Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/o64vDKI8HMCQtq33FGN1z7u0fqM.roa
File:                     o64vDKI8HMCQtq33FGN1z7u0fqM.roa (raw, json)
Hash identifier:          mMkNmfysIjUn1CDsHkpCegQRQOuev4ebEcFQUYmeDbQ=
Subject key identifier:   A3:AE:2F:0C:A2:3C:1C:C0:90:B6:AD:F7:14:63:75:CF:BB:B4:7E:A3
Certificate issuer:       /CN=0672be0a174c6a9373c2509ba8fb146260b04430
Certificate serial:       79AE05
Authority key identifier: 06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/o64vDKI8HMCQtq33FGN1z7u0fqM.roa
Signing time:             Sat 26 Mar 2022 09:50:22 +0000
ROA not before:           Sat 26 Mar 2022 09:50:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6939
IP address blocks:        193.163.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7974405 (0x79ae05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0672be0a174c6a9373c2509ba8fb146260b04430
        Validity
            Not Before: Mar 26 09:50:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a3ae2f0ca23c1cc090b6adf7146375cfbbb47ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:83:85:26:d4:ac:d4:23:d1:b5:0f:56:f6:5a:
                    ad:05:be:67:52:03:56:24:1b:94:49:cc:69:55:85:
                    eb:af:2a:e3:70:32:11:28:c6:60:11:d7:e4:22:29:
                    46:77:df:30:f0:1c:95:c2:98:76:7e:a7:d3:8d:0c:
                    71:e6:5c:56:3d:d6:a4:e3:1a:77:5e:40:75:5d:71:
                    c6:57:6f:70:27:e1:28:1d:05:ab:e2:96:85:14:6c:
                    6b:26:f8:0a:31:e2:11:59:9a:ec:28:8b:0a:f5:c7:
                    51:c3:d9:f3:b5:6e:ff:3d:1b:88:2a:f8:cb:b8:32:
                    2b:1e:bd:77:39:6a:37:b4:39:e6:4d:bf:95:a6:1f:
                    98:0a:ea:94:74:88:e3:29:79:ff:9f:0f:a4:ae:64:
                    2a:b6:65:34:f9:e2:db:24:df:fa:46:58:ed:54:6b:
                    02:1b:c8:8d:aa:5a:96:12:ac:e1:5f:39:aa:fd:d5:
                    45:03:dc:6a:f3:dc:e0:08:7f:dc:9d:ec:80:24:63:
                    d0:a5:56:6e:9f:9a:f1:60:35:be:54:66:45:7a:cf:
                    95:2c:54:60:4f:b9:8d:f8:60:1c:b6:53:a4:3d:9c:
                    23:60:5c:d3:e5:94:72:f8:eb:73:71:1a:b4:e6:4e:
                    5f:15:31:00:24:c6:6b:28:34:10:c1:e9:40:12:6d:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:2F:0C:A2:3C:1C:C0:90:B6:AD:F7:14:63:75:CF:BB:B4:7E:A3
            X509v3 Authority Key Identifier:
                keyid:06:72:BE:0A:17:4C:6A:93:73:C2:50:9B:A8:FB:14:62:60:B0:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnK-ChdMapNzwlCbqPsUYmCwRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/o64vDKI8HMCQtq33FGN1z7u0fqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3882d1-7264-4cf5-8679-cb98a7b4ddf6/1/BnK-ChdMapNzwlCbqPsUYmCwRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:7b:13:3f:38:1d:66:06:45:d1:33:58:31:91:c6:81:a2:
         67:67:1e:5a:ed:3c:a1:c6:46:92:00:70:38:62:80:bf:9b:9a:
         cc:9b:14:d0:fd:77:38:7b:bd:6f:b2:8f:75:f8:61:e8:ed:e2:
         07:44:1f:bf:94:c0:76:85:b8:83:72:53:e0:ae:d2:bd:24:40:
         55:22:37:57:ce:43:81:75:4b:d9:a3:09:17:81:0d:f9:45:91:
         52:2c:6b:56:54:47:66:f5:67:4a:41:b6:1e:4f:7b:45:64:c2:
         1f:86:2d:a3:02:fd:55:d6:8f:fd:2e:29:5c:84:1d:5b:f2:79:
         5b:74:90:b9:14:bd:26:76:a4:15:2f:eb:cc:c7:c8:3e:84:af:
         b2:84:60:dc:08:cd:7c:9d:b8:c9:7b:23:bd:7a:8c:03:b1:14:
         c5:72:fb:92:0a:ac:cf:3b:37:c1:85:89:2b:cd:e6:65:96:92:
         af:d3:2a:01:7a:27:39:93:6b:ae:6d:fb:67:38:43:79:c5:41:
         3e:56:6b:aa:aa:de:2d:57:7a:47:ad:e9:94:ba:21:ba:db:cb:
         db:eb:48:ee:bd:ea:0a:f8:16:ee:b0:ac:f2:4b:23:a3:fa:cd:
         47:4e:b8:40:00:93:68:12:f6:c0:bd:48:c7:9c:9d:77:ce:70:
         16:25:ae:1e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDea4FMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA2
NzJiZTBhMTc0YzZhOTM3M2MyNTA5YmE4ZmIxNDYyNjBiMDQ0MzAwHhcNMjIwMzI2
MDk1MDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhM2FlMmYwY2EyM2Mx
Y2MwOTBiNmFkZjcxNDYzNzVjZmJiYjQ3ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA44OFJtSs1CPRtQ9W9lqtBb5nUgNWJBuUScxpVYXrryrjcDIR
KMZgEdfkIilGd98w8ByVwph2fqfTjQxx5lxWPdak4xp3XkB1XXHGV29wJ+EoHQWr
4paFFGxrJvgKMeIRWZrsKIsK9cdRw9nztW7/PRuIKvjLuDIrHr13OWo3tDnmTb+V
ph+YCuqUdIjjKXn/nw+krmQqtmU0+eLbJN/6RljtVGsCG8iNqlqWEqzhXzmq/dVF
A9xq89zgCH/cneyAJGPQpVZun5rxYDW+VGZFes+VLFRgT7mN+GActlOkPZwjYFzT
5ZRy+OtzcRq05k5fFTEAJMZrKDQQwelAEm0IswIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFKOuLwyiPBzAkLat9xRjdc+7tH6jMB8GA1UdIwQYMBaAFAZyvgoXTGqTc8JQ
m6j7FGJgsEQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Qm5LLUNoZE1hcE56d2xDYnFQc1VZbUN3UkRBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yMS8zODgyZDEtNzI2NC00Y2Y1LTg2NzktY2I5OGE3YjRkZGY2LzEv
bzY0dkRLSThITUNRdHEzM0ZHTjF6N3UwZnFNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8z
ODgyZDEtNzI2NC00Y2Y1LTg2NzktY2I5OGE3YjRkZGY2LzEvQm5LLUNoZE1hcE56
d2xDYnFQc1VZbUN3UkRBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMtMA0GCSqGSIb3DQEBCwUAA4IB
AQAX+nsTPzgdZgZF0TNYMZHGgaJnZx5a7TyhxkaSAHA4YoC/m5rMmxTQ/Xc4e71v
so91+GHo7eIHRB+/lMB2hbiDclPgrtK9JEBVIjdXzkOBdUvZowkXgQ35RZFSLGtW
VEdm9WdKQbYeT3tFZMIfhi2jAv1V1o/9LilchB1b8nlbdJC5FL0mdqQVL+vMx8g+
hK+yhGDcCM18nbjJeyO9eowDsRTFcvuSCqzPOzfBhYkrzeZllpKv0yoBeic5k2uu
bftnOEN5xUE+Vmuqqt4tV3pHremUuiG628vb60juveoK+BbusKzySyOj+s1HTrhA
AJNoEvbAvUjHnJ13znAWJa4e
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:50 2024 by rpki-client on console-ams.rpki-client.org