Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1f823f-6dfe-4a0c-b747-0d6df0144991/1/b6sQo4G2c1zrS30ea5EjzpjXJyU.roa
File:                     b6sQo4G2c1zrS30ea5EjzpjXJyU.roa (raw, json)
Hash identifier:          vu+o0poBG5eEfBGQRHtSjs5gg++MEDltnzySi6KZXac=
Subject key identifier:   6F:AB:10:A3:81:B6:73:5C:EB:4B:7D:1E:6B:91:23:CE:98:D7:27:25
Certificate issuer:       /CN=270ee5aa563fecceba86f389c88bd801037539cf
Certificate serial:       018739D778AEB00D58650B3EDD61B4B2790E
Authority key identifier: 27:0E:E5:AA:56:3F:EC:CE:BA:86:F3:89:C8:8B:D8:01:03:75:39:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jw7lqlY_7M66hvOJyIvYAQN1Oc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1f823f-6dfe-4a0c-b747-0d6df0144991/1/b6sQo4G2c1zrS30ea5EjzpjXJyU.roa
Signing time:             Fri 31 Mar 2023 22:43:54 +0000
ROA not before:           Fri 31 Mar 2023 22:43:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15969
IP address blocks:        45.86.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:39:d7:78:ae:b0:0d:58:65:0b:3e:dd:61:b4:b2:79:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270ee5aa563fecceba86f389c88bd801037539cf
        Validity
            Not Before: Mar 31 22:43:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fab10a381b6735ceb4b7d1e6b9123ce98d72725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:a5:16:6b:8e:da:3d:4c:28:eb:90:a0:96:
                    e1:b0:a9:bb:4f:c0:07:71:79:34:8a:45:b3:1d:5e:
                    7b:91:31:a1:e8:59:cf:60:e2:79:de:85:09:f0:df:
                    05:e7:48:cb:6e:e5:1e:63:76:21:85:0f:dc:a7:c6:
                    91:b8:4e:25:df:18:ea:0e:2c:f5:3c:2e:99:cf:6b:
                    ee:46:0f:03:e3:76:08:6b:64:1e:43:27:4d:92:d6:
                    86:6a:c7:27:4a:c5:7a:55:5d:bc:81:77:1f:d0:25:
                    0e:5a:51:6f:76:93:b7:be:3f:e3:07:03:64:7f:f0:
                    4a:82:2c:1b:d8:5c:c5:66:c0:e2:88:77:45:a3:3c:
                    b3:4a:91:83:7d:4d:95:c5:39:89:8f:13:e0:47:28:
                    21:f9:cc:85:a5:ed:76:b0:c8:a5:fa:04:a7:20:ad:
                    f2:d4:9f:19:d7:2f:c3:f6:63:bb:70:16:d4:df:63:
                    d6:c2:3c:ff:b6:67:6f:79:93:77:d0:4d:e8:74:d5:
                    f1:ab:db:0c:b7:79:f3:ae:f4:d4:c7:58:b5:07:a7:
                    96:19:c6:1a:f5:e9:6d:71:bb:d4:1f:1c:05:0b:be:
                    a3:f3:1e:0d:e6:0b:ff:7c:08:ed:58:5e:67:3a:cc:
                    1f:dd:67:74:ce:00:02:13:e5:01:d4:48:f7:e1:6d:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AB:10:A3:81:B6:73:5C:EB:4B:7D:1E:6B:91:23:CE:98:D7:27:25
            X509v3 Authority Key Identifier:
                keyid:27:0E:E5:AA:56:3F:EC:CE:BA:86:F3:89:C8:8B:D8:01:03:75:39:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw7lqlY_7M66hvOJyIvYAQN1Oc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1f823f-6dfe-4a0c-b747-0d6df0144991/1/b6sQo4G2c1zrS30ea5EjzpjXJyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1f823f-6dfe-4a0c-b747-0d6df0144991/1/Jw7lqlY_7M66hvOJyIvYAQN1Oc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:8f:b7:22:51:e1:87:b5:11:1d:92:92:8a:b3:ed:71:11:55:
         3d:f0:cb:e6:09:39:25:6f:c9:7c:ca:f6:13:1f:4e:61:de:1f:
         71:b5:bf:84:0d:8a:90:b9:e3:ab:be:0c:51:a3:07:01:1a:f0:
         86:dd:83:fb:c1:cb:b4:8b:9d:86:08:08:9a:39:d1:df:fb:8c:
         ba:7d:f1:e5:88:37:96:f6:c6:53:5e:78:66:1d:d0:e6:f7:0e:
         9c:aa:93:1b:15:62:49:96:d6:c2:b4:0c:59:80:d6:3a:b4:ab:
         3d:8c:bb:c3:73:2a:dd:8b:60:fc:09:f1:2c:a0:f2:6f:82:b0:
         db:6c:dc:3d:f0:25:93:73:be:07:7a:6f:c9:8d:3f:f4:71:61:
         39:66:08:61:cc:c7:5a:5f:70:12:2a:95:3e:6b:10:43:be:9f:
         14:e3:e7:4b:d1:bc:6f:8c:fd:9b:d1:47:8a:80:ce:a6:df:8a:
         ca:89:4e:3a:f3:cd:a7:ea:8b:f5:58:b5:c2:7f:4a:3b:8f:c1:
         4e:16:b9:d9:ff:8d:6b:a5:cb:2f:06:b5:c0:e8:cb:b4:b2:7b:
         0b:a3:a0:1e:23:89:50:4a:4c:cb:fd:30:1c:08:9a:42:65:5f:
         6a:5c:04:c4:03:32:c8:0f:db:6a:c6:83:95:c9:6a:3c:6c:12:
         b4:d7:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org