Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/La769Sv_amJtNZywte6ZVpH9wFI.roa
File:                     La769Sv_amJtNZywte6ZVpH9wFI.roa (raw, json)
Hash identifier:          sLWFU8hD+tYSRF5Z/GutEwqIKk9Pj0VlcgA/ZdfWptI=
Subject key identifier:   2D:AE:FA:F5:2B:FF:6A:62:6D:35:9C:B0:B5:EE:99:56:91:FD:C0:52
Certificate issuer:       /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial:       01860DE6C34DBFA036994144BE5893E69016
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/La769Sv_amJtNZywte6ZVpH9wFI.roa
Signing time:             Wed 01 Feb 2023 16:54:32 +0000
ROA not before:           Wed 01 Feb 2023 16:54:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        62.112.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0d:e6:c3:4d:bf:a0:36:99:41:44:be:58:93:e6:90:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
        Validity
            Not Before: Feb  1 16:54:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2daefaf52bff6a626d359cb0b5ee995691fdc052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:d7:66:1d:7e:6e:30:2e:13:23:d5:32:37:
                    32:de:52:91:98:e1:07:8e:50:a5:b9:e4:3c:17:5a:
                    9b:76:ca:35:1f:ad:bd:51:2c:c2:48:9d:a7:60:55:
                    89:7f:f2:5c:d8:d5:6d:3f:5a:b0:76:4d:e8:20:af:
                    25:0a:3a:46:3c:83:f4:11:df:4c:bd:d6:d8:3d:39:
                    7d:f3:1c:92:8b:93:91:1e:dc:e9:1a:01:4d:3b:ac:
                    e1:f7:dc:3c:4b:26:44:20:77:4e:69:be:34:12:d9:
                    a2:c2:b7:98:b9:80:3e:e9:62:ff:bf:59:a7:63:8c:
                    15:a7:77:64:de:51:37:6f:d3:da:a4:ae:ad:9f:1e:
                    a0:6e:e9:f5:55:7c:e1:e6:da:42:27:9d:cc:d6:09:
                    eb:b5:23:e4:18:cd:ec:68:ed:94:ad:c0:f9:cf:20:
                    90:b8:89:47:7d:22:63:c4:d3:20:a9:03:e0:91:03:
                    31:85:ca:8a:6c:a6:b5:f5:e0:78:71:7a:bd:1b:25:
                    b4:c4:71:ff:ec:dd:b2:e3:4a:f8:df:54:76:50:66:
                    21:e5:9c:76:eb:32:bd:9f:94:95:b2:1e:22:16:99:
                    d3:21:0e:cf:4e:e5:f7:14:30:eb:b5:10:b0:fe:3f:
                    a2:7b:7c:d0:3e:64:b5:57:bb:95:86:b6:a1:c8:9d:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AE:FA:F5:2B:FF:6A:62:6D:35:9C:B0:B5:EE:99:56:91:FD:C0:52
            X509v3 Authority Key Identifier:
                keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/La769Sv_amJtNZywte6ZVpH9wFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:4e:a2:af:40:ba:d2:fc:98:fc:8e:ff:e8:01:30:1b:8f:
         43:87:b6:6b:1a:cf:42:ee:0c:b8:25:68:9b:9e:83:11:b3:ba:
         ca:64:44:3f:dd:f0:04:3c:37:ea:8e:a0:20:8e:10:67:8e:ef:
         b5:a7:d5:e1:c4:73:34:c4:c7:07:07:94:d0:3b:20:5e:9e:05:
         ba:f6:79:00:99:ae:00:6e:4c:74:eb:c1:31:03:ce:26:92:6c:
         2d:81:d9:44:8c:be:17:b6:b3:e4:b4:18:c2:d5:c5:6e:a6:8e:
         dd:fe:ee:90:57:74:e7:d1:5d:12:97:cf:4c:e7:89:4a:1c:96:
         24:99:1d:b0:2d:65:cc:9e:3d:14:97:16:dc:4f:5a:19:a9:81:
         c1:b3:d8:f9:32:4b:69:39:62:4d:5f:b8:51:26:ae:e2:66:33:
         26:12:5a:ee:d9:dc:fa:de:0d:7a:21:31:2b:15:79:64:54:68:
         46:7b:0e:15:23:8a:6d:ec:c1:a1:74:9a:22:76:d9:99:a9:a7:
         ca:08:a5:24:f2:7f:dd:29:bd:70:d7:3f:f6:ae:3b:c8:ab:c7:
         95:fa:96:8a:e5:37:b7:8b:d3:07:96:55:2b:11:eb:73:04:39:
         26:ba:db:79:e0:7e:64:ca:b1:28:41:87:af:45:bf:cb:2d:fd:
         c0:d0:46:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYN5sNNv6A2mUFEvliT5pAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjMwMjAxMTY1NDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGFlZmFmNTJiZmY2YTYyNmQzNTljYjBiNWVlOTk1NjkxZmRjMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhrXZh1+bjAuEyPVMjcy3lKRmOEH
jlClueQ8F1qbdso1H629USzCSJ2nYFWJf/Jc2NVtP1qwdk3oIK8lCjpGPIP0Ed9M
vdbYPTl98xySi5ORHtzpGgFNO6zh99w8SyZEIHdOab40EtmiwreYuYA+6WL/v1mn
Y4wVp3dk3lE3b9PapK6tnx6gbun1VXzh5tpCJ53M1gnrtSPkGM3saO2UrcD5zyCQ
uIlHfSJjxNMgqQPgkQMxhcqKbKa19eB4cXq9GyW0xHH/7N2y40r431R2UGYh5Zx2
6zK9n5SVsh4iFpnTIQ7PTuX3FDDrtRCw/j+ie3zQPmS1V7uVhrahyJ0h6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2u+vUr/2pibTWcsLXumVaR/cBSMB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvTGE3NjlTdl9hbUp0Tlp5d3RlNlpWcEg5d0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPnCQMA0G
CSqGSIb3DQEBCwUAA4IBAQCBKk6ir0C60vyY/I7/6AEwG49Dh7ZrGs9C7gy4JWib
noMRs7rKZEQ/3fAEPDfqjqAgjhBnju+1p9XhxHM0xMcHB5TQOyBengW69nkAma4A
bkx068ExA84mkmwtgdlEjL4XtrPktBjC1cVupo7d/u6QV3Tn0V0Sl89M54lKHJYk
mR2wLWXMnj0UlxbcT1oZqYHBs9j5MktpOWJNX7hRJq7iZjMmElru2dz63g16ITEr
FXlkVGhGew4VI4pt7MGhdJoidtmZqafKCKUk8n/dKb1w1z/2rjvIq8eV+paK5Te3
i9MHllUrEetzBDkmutt54H5kyrEoQYevRb/LLf3A0Eaf
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org