Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/hRCY4FbD4tG9MqafTelyK0JA9L8.roa
File:                     hRCY4FbD4tG9MqafTelyK0JA9L8.roa (raw, json)
Hash identifier:          RoTOdiFXQ8SiS3hXiI+QAhwsggq0EuJgXT75/VQvYP0=
Subject key identifier:   85:10:98:E0:56:C3:E2:D1:BD:32:A6:9F:4D:E9:72:2B:42:40:F4:BF
Certificate issuer:       /CN=adb9b628fd33093fa2ac0890ee1ce555cba82671
Certificate serial:       6D8E
Authority key identifier: AD:B9:B6:28:FD:33:09:3F:A2:AC:08:90:EE:1C:E5:55:CB:A8:26:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbm2KP0zCT-irAiQ7hzlVcuoJnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/hRCY4FbD4tG9MqafTelyK0JA9L8.roa
Signing time:             Mon 28 Feb 2022 15:08:19 +0000
ROA not before:           Mon 28 Feb 2022 15:08:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201814
IP address blocks:        185.225.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28046 (0x6d8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb9b628fd33093fa2ac0890ee1ce555cba82671
        Validity
            Not Before: Feb 28 15:08:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=851098e056c3e2d1bd32a69f4de9722b4240f4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:d5:35:70:ba:4c:99:4c:8e:8f:03:a1:aa:
                    be:5c:05:19:d7:d1:3e:be:24:f3:55:b4:a2:66:29:
                    66:3a:16:71:13:2f:cd:e2:c2:ec:ac:48:68:59:04:
                    57:d9:a3:8e:b1:ea:61:78:a8:a7:ca:f1:8a:e2:58:
                    8d:62:2a:90:f4:6d:35:fa:da:4a:00:1f:ba:e9:a5:
                    10:96:03:4d:f5:84:ec:3e:79:b5:98:b3:4e:e1:65:
                    cf:d3:8b:dd:f3:db:cb:d4:75:58:ff:82:ce:26:67:
                    b2:3d:50:73:e1:ef:cc:fe:98:71:bd:f2:3f:03:0a:
                    e5:1e:26:4b:e2:04:57:48:81:8e:60:70:63:b8:90:
                    a2:27:c4:29:28:f6:fa:ab:8f:6e:40:8e:91:d5:e2:
                    af:d1:8b:a1:96:aa:cf:06:55:9b:a7:21:3a:7c:eb:
                    0b:3d:49:cb:27:5c:8c:94:a7:dd:2d:e9:f2:ea:a5:
                    88:b5:23:2e:d8:a3:3a:69:f3:22:b4:b8:71:c2:95:
                    45:cc:3e:cc:37:5d:cb:67:95:e9:46:40:cb:21:a5:
                    7c:6d:64:8c:b5:f1:5e:95:a3:a0:07:5f:58:de:47:
                    d6:1a:3e:44:1d:b3:4b:5d:d6:b1:82:86:92:65:fa:
                    de:8e:fb:f9:05:30:0b:45:61:48:3e:a4:d2:4a:02:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:10:98:E0:56:C3:E2:D1:BD:32:A6:9F:4D:E9:72:2B:42:40:F4:BF
            X509v3 Authority Key Identifier:
                keyid:AD:B9:B6:28:FD:33:09:3F:A2:AC:08:90:EE:1C:E5:55:CB:A8:26:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbm2KP0zCT-irAiQ7hzlVcuoJnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/hRCY4FbD4tG9MqafTelyK0JA9L8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/rbm2KP0zCT-irAiQ7hzlVcuoJnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:18:5e:3a:3e:03:1b:41:76:2a:64:a4:03:e7:9b:ff:8a:52:
         00:39:74:d1:8d:e4:7f:ce:fa:93:71:fa:28:5e:a8:eb:ca:a7:
         72:34:c5:7e:6c:2f:59:b9:a5:c4:0f:79:f2:d2:7c:32:f7:ee:
         91:1a:90:77:a4:ed:ce:4e:a2:27:82:fe:84:c7:52:b2:78:7b:
         01:c7:82:8a:51:b6:2b:f7:8e:66:70:34:26:dd:12:76:76:f6:
         a3:27:28:75:37:eb:a3:f1:25:05:b6:ab:20:bf:99:3b:21:03:
         75:78:88:7c:40:3a:f3:4f:a0:a1:c9:d5:df:1e:28:cf:b8:38:
         69:94:95:7f:a0:66:6a:95:ce:b2:d5:eb:6a:28:1c:28:aa:59:
         3f:0d:20:67:67:49:a1:14:9e:ba:5a:88:07:3b:8b:15:3d:3b:
         bc:fe:2a:b3:ee:77:45:05:d0:11:85:bb:d0:85:10:8f:40:a5:
         d0:fa:b5:d2:89:53:8d:f4:0b:67:01:5a:af:b3:22:11:6f:98:
         cb:21:24:ba:e4:6b:79:a9:67:4f:2e:f8:5d:d7:61:aa:d2:b8:
         b7:a2:2d:21:3f:0d:dc:98:da:8c:ca:07:7b:99:89:2b:2c:31:
         f2:b6:f9:3f:bb:26:a0:13:c9:c9:f8:9b:75:9d:c9:b0:e6:32:
         d0:0e:6d:eb
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICbY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYWRi
OWI2MjhmZDMzMDkzZmEyYWMwODkwZWUxY2U1NTVjYmE4MjY3MTAeFw0yMjAyMjgx
NTA4MTlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg1MTA5OGUwNTZjM2Uy
ZDFiZDMyYTY5ZjRkZTk3MjJiNDI0MGY0YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNC9U1cLpMmUyOjwOhqr5cBRnX0T6+JPNVtKJmKWY6FnETL83i
wuysSGhZBFfZo46x6mF4qKfK8YriWI1iKpD0bTX62koAH7rppRCWA031hOw+ebWY
s07hZc/Ti93z28vUdVj/gs4mZ7I9UHPh78z+mHG98j8DCuUeJkviBFdIgY5gcGO4
kKInxCko9vqrj25AjpHV4q/Ri6GWqs8GVZunITp86ws9ScsnXIyUp90t6fLqpYi1
Iy7Yozpp8yK0uHHClUXMPsw3XctnlelGQMshpXxtZIy18V6Vo6AHX1jeR9YaPkQd
s0td1rGChpJl+t6O+/kFMAtFYUg+pNJKAimlAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUhRCY4FbD4tG9MqafTelyK0JA9L8wHwYDVR0jBBgwFoAUrbm2KP0zCT+irAiQ
7hzlVcuoJnEwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9y
Ym0yS1AwekNULWlyQWlRN2h6bFZjdW9KbkUuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzI0L2Q3NTIwNi0zYjBlLTQ1ZTYtYjBhYS0zN2Q0MWM1YjgxYmYvMS9o
UkNZNEZiRDR0RzlNcWFmVGVseUswSkE5TDgucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2Q3
NTIwNi0zYjBlLTQ1ZTYtYjBhYS0zN2Q0MWM1YjgxYmYvMS9yYm0yS1AwekNULWly
QWlRN2h6bFZjdW9KbkUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC54b8wDQYJKoZIhvcNAQELBQADggEB
AKAYXjo+AxtBdipkpAPnm/+KUgA5dNGN5H/O+pNx+iheqOvKp3I0xX5sL1m5pcQP
efLSfDL37pEakHek7c5OoieC/oTHUrJ4ewHHgopRtiv3jmZwNCbdEnZ29qMnKHU3
66PxJQW2qyC/mTshA3V4iHxAOvNPoKHJ1d8eKM+4OGmUlX+gZmqVzrLV62ooHCiq
WT8NIGdnSaEUnrpaiAc7ixU9O7z+KrPud0UF0BGFu9CFEI9ApdD6tdKJU430C2cB
Wq+zIhFvmMshJLrka3mpZ08u+F3XYarSuLeiLSE/DdyY2ozKB3uZiSssMfK2+T+7
JqATycn4m3WdybDmMtAObes=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:37 2024 by rpki-client on console-fra.rpki-client.org