Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/FwjYu59IHrP1xjmjmN9SQelTdUI.roa
File:                     FwjYu59IHrP1xjmjmN9SQelTdUI.roa (raw, json)
Hash identifier:          SHA37VB59XxBBHafmsVB+ZcMkytFcgJUaCyzpBp/nww=
Subject key identifier:   17:08:D8:BB:9F:48:1E:B3:F5:C6:39:A3:98:DF:52:41:E9:53:75:42
Certificate issuer:       /CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Certificate serial:       018CC50016611CF52612B85FC6DC22ACC360
Authority key identifier: 75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/FwjYu59IHrP1xjmjmN9SQelTdUI.roa
Signing time:             Mon 01 Jan 2024 12:29:26 +0000
ROA not before:           Mon 01 Jan 2024 12:29:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12778
IP address blocks:        212.72.96.0/19 maxlen: 24
                          77.234.128.0/19 maxlen: 24
                          2a02:d68::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:16:61:1c:f5:26:12:b8:5f:c6:dc:22:ac:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
        Validity
            Not Before: Jan  1 12:29:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1708d8bb9f481eb3f5c639a398df5241e9537542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:cd:67:57:e9:e3:d1:89:5e:6a:e1:aa:64:
                    f6:9e:85:72:32:8e:e4:57:97:af:06:46:85:a1:6a:
                    0d:b0:28:c6:15:c8:61:eb:56:39:d9:a4:b1:59:c7:
                    8f:3c:37:72:6b:41:11:af:5e:68:06:fb:d2:f9:98:
                    e9:26:11:82:3c:94:8e:3d:9e:c2:07:a2:22:8e:c0:
                    7f:2b:e7:92:63:52:97:cf:2d:64:3f:32:c7:5f:94:
                    09:3d:5b:af:6f:4b:62:cf:3d:41:15:3e:44:ad:28:
                    44:4b:ac:dd:8b:1b:54:2c:02:28:34:f5:ee:5f:44:
                    dd:52:4e:1f:06:9a:dc:b0:9e:db:fb:3f:45:3e:1a:
                    1f:97:4d:0f:44:36:45:80:dd:0d:5c:98:83:6b:d7:
                    24:02:45:2e:8d:6a:39:74:35:51:6e:07:84:20:cf:
                    c9:e1:76:04:c8:d5:55:ad:d1:d6:a6:77:96:5d:0b:
                    92:6f:9a:c6:0a:14:11:1b:bf:d7:33:7c:06:91:8b:
                    a7:64:69:2c:bb:b7:54:39:32:d3:af:25:52:0a:d5:
                    9f:b3:02:90:eb:7d:52:02:a2:93:8d:ff:73:b7:d7:
                    a5:6c:cc:77:aa:4e:17:a1:58:ac:48:0c:fc:d7:31:
                    f8:2f:ba:f4:84:2c:44:a8:e7:b2:ab:26:26:8a:6b:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:08:D8:BB:9F:48:1E:B3:F5:C6:39:A3:98:DF:52:41:E9:53:75:42
            X509v3 Authority Key Identifier:
                keyid:75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/FwjYu59IHrP1xjmjmN9SQelTdUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.234.128.0/19
                  212.72.96.0/19
                IPv6:
                  2a02:d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:a1:d1:2a:ba:be:1e:d9:93:18:6d:12:b8:e8:a4:a0:27:
         ac:29:a5:b5:78:b3:fd:05:ca:bf:a1:06:0e:be:e1:f1:a4:89:
         99:20:d1:f3:cf:73:05:24:1f:a9:d1:1a:e4:1e:e5:62:5d:b6:
         74:a0:97:e5:a6:a2:a8:99:53:bd:5e:1e:3f:49:b4:8a:61:b9:
         f7:f0:e4:52:5a:27:eb:58:a9:fc:4f:d4:7c:96:be:22:e4:08:
         52:cb:c7:0d:71:52:a1:fe:9a:f4:19:4a:d4:2d:5b:b2:23:99:
         e6:db:44:79:2d:cf:24:12:41:cf:3c:1f:cc:f0:e6:6c:a0:07:
         8b:76:2b:e1:c5:6a:cf:14:ed:30:bf:7c:f0:17:50:42:b1:b3:
         0c:c3:37:53:14:be:97:30:69:98:d6:47:2e:cf:57:95:bd:0c:
         de:7f:08:42:b3:00:50:20:5f:a6:97:d0:12:c7:b5:dd:82:e9:
         d7:81:e4:85:58:c8:6b:29:3a:41:1f:d2:2b:d2:21:6b:52:b6:
         07:9b:82:10:64:94:04:ae:6b:3c:e2:0d:52:b8:bb:e5:da:23:
         82:08:55:9d:70:86:7b:8b:4c:1b:cb:a9:64:0a:62:34:2e:e2:
         20:d3:17:7a:df:bc:1a:4a:3e:32:f5:dd:a4:b2:c8:bc:6d:13:
         9a:d9:f5:04
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFABZhHPUmErhfxtwirMNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjgyODQ3ZjgzZGI4MjhlN2YwNGMyY2I1Y2ViNmQ4YzQy
MzdmYWIwHhcNMjQwMTAxMTIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzA4ZDhiYjlmNDgxZWIzZjVjNjM5YTM5OGRmNTI0MWU5NTM3NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY7NZ1fp49GJXmrhqmT2noVyMo7k
V5evBkaFoWoNsCjGFchh61Y52aSxWcePPDdya0ERr15oBvvS+ZjpJhGCPJSOPZ7C
B6IijsB/K+eSY1KXzy1kPzLHX5QJPVuvb0tizz1BFT5ErShES6zdixtULAIoNPXu
X0TdUk4fBprcsJ7b+z9FPhofl00PRDZFgN0NXJiDa9ckAkUujWo5dDVRbgeEIM/J
4XYEyNVVrdHWpneWXQuSb5rGChQRG7/XM3wGkYunZGksu7dUOTLTryVSCtWfswKQ
631SAqKTjf9zt9elbMx3qk4XoVisSAz81zH4L7r0hCxEqOeyqyYmimuPAQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBcI2LufSB6z9cY5o5jfUkHpU3VCMB8GA1UdIwQY
MBaAFHVoKEf4Pbgo5/BMLLXOttjEI3+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdnb1JfZzl1Q2puOEV3c3RjNjIyTVFqZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lOTBjNzktZmQxNC00YjVhLThkNjMt
NWNjNzQxMWM2YWRhLzEvRndqWXU1OUlIclAxeGptam1OOVNRZWxUZFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lOTBjNzktZmQxNC00YjVhLThkNjMtNWNjNzQxMWM2YWRh
LzEvZFdnb1JfZzl1Q2puOEV3c3RjNjIyTVFqZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFTeqAAwQF
1EhgMA0EAgACMAcDBQAqAg1oMA0GCSqGSIb3DQEBCwUAA4IBAQAP1KHRKrq+HtmT
GG0SuOikoCesKaW1eLP9Bcq/oQYOvuHxpImZINHzz3MFJB+p0RrkHuViXbZ0oJfl
pqKomVO9Xh4/SbSKYbn38ORSWifrWKn8T9R8lr4i5AhSy8cNcVKh/pr0GUrULVuy
I5nm20R5Lc8kEkHPPB/M8OZsoAeLdivhxWrPFO0wv3zwF1BCsbMMwzdTFL6XMGmY
1kcuz1eVvQzefwhCswBQIF+ml9ASx7XdgunXgeSFWMhrKTpBH9Ir0iFrUrYHm4IQ
ZJQErms84g1SuLvl2iOCCFWdcIZ7i0wby6lkCmI0LuIg0xd637waSj4y9d2kssi8
bROa2fUE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org