86:
                    9d:17:57:f8:da:fc:dc:27:cb:26:c4:ac:b5:32:f5:
                    4c:5b:b8:33:9d:58:32:ed:32:36:b7:12:87:52:d3:
                    6a:49:1d:06:90:db:a8:92:1f:a7:ee:42:1f:8b:cb:
                    fc:9c:5e:95:97:30:df:58:50:18:04:0a:93:dc:6b:
                    5b:a3:e5:1a:81:17:2e:d0:a1:97:84:6d:02:46:01:
                    95:6d:21:80:fa:ac:53:45:ba:26:a3:0c:ea:26:8c:
                    5b:30:56:19:81:55:d2:fc:66:79:03:40:14:c1:be:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:26:19:00:9D:92:A9:89:07:E9:4D:3A:80:F8:D0:A9:14:9B:46:20
            X509v3 Authority Key Identifier:
                keyid:AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/MiYZAJ2SqYkH6U06gPjQqRSbRiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:db:8f:20:b3:19:c2:43:01:f5:50:a9:72:67:ee:04:0a:
         b9:4d:ae:dc:a8:94:74:fe:3a:ac:24:04:02:f2:1b:3d:95:35:
         e1:bf:ab:9c:69:aa:5c:51:52:fa:3f:b0:c2:f9:9b:bc:5e:53:
         be:09:91:b1:7b:b9:ad:fc:65:4b:09:c6:fb:a9:27:24:17:13:
         2f:9d:35:85:15:7f:ca:4a:1b:bc:cc:ee:51:09:b9:af:9d:ec:
         2d:83:49:f6:14:a8:8d:76:1c:13:89:ed:fa:26:f8:38:3e:53:
         ef:c1:c7:4f:bb:bd:ef:80:a8:aa:9a:7c:52:4b:cc:22:75:dd:
         e1:af:e6:92:54:17:5c:f1:49:04:ce:6d:7e:b6:7a:12:66:a5:
         ec:e4:60:82:88:8a:b8:96:f5:9c:fc:74:43:fd:f1:ad:a1:89:
         b5:93:ec:eb:3b:ea:70:13:13:6a:11:70:ec:72:a8:1b:57:23:
         4b:0f:36:18:81:fb:70:1f:61:8c:6d:26:f0:5a:0b:cf:50:c5:
         6a:c5:b8:83:94:22:ef:93:07:81:87:e4:a3:b1:64:9e:93:c3:
         b7:b4:db:33:5e:6b:3c:54:21:4c:9d:58:89:f9:4a:26:81:68:
         57:99:cc:f0:c3:42:40:66:ad:5b:61:bb:85:a2:3d:c2:0a:70:
         a0:09:af:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXpUsNKncN9EHyoTCo9yI7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYjU1ODY5OTIwNzI5NzQzODA5MGNiZWUxOWYwMjJiNmVl
YWI5ODIwHhcNMjMwMTI1MTQyNjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjI2MTkwMDlkOTJhOTg5MDdlOTRkM2E4MGY4ZDBhOTE0OWI0NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri82IntFsHrxTQxaSIE9z7rTNfiW
H1CC0BjnejlWmU/lSeNgMSTYFr95Klm6S+TcSS+BL8M3q9kF9ZNdqOLWyRdVXuvR
UhhilOp9ZuDPG8P4XEMPUC9YP3hgbqzkJKBsSQNZZN/nIVsAiDixtTwpz/UGgUTn
dIyJuagIoGYkdKhaTm/UEnTtjdBK8I92yR5NuAIw/oadF1f42vzcJ8smxKy1MvVM
W7gznVgy7TI2txKHUtNqSR0GkNuokh+n7kIfi8v8nF6VlzDfWFAYBAqT3Gtbo+Ua
gRcu0KGXhG0CRgGVbSGA+qxTRbomowzqJoxbMFYZgVXS/GZ5A0AUwb5kFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDImGQCdkqmJB+lNOoD40KkUm0YgMB8GA1UdIwQY
MBaAFKu1WGmSByl0OAkMvuGfAitu6rmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdWWWFaSUhLWFE0Q1F5LTRaOENLMjdxdVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85Nzc2NjctYTE2NS00OTVjLWE4OWUt
OWJlOGZiNDdhNTIyLzEvTWlZWkFKMlNxWWtINlUwNmdQalFxUlNiUmlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85Nzc2NjctYTE2NS00OTVjLWE4OWUtOWJlOGZiNDdhNTIy
LzEvcTdWWWFaSUhLWFE0Q1F5LTRaOENLMjdxdVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNbMA0G
CSqGSIb3DQEBCwUAA4IBAQBbnNuPILMZwkMB9VCpcmfuBAq5Ta7cqJR0/jqsJAQC
8hs9lTXhv6ucaapcUVL6P7DC+Zu8XlO+CZGxe7mt/GVLCcb7qSckFxMvnTWFFX/K
Shu8zO5RCbmvnewtg0n2FKiNdhwTie36Jvg4PlPvwcdPu73vgKiqmnxSS8widd3h
r+aSVBdc8UkEzm1+tnoSZqXs5GCCiIq4lvWc/HRD/fGtoYm1k+zrO+pwExNqEXDs
cqgbVyNLDzYYgftwH2GMbSbwWgvPUMVqxbiDlCLvkweBh+SjsWSek8O3tNszXms8
VCFMnViJ+UomgWhXmczww0JAZq1bYbuFoj3CCnCgCa+m
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org