Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa
File:                     Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa (raw, json)
Hash identifier:          3N2FzzZLMvKCCWtev3oL6qDcRvyGQZ5rUzGhpWLJetQ=
Subject key identifier:   23:2F:0F:DC:A9:60:14:92:EE:3B:5C:C1:FB:81:FF:08:77:77:FB:8C
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       0102DCA0
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa
Signing time:             Wed 08 Jun 2022 05:34:02 +0000
ROA not before:           Wed 08 Jun 2022 05:34:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        212.46.37.0/24 maxlen: 24
                          45.155.64.0/23 maxlen: 24
                          45.155.66.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16964768 (0x102dca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Jun  8 05:34:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=232f0fdca9601492ee3b5cc1fb81ff087777fb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:99:a9:77:7b:43:6d:5f:3c:47:a1:01:60:
                    27:fc:63:e8:3c:19:6d:04:a6:d3:29:51:67:f2:c3:
                    6b:a9:c0:70:ba:37:c8:1a:11:e5:0e:d9:c7:09:e5:
                    a9:32:7a:38:a1:fb:1d:1c:68:46:af:cf:ff:8e:1d:
                    75:c0:ac:95:2f:6d:45:4f:77:57:7f:02:4c:8d:b1:
                    c6:fb:cc:be:2f:99:9b:d8:66:0d:92:4a:70:af:5d:
                    f0:8e:62:c3:95:e7:3a:ac:03:a8:d9:1f:19:d3:46:
                    97:af:b1:9c:1f:ea:ab:bd:02:99:78:95:e9:f2:b2:
                    df:c9:36:d8:a9:d1:d9:cb:db:4a:d9:fa:5a:bd:2b:
                    95:1d:94:e4:de:66:14:9e:9e:e0:75:70:c2:59:a4:
                    fd:10:8d:26:81:b5:fb:45:38:a4:92:5c:eb:74:2b:
                    4e:da:21:7b:31:8e:c7:e6:51:81:d5:22:b2:a0:32:
                    69:6c:8a:85:7c:21:91:36:94:66:ce:56:36:24:43:
                    c7:fd:bb:91:4a:6a:b5:75:2f:ee:a6:06:38:a0:6d:
                    2f:44:19:5a:cd:6c:60:89:8d:6f:a8:0d:b6:25:a0:
                    da:61:b7:b6:21:25:fb:51:f2:38:82:25:ca:48:6f:
                    20:56:78:ff:d8:09:00:ff:7b:f3:f2:db:e4:bf:7a:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:0F:DC:A9:60:14:92:EE:3B:5C:C1:FB:81:FF:08:77:77:FB:8C
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Iy8P3KlgFJLuO1zB-4H_CHd3-4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.64.0/22
                  212.46.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:0b:b8:69:52:53:9b:57:db:59:c9:7b:42:08:86:15:1b:
         6e:8c:01:cb:e8:74:17:05:8c:ec:7a:95:b9:29:a7:e1:7c:7c:
         b8:49:63:2e:3e:4b:a1:ad:ec:a5:d1:85:76:f9:1f:94:54:4b:
         b5:0d:19:bf:a1:cc:36:87:74:ba:59:37:d3:12:36:dc:21:05:
         0e:14:c2:17:8a:73:9f:51:d4:ac:4a:2b:18:b6:4a:6f:94:07:
         86:76:4e:45:28:21:5d:d8:ab:19:5a:49:27:25:27:3f:6c:18:
         a0:4b:a5:78:7f:3e:01:56:e2:7b:22:39:60:7d:93:a1:ad:c7:
         e7:92:47:6c:10:92:aa:ee:53:f5:02:44:49:2f:b0:d5:c9:9e:
         da:16:60:e9:47:b0:e6:4e:f1:a8:f6:4c:63:a0:57:ec:4c:bf:
         e4:8a:f3:ed:80:b6:46:28:af:da:ea:34:91:7d:33:a9:16:45:
         28:9e:69:d8:3f:2c:05:9c:1d:44:97:7a:aa:8b:b5:58:b8:4d:
         2c:50:f2:2f:bc:28:bb:95:e6:79:c6:fa:e6:92:ff:d2:6c:58:
         31:2a:6a:24:6b:a3:ea:48:00:9b:18:35:28:74:fb:3e:f4:cc:
         da:b5:9e:c6:a8:71:7b:72:f2:98:41:21:d7:ac:92:9f:8a:da:
         4b:69:01:4f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAQLcoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YjE0NWE4YmRmMmJjYTE1MGYyNWVkNTRhMjc3YjhmNjUzZWZkYjNlMB4XDTIyMDYw
ODA1MzQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjMyZjBmZGNhOTYw
MTQ5MmVlM2I1Y2MxZmI4MWZmMDg3Nzc3ZmI4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL5Kmal3e0NtXzxHoQFgJ/xj6DwZbQSm0ylRZ/LDa6nAcLo3
yBoR5Q7ZxwnlqTJ6OKH7HRxoRq/P/44ddcCslS9tRU93V38CTI2xxvvMvi+Zm9hm
DZJKcK9d8I5iw5XnOqwDqNkfGdNGl6+xnB/qq70CmXiV6fKy38k22KnR2cvbStn6
Wr0rlR2U5N5mFJ6e4HVwwlmk/RCNJoG1+0U4pJJc63QrTtohezGOx+ZRgdUisqAy
aWyKhXwhkTaUZs5WNiRDx/27kUpqtXUv7qYGOKBtL0QZWs1sYImNb6gNtiWg2mG3
tiEl+1HyOIIlykhvIFZ4/9gJAP978/Lb5L96UmsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQjLw/cqWAUku47XMH7gf8Id3f7jDAfBgNVHSMEGDAWgBQrFFqL3yvKFQ8l
7VSid7j2U+/bPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0t4UmFpOThyeWhVUEplMVVvbmU0OWxQdjJ6NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjEvMGQ4YzhmLWZmMmMtNGRhOC1iNDQzLTMwNDBiZWQzY2NjZC8x
L0l5OFAzS2xnRkpMdU8xekItNEhfQ0hkMy00dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEv
MGQ4YzhmLWZmMmMtNGRhOC1iNDQzLTMwNDBiZWQzY2NjZC8xL0t4UmFpOThyeWhV
UEplMVVvbmU0OWxQdjJ6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi2bQAMEANQuJTANBgkqhkiG9w0B
AQsFAAOCAQEAGXoLuGlSU5tX21nJe0IIhhUbbowBy+h0FwWM7HqVuSmn4Xx8uElj
Lj5Loa3spdGFdvkflFRLtQ0Zv6HMNod0ulk30xI23CEFDhTCF4pzn1HUrEorGLZK
b5QHhnZORSghXdirGVpJJyUnP2wYoEuleH8+AVbieyI5YH2Toa3H55JHbBCSqu5T
9QJESS+w1cme2hZg6Uew5k7xqPZMY6BX7Ey/5Irz7YC2Riiv2uo0kX0zqRZFKJ5p
2D8sBZwdRJd6qou1WLhNLFDyL7wou5Xmecb65pL/0mxYMSpqJGuj6kgAmxg1KHT7
PvTM2rWexqhxe3LymEEh16ySn4raS2kBTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org