Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/CyWRiC1QA_amNPptfMh81932Q50.roa
File:                     CyWRiC1QA_amNPptfMh81932Q50.roa (raw, json)
Hash identifier:          o4agKOKldmqsjsGSkuib9YWMqwwbV1pWVKuqL8VLqVE=
Subject key identifier:   0B:25:91:88:2D:50:03:F6:A6:34:FA:6D:7C:C8:7C:D7:DD:F6:43:9D
Certificate issuer:       /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial:       024F16A3
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/CyWRiC1QA_amNPptfMh81932Q50.roa
Signing time:             Sat 01 Jan 2022 07:54:50 +0000
ROA not before:           Sat 01 Jan 2022 07:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        190.92.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38737571 (0x24f16a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
        Validity
            Not Before: Jan  1 07:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b2591882d5003f6a634fa6d7cc87cd7ddf6439d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:d2:57:19:33:86:91:f8:d4:b2:10:88:af:
                    64:07:68:f4:9f:6a:b1:aa:f4:c0:5d:29:d2:a3:c6:
                    66:26:ae:30:cd:86:6d:bb:4f:41:79:b4:05:56:b5:
                    98:47:e7:90:d7:86:76:ab:95:2f:6d:dd:73:df:a8:
                    56:3b:42:f0:1d:28:5e:ec:aa:65:9b:aa:a0:d0:07:
                    13:31:33:7b:c0:a2:57:e4:82:98:91:ee:d8:12:61:
                    ce:7e:ed:11:29:6b:d0:54:39:93:d7:d8:c7:3b:15:
                    96:8f:19:02:04:c4:f5:47:24:b6:59:69:f6:8f:d2:
                    c7:6d:8f:b1:3b:12:66:be:fb:c2:b4:d4:66:87:f1:
                    25:b3:dd:96:37:c8:b6:03:6a:ec:9c:c3:04:b5:01:
                    77:12:3a:ac:e0:44:1c:36:9b:37:7c:98:0d:8b:1e:
                    fb:69:e5:42:ee:dd:63:33:ff:94:ea:1d:83:23:f8:
                    2d:4e:a6:63:c1:37:a2:c0:fa:85:f8:78:e0:b9:ad:
                    eb:50:46:d9:f2:ba:a2:bb:76:32:08:76:3e:ce:9a:
                    2c:7c:d6:a8:3c:76:0b:0c:b1:6a:f9:4c:5e:84:bd:
                    a2:c5:4d:14:05:8a:fc:cf:9a:0f:f9:65:45:99:04:
                    06:1d:3f:3d:a7:aa:2d:4d:e3:1f:31:20:03:2d:64:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:25:91:88:2D:50:03:F6:A6:34:FA:6D:7C:C8:7C:D7:DD:F6:43:9D
            X509v3 Authority Key Identifier:
                keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/CyWRiC1QA_amNPptfMh81932Q50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:fb:5b:de:87:b4:c3:97:74:97:80:2d:25:71:56:0b:d5:
         70:e7:81:5e:50:b0:65:8d:20:75:0f:fa:bd:fd:97:1a:59:14:
         a9:62:76:ea:f2:a7:81:7f:02:d6:51:7f:72:ee:dc:b4:d5:25:
         8c:01:66:46:00:6a:2b:d1:ce:8c:c4:2d:56:09:e6:37:14:e8:
         00:2d:6e:ef:5b:e5:37:76:20:68:24:0f:9f:af:f4:1f:66:ad:
         3a:ab:f2:65:94:ad:d3:fa:68:74:1f:ac:b4:48:f0:cd:21:ef:
         c3:67:74:37:02:da:aa:22:bb:c3:5a:2b:63:1e:96:03:73:53:
         77:be:12:10:d9:c7:41:a2:fb:fb:4d:74:ad:d5:9c:4c:9e:62:
         34:c9:23:f2:b6:f6:8b:b1:4b:26:e8:83:f9:95:7f:7b:16:e6:
         a6:fd:95:8c:0e:be:35:88:76:8c:9a:8d:88:a2:9c:1b:92:66:
         82:33:70:8b:df:69:68:d2:d0:94:9a:23:6a:9b:d8:c8:ac:e8:
         bc:79:54:76:44:0b:87:05:cc:04:69:0c:58:74:4e:2b:ad:58:
         8b:be:31:01:f5:89:a2:d4:73:c1:b6:32:0b:52:1c:4c:11:0e:
         bd:90:cb:c2:fb:99:3a:4e:5d:c5:9b:70:89:e0:9e:d9:a0:5c:
         ed:6d:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org