Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/cobKmcWPiKPAsZP00KPzWEugUNI.roa
File:                     cobKmcWPiKPAsZP00KPzWEugUNI.roa (raw, json)
Hash identifier:          DCvQbMOzCHXjqBEAvOKz1z6TiwEETrgWOjxlmhMiK5M=
Subject key identifier:   72:86:CA:99:C5:8F:88:A3:C0:B1:93:F4:D0:A3:F3:58:4B:A0:50:D2
Certificate issuer:       /CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
Certificate serial:       01856BDCB50BAF6258778ECD3A763DB201C3
Authority key identifier: DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/cobKmcWPiKPAsZP00KPzWEugUNI.roa
Signing time:             Sun 01 Jan 2023 05:45:04 +0000
ROA not before:           Sun 01 Jan 2023 05:45:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        146.19.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:b5:0b:af:62:58:77:8e:cd:3a:76:3d:b2:01:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def0e2026cad3e0c265fd6c81ff580d8104dee90
        Validity
            Not Before: Jan  1 05:45:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7286ca99c58f88a3c0b193f4d0a3f3584ba050d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:b6:40:ed:27:00:56:4e:8c:ff:32:26:af:
                    88:68:50:33:7f:28:c4:99:d9:01:ba:0e:2e:d5:f0:
                    40:da:8e:f1:89:f4:bc:cb:25:7d:c0:73:9b:95:57:
                    16:8a:d0:d7:dc:68:13:f8:59:1b:60:2e:bb:ee:47:
                    eb:c7:bd:8e:e5:9e:b4:db:c1:f1:ba:55:9e:3b:e9:
                    77:8b:8b:c5:ed:4d:78:3a:fc:9b:4c:3b:d7:f1:5b:
                    07:90:8c:17:40:ba:f1:01:a2:d0:29:2d:29:09:fc:
                    57:63:16:4c:35:a9:a1:bf:3e:e9:83:59:b7:f2:d7:
                    f1:86:97:a1:51:17:56:6c:39:76:52:df:d3:2a:ed:
                    bf:7a:46:d4:ec:74:b1:a6:2c:67:75:ba:82:d9:d7:
                    b6:55:5a:f4:35:f4:64:90:6f:2e:26:50:65:8e:2f:
                    f8:c8:69:42:b5:a0:0d:35:aa:35:e6:e4:1c:e1:62:
                    17:b0:22:2e:56:02:ac:ef:46:9a:45:be:b4:98:82:
                    ba:8b:33:61:f2:d6:91:f0:c2:4c:de:18:18:81:67:
                    2c:87:37:90:07:85:80:49:35:58:d1:ab:35:4f:eb:
                    0a:60:96:cb:3c:9a:77:15:8f:2a:c7:64:f4:2e:7d:
                    c7:04:74:cd:9b:24:1a:bf:79:1d:89:b2:4f:3a:76:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:86:CA:99:C5:8F:88:A3:C0:B1:93:F4:D0:A3:F3:58:4B:A0:50:D2
            X509v3 Authority Key Identifier:
                keyid:DE:F0:E2:02:6C:AD:3E:0C:26:5F:D6:C8:1F:F5:80:D8:10:4D:EE:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vDiAmytPgwmX9bIH_WA2BBN7pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/cobKmcWPiKPAsZP00KPzWEugUNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63297b-80e9-44d7-91c1-3189bb117fc6/1/3vDiAmytPgwmX9bIH_WA2BBN7pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:df:54:3f:08:b5:4d:cf:36:fa:80:b0:12:23:df:35:00:
         b0:0c:78:81:4f:a9:2f:78:ba:b7:a6:fe:e1:86:6e:19:f3:eb:
         08:dd:a9:de:ba:fe:38:45:9b:bf:cb:fb:dd:3b:27:00:fd:ec:
         dd:77:d8:aa:6c:19:19:e2:5a:76:a3:d4:48:c3:b0:ab:bf:56:
         71:ae:f2:ee:61:17:11:5f:c8:a5:4f:33:7b:41:df:d6:b6:a8:
         fb:40:34:28:23:54:5b:fb:6c:9f:35:4d:18:80:a6:54:b0:d2:
         5c:d5:ab:26:31:86:1f:56:80:51:5d:c1:eb:6a:f3:6a:18:4c:
         0b:77:a4:36:1c:74:17:b6:bc:41:ad:af:8c:d0:7a:70:3b:5e:
         a3:32:be:52:aa:0f:4f:37:0c:ae:c2:9b:8f:5f:98:d5:37:25:
         e5:b4:5b:75:2c:bd:25:7b:5e:b6:8b:f3:52:33:99:4d:58:2f:
         f6:8c:cf:1f:90:c8:b2:30:b3:7e:42:6b:6e:53:eb:6e:29:8e:
         26:38:7f:63:a6:6d:2c:a2:f5:6a:27:77:d8:ba:60:b9:91:e4:
         3f:78:ae:ca:70:8b:ee:8f:89:4b:5d:bd:4e:07:fe:44:8e:40:
         a8:79:e2:89:55:00:f7:15:48:12:6f:ec:88:44:52:c9:05:3f:
         c6:da:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:04 2024 by rpki-client on console-fra.rpki-client.org