Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7i9IgYF8orTCBh8od5lHVRdRbW4.roa
File:                     7i9IgYF8orTCBh8od5lHVRdRbW4.roa (raw, json)
Hash identifier:          XmCp7vzACHBLolzqz2YncoToRbr5g83mI6grw9U6Dkw=
Subject key identifier:   EE:2F:48:81:81:7C:A2:B4:C2:06:1F:28:77:99:47:55:17:51:6D:6E
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019364A7FA61B0E1FC3B3CB67BDCE7BCD610
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7i9IgYF8orTCBh8od5lHVRdRbW4.roa
Signing time:             Mon 25 Nov 2024 18:49:10 +0000
ROA not before:           Mon 25 Nov 2024 18:49:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200993
IP address blocks:        77.90.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:a7:fa:61:b0:e1:fc:3b:3c:b6:7b:dc:e7:bc:d6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Nov 25 18:49:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee2f4881817ca2b4c2061f287799475517516d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:9a:c7:95:06:4e:00:0c:ad:af:36:4a:78:
                    8d:09:83:a5:10:9f:20:f8:25:b8:3f:d4:61:e0:3e:
                    cc:aa:1e:61:2c:f4:87:b1:66:70:94:fd:8a:6f:ae:
                    06:5d:57:f0:37:99:71:76:24:e8:f1:5b:9c:1f:29:
                    ec:7d:ea:3d:b3:a7:f0:98:45:34:ec:d8:1f:d0:c9:
                    85:2a:bb:ee:9a:d9:d8:7d:e4:09:2e:a6:08:86:57:
                    e1:be:41:14:75:bf:1b:76:7d:a8:d1:d0:95:20:0f:
                    71:c5:10:92:b5:f2:cc:cb:9b:41:79:1f:31:bc:17:
                    52:fe:e7:a9:79:de:19:80:47:f9:b6:c7:ab:d8:50:
                    e7:3f:24:25:b6:3c:73:70:72:03:90:51:aa:7a:77:
                    81:0d:a8:ca:f2:43:55:c4:5d:25:e6:88:12:81:58:
                    64:f5:ef:a0:a5:62:6d:0f:1d:07:c0:c2:d8:ab:45:
                    f4:25:d4:32:22:17:0f:83:d0:f7:93:60:8c:b6:f0:
                    d6:ab:79:11:fa:11:7e:f5:0c:7b:bc:31:5e:3d:6f:
                    65:2b:68:29:f5:81:3d:e7:91:3b:d7:ae:17:09:76:
                    02:8a:47:89:d3:5f:35:f7:d5:6d:3a:fd:74:bf:35:
                    20:1f:08:ac:a9:cd:b1:64:0c:f3:b7:1f:f0:f3:f4:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2F:48:81:81:7C:A2:B4:C2:06:1F:28:77:99:47:55:17:51:6D:6E
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7i9IgYF8orTCBh8od5lHVRdRbW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:b7:0f:d8:16:d1:d3:dc:17:c3:9b:e9:30:a6:16:8e:f9:30:
         16:e2:2e:d2:71:47:e6:0a:3f:84:c4:35:82:6d:f7:3d:25:a1:
         c9:cd:29:f4:2d:0c:ec:e1:30:e6:50:1e:0e:48:f6:1a:3c:e2:
         c5:86:0e:47:f7:b3:42:ca:06:a8:75:c3:e9:a3:ff:f0:49:09:
         10:13:cf:8f:62:df:94:ed:62:ec:3d:dc:80:69:66:ac:b5:d4:
         ed:98:00:90:ee:97:11:27:e2:85:b1:6c:4e:d0:3a:8d:ad:6e:
         54:01:4a:89:b6:fd:5a:c3:96:ae:ae:d7:13:95:a2:d7:41:be:
         3c:16:72:9c:05:f3:d6:a6:32:8e:0e:5e:63:a7:4b:a0:50:b9:
         e5:33:75:9d:0d:55:0e:1b:d4:ee:a2:8f:77:d5:e9:1c:01:45:
         a7:04:54:d8:05:b1:10:4a:d8:08:65:03:8a:cc:01:60:d5:c6:
         da:b7:16:50:fa:0a:29:03:76:b1:e2:13:14:d7:e6:0b:bb:da:
         18:a7:6c:d8:6c:95:71:37:89:3b:0f:86:68:90:ce:34:b0:42:
         43:61:37:98:62:a4:98:45:64:76:65:50:82:b4:a7:8a:28:0e:
         0a:80:01:78:c1:ee:a5:03:c6:e9:22:6f:c5:fb:20:0e:07:e5:
         c8:b2:c1:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNkp/phsOH8Ozy2e9znvNYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTI1MTg0OTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTJmNDg4MTgxN2NhMmI0YzIwNjFmMjg3Nzk5NDc1NTE3NTE2ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm+ax5UGTgAMra82SniNCYOlEJ8g
+CW4P9Rh4D7Mqh5hLPSHsWZwlP2Kb64GXVfwN5lxdiTo8VucHynsfeo9s6fwmEU0
7Ngf0MmFKrvumtnYfeQJLqYIhlfhvkEUdb8bdn2o0dCVIA9xxRCStfLMy5tBeR8x
vBdS/ueped4ZgEf5tser2FDnPyQltjxzcHIDkFGqeneBDajK8kNVxF0l5ogSgVhk
9e+gpWJtDx0HwMLYq0X0JdQyIhcPg9D3k2CMtvDWq3kR+hF+9Qx7vDFePW9lK2gp
9YE955E7164XCXYCikeJ018199VtOv10vzUgHwisqc2xZAzztx/w8/R5AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4vSIGBfKK0wgYfKHeZR1UXUW1uMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvN2k5SWdZRjhvclRDQmg4b2Q1bEhWUmRSYlc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVosMA0G
CSqGSIb3DQEBCwUAA4IBAQDFtw/YFtHT3BfDm+kwphaO+TAW4i7ScUfmCj+ExDWC
bfc9JaHJzSn0LQzs4TDmUB4OSPYaPOLFhg5H97NCygaodcPpo//wSQkQE8+PYt+U
7WLsPdyAaWastdTtmACQ7pcRJ+KFsWxO0DqNrW5UAUqJtv1aw5aurtcTlaLXQb48
FnKcBfPWpjKODl5jp0ugULnlM3WdDVUOG9Tuoo931ekcAUWnBFTYBbEQStgIZQOK
zAFg1cbatxZQ+gopA3ax4hMU1+YLu9oYp2zYbJVxN4k7D4ZokM40sEJDYTeYYqSY
RWR2ZVCCtKeKKA4KgAF4we6lA8bpIm/F+yAOB+XIssHQ
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:09 2025 by rpki-client