Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/6pVoQyop_LVU9TtO1x3wXJ075OA.roa
File:                     6pVoQyop_LVU9TtO1x3wXJ075OA.roa (raw, json)
Hash identifier:          EnI6HbIgOmFUuFUrnjDC2oXbajEJL8G+ZpfxC2DuB/s=
Subject key identifier:   EA:95:68:43:2A:29:FC:B5:54:F5:3B:4E:D7:1D:F0:5C:9D:3B:E4:E0
Certificate issuer:       /CN=3c3f7e1e18646583c874b5affb0751aeca409c48
Certificate serial:       6359
Authority key identifier: 3C:3F:7E:1E:18:64:65:83:C8:74:B5:AF:FB:07:51:AE:CA:40:9C:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PD9-HhhkZYPIdLWv-wdRrspAnEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/6pVoQyop_LVU9TtO1x3wXJ075OA.roa
Signing time:             Mon 13 Jun 2022 07:42:02 +0000
ROA not before:           Mon 13 Jun 2022 07:42:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204581
IP address blocks:        45.136.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25433 (0x6359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c3f7e1e18646583c874b5affb0751aeca409c48
        Validity
            Not Before: Jun 13 07:42:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea9568432a29fcb554f53b4ed71df05c9d3be4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:9c:c4:70:6b:46:a9:a6:46:f0:d7:b8:97:
                    5e:6c:20:8a:a9:65:99:4d:09:30:28:8b:74:58:c1:
                    0e:c6:de:45:14:38:9a:02:fa:2b:d2:cf:99:7e:ab:
                    c3:80:d5:5f:d6:c1:ca:af:e3:70:4b:55:dd:86:d2:
                    d0:bd:07:8f:63:6e:e8:87:e2:05:6d:c7:ce:b7:3e:
                    5b:d6:a9:0f:a8:a4:87:5d:3d:37:a8:02:fa:c2:38:
                    c7:bb:7b:d4:93:d6:f2:b7:3d:4a:ab:93:c7:cb:f5:
                    af:df:ec:85:8c:2b:14:da:d3:2e:1c:e9:0c:3f:0f:
                    40:dc:9a:41:59:e5:26:85:11:90:20:9b:62:b9:1e:
                    5c:67:a2:ae:9c:a3:13:b3:df:1e:cc:28:68:0d:eb:
                    e4:ca:fb:b8:64:07:30:69:3e:d6:19:81:90:19:c0:
                    46:ef:e6:47:67:ab:93:2f:18:8b:a6:39:0d:1b:cf:
                    5e:ff:f9:33:9c:a5:4c:48:54:2a:46:97:12:2e:89:
                    15:35:2a:76:b7:ec:af:36:8f:95:47:8f:16:b8:d9:
                    ba:0e:5e:b8:e8:cf:b5:24:8a:11:e2:6d:0c:ae:f9:
                    6c:3b:e8:11:ee:10:3b:49:f4:15:05:0c:76:5b:9f:
                    81:2c:fb:fa:bc:97:48:49:d7:78:26:4a:e0:75:51:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:68:43:2A:29:FC:B5:54:F5:3B:4E:D7:1D:F0:5C:9D:3B:E4:E0
            X509v3 Authority Key Identifier:
                keyid:3C:3F:7E:1E:18:64:65:83:C8:74:B5:AF:FB:07:51:AE:CA:40:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9-HhhkZYPIdLWv-wdRrspAnEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/6pVoQyop_LVU9TtO1x3wXJ075OA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/926fd1-86fe-4c1f-bc0c-9a808f1a70b4/1/PD9-HhhkZYPIdLWv-wdRrspAnEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:e5:4d:68:df:0d:9a:dd:98:f0:16:b6:bf:eb:f6:6d:97:
         8d:2d:a9:e9:bf:9d:24:07:4e:d1:6d:ac:11:c5:97:ce:0b:2e:
         a7:60:28:97:f9:7c:29:6d:cd:38:51:d6:79:89:76:8a:a2:5f:
         92:93:85:01:d4:c6:ea:67:1d:8a:93:0d:e1:d9:a9:f8:95:6f:
         93:f2:28:a5:a8:ac:7e:57:1b:a8:c4:c3:18:bc:1e:6f:34:90:
         7f:a2:d2:a0:0c:a4:93:1f:0d:9c:91:61:c7:d8:7a:45:3c:5a:
         e3:cb:2b:64:63:0b:d6:8f:4f:b4:2a:7d:4b:35:e3:ab:b1:bf:
         1d:a2:de:20:28:4b:00:28:43:a1:e5:44:aa:d7:a8:70:a3:c0:
         fc:1b:30:cc:5c:94:04:f6:8e:51:72:86:33:0a:64:e6:39:f9:
         d5:54:34:80:4b:49:80:cc:64:a9:47:6b:4f:96:9d:93:eb:9e:
         84:86:a8:61:db:88:26:99:8b:fb:b4:d2:6d:4e:a3:0c:79:a0:
         66:85:4e:5f:b2:3d:48:5c:e2:9f:72:76:7e:16:27:1a:0e:93:
         1c:c6:6b:0f:d7:6c:51:c3:61:87:94:62:be:34:3d:c3:aa:90:
         6e:e5:dc:f6:61:8d:f3:0a:6f:9f:af:e3:59:e4:05:76:0e:e7:
         a4:79:68:71
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICY1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM2Mz
ZjdlMWUxODY0NjU4M2M4NzRiNWFmZmIwNzUxYWVjYTQwOWM0ODAeFw0yMjA2MTMw
NzQyMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVhOTU2ODQzMmEyOWZj
YjU1NGY1M2I0ZWQ3MWRmMDVjOWQzYmU0ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUaZzEcGtGqaZG8Ne4l15sIIqpZZlNCTAoi3RYwQ7G3kUUOJoC
+ivSz5l+q8OA1V/Wwcqv43BLVd2G0tC9B49jbuiH4gVtx863PlvWqQ+opIddPTeo
AvrCOMe7e9ST1vK3PUqrk8fL9a/f7IWMKxTa0y4c6Qw/D0DcmkFZ5SaFEZAgm2K5
Hlxnoq6coxOz3x7MKGgN6+TK+7hkBzBpPtYZgZAZwEbv5kdnq5MvGIumOQ0bz17/
+TOcpUxIVCpGlxIuiRU1Kna37K82j5VHjxa42boOXrjoz7UkihHibQyu+Ww76BHu
EDtJ9BUFDHZbn4Es+/q8l0hJ13gmSuB1UTBxAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU6pVoQyop/LVU9TtO1x3wXJ075OAwHwYDVR0jBBgwFoAUPD9+HhhkZYPIdLWv
+wdRrspAnEgwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9Q
RDktSGhoa1pZUElkTFd2LXdkUnJzcEFuRWcuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzFmLzkyNmZkMS04NmZlLTRjMWYtYmMwYy05YTgwOGYxYTcwYjQvMS82
cFZvUXlvcF9MVlU5VHRPMXgzd1hKMDc1T0Eucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzky
NmZkMS04NmZlLTRjMWYtYmMwYy05YTgwOGYxYTcwYjQvMS9QRDktSGhoa1pZUElk
TFd2LXdkUnJzcEFuRWcuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItiMAwDQYJKoZIhvcNAQELBQADggEB
AC1d5U1o3w2a3ZjwFra/6/Ztl40tqem/nSQHTtFtrBHFl84LLqdgKJf5fCltzThR
1nmJdoqiX5KThQHUxupnHYqTDeHZqfiVb5PyKKWorH5XG6jEwxi8Hm80kH+i0qAM
pJMfDZyRYcfYekU8WuPLK2RjC9aPT7QqfUs146uxvx2i3iAoSwAoQ6HlRKrXqHCj
wPwbMMxclAT2jlFyhjMKZOY5+dVUNIBLSYDMZKlHa0+WnZPrnoSGqGHbiCaZi/u0
0m1Oowx5oGaFTl+yPUhc4p9ydn4WJxoOkxzGaw/XbFHDYYeUYr40PcOqkG7l3PZh
jfMKb5+v41nkBXYO56R5aHE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:52 2024 by rpki-client on console-fra.rpki-client.org