Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/5356rleUIpziao2rBDPfIZgYJS4.roa
File:                     5356rleUIpziao2rBDPfIZgYJS4.roa (raw, json)
Hash identifier:          GvwwbfYqELeEKcMB/V7l8bpyflhQpZmmWrutvOouU5E=
Subject key identifier:   E7:7E:7A:AE:57:94:22:9C:E2:6A:8D:AB:04:33:DF:21:98:18:25:2E
Certificate issuer:       /CN=009421965995af1d65e8e9a98a21dc2681d989f1
Certificate serial:       0182207F80ECC99D5D09D61AB15A2CEFF1D0
Authority key identifier: 00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/5356rleUIpziao2rBDPfIZgYJS4.roa
Signing time:             Thu 21 Jul 2022 11:23:23 +0000
ROA not before:           Thu 21 Jul 2022 11:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        146.19.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:7f:80:ec:c9:9d:5d:09:d6:1a:b1:5a:2c:ef:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009421965995af1d65e8e9a98a21dc2681d989f1
        Validity
            Not Before: Jul 21 11:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e77e7aae5794229ce26a8dab0433df219818252e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:b2:76:7c:b6:5c:4f:94:f0:ea:fb:2e:16:
                    32:ca:d8:ab:48:d0:09:82:ac:1b:2f:4b:61:af:c6:
                    b2:6b:5e:ee:39:e4:2d:30:1c:8b:23:72:db:75:72:
                    2f:b6:a0:27:cf:74:0a:7a:ad:4f:4b:55:35:14:90:
                    86:9d:2e:d4:68:9e:92:30:e3:7b:ca:1e:17:24:2c:
                    32:70:6b:fb:cf:20:bf:35:93:fe:a2:aa:35:68:de:
                    80:4b:2e:26:f5:02:5a:1e:c2:b7:6e:7a:12:b1:da:
                    76:27:2a:cf:fd:09:f5:17:91:88:92:d8:2e:e2:49:
                    8f:15:52:71:7c:18:15:98:7c:e5:1f:13:99:26:23:
                    f7:0b:9f:71:8a:c7:f6:69:7e:57:e8:4b:d4:68:9a:
                    cf:6e:1e:09:fc:5f:d5:01:2e:03:5a:e1:e5:41:09:
                    22:8f:13:01:f9:39:a0:e7:3d:94:19:ba:a7:e6:00:
                    3e:90:85:4c:e9:64:cd:b4:71:f1:45:9a:14:e9:d3:
                    9c:ee:82:86:92:f4:d6:aa:67:79:b7:53:0b:8c:03:
                    8f:98:02:4f:9c:33:97:06:3c:ea:27:59:8d:f8:65:
                    fb:24:a0:98:5a:92:ea:14:73:94:c2:f9:16:cc:d6:
                    b1:c8:fe:64:e0:d3:64:fc:e5:b3:30:ff:8e:b6:c1:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:7A:AE:57:94:22:9C:E2:6A:8D:AB:04:33:DF:21:98:18:25:2E
            X509v3 Authority Key Identifier:
                keyid:00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/5356rleUIpziao2rBDPfIZgYJS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/AJQhllmVrx1l6OmpiiHcJoHZifE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:58:ce:0d:48:0c:fe:17:02:7b:84:8d:4e:df:8b:f1:58:3a:
         da:99:ed:bf:e4:a3:2d:ed:68:57:ea:44:f5:b7:88:b7:32:4e:
         a0:74:a6:7d:9f:2d:b2:6f:7a:23:93:1e:5b:0a:d2:38:a5:5f:
         58:5d:55:28:e7:f3:64:be:0d:6f:16:8a:ee:67:93:37:4a:f9:
         fc:d3:a9:ab:66:5e:cc:80:d6:4e:39:25:56:dc:03:14:06:19:
         c8:44:55:f7:d3:f5:1e:18:dc:fe:4c:58:72:1a:b9:19:4a:8e:
         cc:c2:5c:1a:7b:1a:a7:08:ac:ed:45:c5:17:61:0a:55:48:8f:
         ec:69:36:d4:63:a0:3c:ea:fb:57:6f:7a:dd:c7:37:3a:7b:24:
         a4:2e:f8:16:63:3d:2b:5f:11:66:c3:0d:3e:30:4d:16:94:cf:
         22:09:86:2d:dd:07:92:3e:76:93:7b:d1:aa:94:bb:6f:ea:eb:
         7f:31:06:e9:46:e7:a4:85:b2:48:92:a3:e5:ea:c1:99:81:1e:
         1b:0f:1a:a4:b5:ee:29:2b:22:8e:dd:d7:7b:6f:60:f4:c7:b2:
         49:c2:67:ba:4f:e4:06:93:f5:54:e6:1d:f5:71:2a:75:99:84:
         37:50:44:8a:9c:70:42:df:d3:b9:01:b5:5f:dc:13:e4:91:dd:
         58:af:39:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgf4DsyZ1dCdYasVos7/HQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTQyMTk2NTk5NWFmMWQ2NWU4ZTlhOThhMjFkYzI2ODFk
OTg5ZjEwHhcNMjIwNzIxMTEyMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzdlN2FhZTU3OTQyMjljZTI2YThkYWIwNDMzZGYyMTk4MTgyNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7+ydny2XE+U8Or7LhYyytirSNAJ
gqwbL0thr8aya17uOeQtMByLI3LbdXIvtqAnz3QKeq1PS1U1FJCGnS7UaJ6SMON7
yh4XJCwycGv7zyC/NZP+oqo1aN6ASy4m9QJaHsK3bnoSsdp2JyrP/Qn1F5GIktgu
4kmPFVJxfBgVmHzlHxOZJiP3C59xisf2aX5X6EvUaJrPbh4J/F/VAS4DWuHlQQki
jxMB+Tmg5z2UGbqn5gA+kIVM6WTNtHHxRZoU6dOc7oKGkvTWqmd5t1MLjAOPmAJP
nDOXBjzqJ1mN+GX7JKCYWpLqFHOUwvkWzNaxyP5k4NNk/OWzMP+OtsH6xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOd+eq5XlCKc4mqNqwQz3yGYGCUuMB8GA1UdIwQY
MBaAFACUIZZZla8dZejpqYoh3CaB2YnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpRaGxsbVZyeDFsNk9tcGlpSGNKb0haaWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xYTUyOWUtMDA1MC00NjM3LTk4MjAt
NTVlYjExNDg2NmMwLzEvNTM1NnJsZVVJcHppYW8yckJEUGZJWmdZSlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xYTUyOWUtMDA1MC00NjM3LTk4MjAtNTVlYjExNDg2NmMw
LzEvQUpRaGxsbVZyeDFsNk9tcGlpSGNKb0haaWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNKMA0G
CSqGSIb3DQEBCwUAA4IBAQBRWM4NSAz+FwJ7hI1O34vxWDrame2/5KMt7WhX6kT1
t4i3Mk6gdKZ9ny2yb3ojkx5bCtI4pV9YXVUo5/Nkvg1vForuZ5M3Svn806mrZl7M
gNZOOSVW3AMUBhnIRFX30/UeGNz+TFhyGrkZSo7MwlwaexqnCKztRcUXYQpVSI/s
aTbUY6A86vtXb3rdxzc6eySkLvgWYz0rXxFmww0+ME0WlM8iCYYt3QeSPnaTe9Gq
lLtv6ut/MQbpRuekhbJIkqPl6sGZgR4bDxqkte4pKyKO3dd7b2D0x7JJwme6T+QG
k/VU5h31cSp1mYQ3UESKnHBC39O5AbVf3BPkkd1Yrzkd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:34 2024 by rpki-client on console-fra.rpki-client.org