Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/bC6T8wV40t_GG_ChIjL1WUHuKN0.roa
File:                     bC6T8wV40t_GG_ChIjL1WUHuKN0.roa (raw, json)
Hash identifier:          +kJeByVr6iSU9WfeKvjfw3aoGJk+OasfizoPoqIgdMA=
Subject key identifier:   6C:2E:93:F3:05:78:D2:DF:C6:1B:F0:A1:22:32:F5:59:41:EE:28:DD
Certificate issuer:       /CN=eb81f2566177790fad880d610e37cdd209847207
Certificate serial:       01856DEF7A735EDCE700E3C0A7BA99AB26D6
Authority key identifier: EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/bC6T8wV40t_GG_ChIjL1WUHuKN0.roa
Signing time:             Sun 01 Jan 2023 15:24:49 +0000
ROA not before:           Sun 01 Jan 2023 15:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47285
IP address blocks:        2a10:ab00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ef:7a:73:5e:dc:e7:00:e3:c0:a7:ba:99:ab:26:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb81f2566177790fad880d610e37cdd209847207
        Validity
            Not Before: Jan  1 15:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c2e93f30578d2dfc61bf0a12232f55941ee28dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:bc:74:d3:39:fb:45:56:f7:62:f0:45:40:
                    82:82:14:94:39:c4:17:9c:85:c3:d8:82:c9:48:9d:
                    2d:fc:f8:0a:d4:86:13:02:ce:b0:97:6c:a0:b2:7e:
                    4a:bb:ee:d5:72:cd:a8:3a:55:48:4b:7d:b4:14:e6:
                    4c:0b:f4:c9:a8:4c:55:56:b1:fb:d2:3d:4f:90:16:
                    01:b3:48:dd:1d:1c:cf:e3:21:8c:54:d0:72:83:8f:
                    39:94:26:7e:c9:af:de:77:d7:03:4b:1b:a3:a2:17:
                    0f:d9:27:78:31:97:e3:23:27:d5:18:79:dc:ef:7a:
                    4c:1a:d6:49:bd:ed:71:6d:83:5d:69:2f:0c:74:02:
                    00:8f:84:03:e0:e4:e1:4d:46:73:d3:9d:e6:c4:35:
                    0b:23:ac:21:eb:73:e3:7f:8a:1c:a5:34:51:e9:8a:
                    40:5d:4b:9a:34:7a:3b:5b:42:62:bd:4e:8c:78:2e:
                    a0:92:38:2c:9b:5d:1c:a9:91:ec:2d:4b:2b:f2:2c:
                    95:23:fc:a2:4c:40:4f:68:61:1f:cd:de:90:34:2c:
                    6e:59:14:a3:34:ad:cd:83:e2:b5:b0:b4:91:d0:5b:
                    5a:fe:82:55:23:57:1f:51:30:2d:bc:88:d6:4c:ad:
                    89:15:b5:f8:70:bc:d0:58:21:84:8f:8b:61:09:70:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2E:93:F3:05:78:D2:DF:C6:1B:F0:A1:22:32:F5:59:41:EE:28:DD
            X509v3 Authority Key Identifier:
                keyid:EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/bC6T8wV40t_GG_ChIjL1WUHuKN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ab00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:92:c4:91:af:dd:62:66:61:60:fb:b5:07:0b:6e:70:9a:
         9f:68:cc:4d:f4:b8:56:47:8a:a0:ca:63:f8:01:8f:23:f1:67:
         1c:dd:79:dd:a4:5b:14:08:58:d7:19:22:73:88:39:7e:bd:ce:
         de:62:00:ac:b7:90:74:9d:08:b5:b0:6c:f3:8f:f1:6b:01:04:
         a7:8d:78:18:d4:91:d7:ef:53:a2:2c:d0:a9:1f:3c:09:25:96:
         4c:6a:e8:c1:5c:44:9d:f9:55:e2:aa:03:d2:25:a5:90:19:77:
         48:ae:89:6e:ad:b1:1d:ed:fb:38:f7:24:73:69:09:a0:1f:f4:
         36:8f:2b:68:32:4c:f3:92:b4:ca:cf:9b:bc:83:95:77:41:98:
         bc:e8:41:37:8e:19:6e:1d:83:63:9b:ae:4b:b6:06:1f:76:6e:
         8c:48:a8:a5:d7:c6:1f:9b:9c:bb:27:ca:f9:42:b1:b6:98:21:
         5a:46:d2:ef:8d:b9:12:ad:e7:25:5b:9e:07:e2:62:57:6d:01:
         27:2e:be:c5:c0:c9:45:a4:f6:36:c8:7d:71:ff:f7:8c:3d:f7:
         5c:ca:b4:7f:0c:b5:c7:c3:b8:2b:0b:68:85:2d:29:54:4f:45:
         27:67:05:48:bf:f6:9d:a5:17:67:e5:33:d8:6d:23:97:9d:3e:
         58:22:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 14:50:09 2023 by rpki-client on console-fra.rpki-client.org