Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/Inc608iuvocsLfRwuMFXkjJqie8.roa
File:                     Inc608iuvocsLfRwuMFXkjJqie8.roa (raw, json)
Hash identifier:          tXbgWvTbDJJz8XSXY0khNdlZMn/CEiuC/BQv/eCs/ew=
Subject key identifier:   22:77:3A:D3:C8:AE:BE:87:2C:2D:F4:70:B8:C1:57:92:32:6A:89:EF
Certificate issuer:       /CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
Certificate serial:       03A5F6EE
Authority key identifier: FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/Inc608iuvocsLfRwuMFXkjJqie8.roa
Signing time:             Sat 01 Jan 2022 01:50:49 +0000
ROA not before:           Sat 01 Jan 2022 01:50:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62267
IP address blocks:        185.41.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61208302 (0x3a5f6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
        Validity
            Not Before: Jan  1 01:50:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22773ad3c8aebe872c2df470b8c15792326a89ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:45:db:54:71:b1:e8:f1:42:a7:27:11:a2:
                    9a:54:91:4b:6e:9d:75:e9:53:ca:ba:81:d7:e2:aa:
                    81:af:16:ec:db:2d:8b:9f:29:b2:16:8e:97:29:88:
                    2f:43:6d:cb:6c:80:c7:e8:06:e6:06:b7:1c:60:2c:
                    15:f4:ba:a0:36:49:80:4a:a2:b3:41:6d:87:15:48:
                    8b:12:42:14:8e:0d:8b:be:33:a8:23:bd:9e:4a:45:
                    59:5a:0f:f7:fe:61:c9:a1:22:b6:c7:63:c3:b1:8d:
                    82:14:e5:d3:56:6b:18:ce:2d:28:c6:77:f7:4f:b4:
                    cb:39:aa:44:c5:43:88:fe:4d:a8:7e:07:0c:50:8a:
                    3f:3d:bf:51:85:90:52:d5:61:f8:6a:15:23:9d:39:
                    8f:dc:17:a3:20:29:49:44:0b:94:ca:77:bc:18:f5:
                    96:40:b6:67:6c:0c:e8:57:46:a6:35:7c:f2:e6:bf:
                    a5:54:cc:b0:01:ce:2a:6f:f6:00:41:8a:86:d3:a6:
                    1f:a7:54:12:88:96:23:94:b8:01:bc:2a:37:df:9e:
                    dc:30:73:56:28:8e:99:d5:ba:f5:c2:fb:ea:f7:14:
                    06:86:78:db:c3:5b:42:67:1f:a3:ef:43:7c:cc:fa:
                    7b:ff:d8:8f:76:01:f8:e4:37:ba:10:a7:f3:d0:30:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:3A:D3:C8:AE:BE:87:2C:2D:F4:70:B8:C1:57:92:32:6A:89:EF
            X509v3 Authority Key Identifier:
                keyid:FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/Inc608iuvocsLfRwuMFXkjJqie8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.41.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:76:25:bd:db:55:a2:e8:e2:77:96:60:d0:8c:f2:32:b8:20:
         74:5b:12:09:ac:c7:33:f5:09:f9:4f:b0:e6:4e:ce:85:55:a9:
         52:4a:68:44:d7:95:17:e5:12:53:30:80:78:c0:8d:10:58:05:
         cf:6f:35:43:06:eb:a1:9b:99:75:b4:8e:18:41:7a:86:54:26:
         53:28:a9:ee:78:30:6c:88:b2:1c:69:e2:df:32:da:9b:de:04:
         38:7d:b1:11:24:85:77:60:18:4c:5f:16:53:e9:90:7a:ae:a6:
         ce:10:71:f7:ce:60:ae:49:56:7d:2c:6d:9b:cd:4b:d8:20:b1:
         5d:4a:20:d1:ee:a8:8d:9b:63:fb:24:79:ba:ae:c1:a1:c5:03:
         0e:16:a2:7a:9e:47:d8:a9:e4:b6:c9:52:a9:8c:bb:f0:5e:69:
         44:06:d5:6c:16:ff:af:0c:cc:8d:d4:5f:59:b0:82:47:21:78:
         93:dc:cb:be:4b:4e:69:60:1d:d4:8c:65:84:3b:78:34:ad:e6:
         f8:c1:e1:55:93:59:48:b5:89:2b:ea:38:d6:ec:5c:3c:72:ea:
         80:b7:e6:21:a9:c5:11:53:62:46:72:24:88:ed:94:54:20:f1:
         ff:54:3a:29:3d:80:04:f4:aa:66:45:42:b3:15:03:3e:5d:3f:
         f5:fb:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:55 2024 by rpki-client on console-fra.rpki-client.org