Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/48PzRcGNAry6l1HEks85ju79lqU.roa
File:                     48PzRcGNAry6l1HEks85ju79lqU.roa (raw, json)
Hash identifier:          qnyTXIpd4LZessxYgiocFWC/pVLRGlTnc5sJ2kJlWhk=
Subject key identifier:   E3:C3:F3:45:C1:8D:02:BC:BA:97:51:C4:92:CF:39:8E:EE:FD:96:A5
Certificate issuer:       /CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
Certificate serial:       E909
Authority key identifier: C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/48PzRcGNAry6l1HEks85ju79lqU.roa
Signing time:             Tue 26 Apr 2022 09:56:48 +0000
ROA not before:           Tue 26 Apr 2022 09:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48624
IP address blocks:        176.56.64.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59657 (0xe909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
        Validity
            Not Before: Apr 26 09:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3c3f345c18d02bcba9751c492cf398eeefd96a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:e9:3f:bf:9f:52:15:89:03:f0:a7:28:b2:
                    4e:58:e7:5f:10:b7:e3:64:2c:87:d7:9c:ec:17:a8:
                    5b:81:f7:a0:3a:40:a7:5f:9c:e2:8f:62:bc:63:36:
                    16:b7:27:51:fb:29:65:69:2a:24:7e:45:41:28:8a:
                    10:35:0f:e4:b6:6d:a3:14:fa:53:0d:c9:68:6e:69:
                    d4:fc:fd:90:0d:e6:c6:ce:8c:dc:ee:bd:0a:4b:58:
                    a9:82:d5:11:3a:e0:27:ba:a6:7b:86:e1:da:b5:e5:
                    18:fe:2c:26:c9:df:5d:4c:51:a0:ce:45:e0:cf:96:
                    af:ef:aa:26:34:c6:ad:ec:31:f3:4d:ae:7f:32:ab:
                    45:cb:29:47:55:8e:9c:94:9c:17:e9:42:bf:3f:0f:
                    fb:3b:68:48:a0:34:64:6e:fb:36:67:37:21:61:df:
                    43:de:54:2b:03:39:92:89:20:da:79:32:f7:7d:54:
                    b2:81:2d:2d:98:64:24:ff:22:16:86:c9:36:1d:c5:
                    1a:cb:b8:ad:78:6f:1c:a0:ed:ca:e2:a3:59:b0:e3:
                    3c:36:f3:9b:5c:1f:98:bc:9b:16:55:97:56:41:f8:
                    4e:bd:b5:cc:ba:c9:b5:77:da:21:a7:7e:67:22:b9:
                    8a:41:3c:42:33:09:01:04:23:bc:cd:0b:85:99:7c:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C3:F3:45:C1:8D:02:BC:BA:97:51:C4:92:CF:39:8E:EE:FD:96:A5
            X509v3 Authority Key Identifier:
                keyid:C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/48PzRcGNAry6l1HEks85ju79lqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.56.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:05:92:50:d7:5a:3d:c1:68:3f:66:7e:93:02:c5:8d:f5:67:
         0f:3d:32:d2:5b:1f:0a:e1:87:3b:42:f9:1c:a3:f0:70:db:25:
         43:19:eb:f9:f1:44:ad:c8:5c:09:9a:01:d0:4e:ed:11:f7:81:
         63:6c:7f:7c:ad:1f:13:a7:ed:97:34:8e:fc:e2:d5:ba:c7:40:
         89:57:9c:bc:41:cb:93:ee:6a:b3:88:92:c2:be:4e:54:1b:f9:
         a9:c0:0c:78:ac:cc:64:9f:22:75:f0:19:2b:b3:16:2f:7b:a4:
         e5:d9:b6:93:52:7e:26:04:50:37:2f:ac:a8:77:68:bd:16:e9:
         93:19:2b:20:99:25:23:f0:63:89:ef:1b:3d:a5:62:1a:5f:79:
         31:f5:2e:9b:59:14:95:b4:24:64:64:14:a1:01:35:98:5a:4a:
         d9:d5:f2:d2:fe:7a:47:e2:5d:04:d7:14:8b:42:e6:4c:98:a6:
         0b:5a:c1:cb:85:96:7e:99:37:e9:e1:fe:f0:fc:0c:7f:1d:0f:
         4a:94:fd:94:3c:60:b2:a2:77:f7:96:9b:ff:b7:c3:ed:a2:8e:
         43:ba:86:0c:43:48:1b:7c:24:87:bd:03:2e:43:b9:95:0c:57:
         88:93:43:2d:10:4b:39:cd:bd:1e:09:d7:b7:0f:36:9c:4c:85:
         25:25:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:51 2024 by rpki-client on console-ams.rpki-client.org