Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/LsgL7hSpsOiOS2nhqLKJ-MMIby4.roa
File:                     LsgL7hSpsOiOS2nhqLKJ-MMIby4.roa (raw, json)
Hash identifier:          tCNC30sP/GPL/qD2ea4QVW5hRgr5TUmkLOSjFaGdT2k=
Subject key identifier:   2E:C8:0B:EE:14:A9:B0:E8:8E:4B:69:E1:A8:B2:89:F8:C3:08:6F:2E
Certificate issuer:       /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial:       01092DCE
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/LsgL7hSpsOiOS2nhqLKJ-MMIby4.roa
Signing time:             Mon 07 Mar 2022 17:38:55 +0000
ROA not before:           Mon 07 Mar 2022 17:38:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59253
IP address blocks:        146.19.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17378766 (0x1092dce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
        Validity
            Not Before: Mar  7 17:38:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ec80bee14a9b0e88e4b69e1a8b289f8c3086f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:e2:23:e0:9d:08:a5:f1:c6:3a:ed:a5:1d:
                    20:3d:7c:25:16:2f:ab:08:f2:75:ce:44:87:1c:7d:
                    dd:2a:40:e5:4e:77:84:71:fc:11:07:ca:c1:14:0d:
                    f8:6d:77:0b:74:52:c1:b6:4c:08:4d:9f:b2:12:45:
                    3f:87:65:c8:e5:c6:36:5e:77:c6:06:b5:12:bb:68:
                    b8:55:97:10:b3:8c:a2:b5:2e:9e:83:79:0f:22:a7:
                    94:39:9f:d3:08:a9:38:78:06:70:44:6b:7c:9c:4f:
                    6e:b4:4d:9e:4a:5d:99:1d:90:9c:69:83:b3:39:e0:
                    bc:89:ef:d1:8b:d3:4e:65:3c:c2:be:c7:20:f1:96:
                    16:9f:a8:5b:03:43:a3:ad:e2:50:f4:e4:97:cb:d5:
                    92:48:7a:90:ba:88:b1:57:a2:91:14:1f:aa:da:dc:
                    af:13:73:86:00:83:c2:64:fd:1c:f8:ae:64:cc:08:
                    35:9a:f0:43:a6:f0:72:cd:7a:d6:74:3b:97:29:dc:
                    c8:bb:19:30:46:b1:36:50:d1:fa:11:1b:da:cc:de:
                    48:f7:fd:7a:8d:0c:d6:cd:fa:00:26:d2:d7:e4:3d:
                    1a:51:4f:8f:a2:f0:14:1f:a5:5b:c8:1c:42:cf:92:
                    bc:85:91:32:6c:69:4a:b2:a0:9d:54:32:bc:09:19:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C8:0B:EE:14:A9:B0:E8:8E:4B:69:E1:A8:B2:89:F8:C3:08:6F:2E
            X509v3 Authority Key Identifier:
                keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/LsgL7hSpsOiOS2nhqLKJ-MMIby4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:53:2a:54:ac:58:a4:93:ba:10:af:ce:00:8b:6b:5e:55:84:
         bb:e5:80:4e:95:e3:36:bd:8f:af:1a:63:d7:52:fe:4e:91:3b:
         ee:7e:f1:c8:16:78:53:10:15:1d:97:37:f5:cb:08:4d:27:c5:
         0e:1d:a2:5d:c0:90:07:53:b3:09:05:4f:ec:6c:e2:fb:5e:78:
         ec:b6:45:22:bc:20:1b:df:17:31:ce:2a:5c:bf:d1:33:46:16:
         bf:0c:9a:14:03:94:8a:74:d2:13:ea:6c:ea:18:c9:ac:7d:73:
         8e:0a:4b:1e:23:4e:12:ae:78:60:8e:97:6b:5c:52:32:f0:3c:
         45:81:47:41:f8:6c:06:39:b5:93:3a:aa:4d:48:ff:6c:d4:f1:
         d4:93:16:06:89:ef:73:c8:f5:76:a6:ed:28:97:d2:20:06:39:
         d9:db:eb:50:20:64:7c:74:05:f0:5c:4f:d6:f9:46:29:5c:22:
         8a:4f:05:ea:bc:dd:5a:19:88:fb:45:0d:21:06:55:f4:db:64:
         94:16:5a:6f:62:c4:92:72:58:27:7e:d0:86:be:3b:ac:b7:76:
         ba:b8:a4:e7:db:5e:65:d3:7c:8d:37:20:ee:7b:07:b6:fe:54:
         48:f8:be:6d:67:94:cf:be:eb:43:36:7b:11:0e:cf:c4:01:70:
         69:e8:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:30 2024 by rpki-client on console-ams.rpki-client.org