Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/qMy6uLUNIgaSHhxAR0FdTdljdPs.roa
File:                     qMy6uLUNIgaSHhxAR0FdTdljdPs.roa (raw, json)
Hash identifier:          tx/SPjXeg3KoXDoAUxmYsfiLSAPRD8kyK+g76ZmMDEA=
Subject key identifier:   A8:CC:BA:B8:B5:0D:22:06:92:1E:1C:40:47:41:5D:4D:D9:63:74:FB
Certificate issuer:       /CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
Certificate serial:       A9769A
Authority key identifier: 1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/qMy6uLUNIgaSHhxAR0FdTdljdPs.roa
Signing time:             Sat 01 Jan 2022 12:01:47 +0000
ROA not before:           Sat 01 Jan 2022 12:01:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        62.204.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11105946 (0xa9769a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
        Validity
            Not Before: Jan  1 12:01:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a8ccbab8b50d2206921e1c4047415d4dd96374fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:0c:4a:e7:77:d9:bf:04:3f:6a:9f:ad:e6:
                    8f:d9:91:52:94:60:61:05:30:f9:88:9c:8f:c6:89:
                    88:ed:1e:d6:17:7c:17:27:cf:91:ec:3f:09:bc:9a:
                    d4:2e:5d:f1:17:2f:d2:02:a1:ea:88:8b:2f:27:c8:
                    89:23:08:8a:77:b4:0a:44:a9:91:38:5b:24:06:fa:
                    8b:ef:fa:a0:1e:fb:2a:bf:3e:f4:88:21:71:64:ab:
                    ed:d5:c4:4d:06:5f:50:35:6d:6d:e7:29:f5:e1:09:
                    4c:fa:d7:34:b1:31:52:17:47:07:5a:04:0c:89:2d:
                    91:10:e7:74:ba:6f:ee:05:64:32:1b:5d:07:f1:10:
                    0a:6e:8a:36:6a:cb:ab:0b:74:76:15:c7:bb:4c:58:
                    94:b1:bf:94:88:0d:d8:85:d7:ee:af:cc:2f:4b:67:
                    dd:60:ae:05:b7:a9:02:fa:da:3f:5c:c0:6d:4a:89:
                    40:8f:97:96:4a:3d:0a:77:d8:58:f5:6b:fd:78:c6:
                    2d:03:53:6f:8d:b9:85:a5:4a:d4:a7:74:24:6a:6f:
                    06:34:91:48:a3:d7:8f:76:56:dc:b7:c4:b4:aa:63:
                    ea:75:74:37:73:79:53:bc:23:23:85:9c:b0:a8:46:
                    a2:ba:28:d0:b0:48:15:98:96:a4:a0:1f:41:99:a4:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CC:BA:B8:B5:0D:22:06:92:1E:1C:40:47:41:5D:4D:D9:63:74:FB
            X509v3 Authority Key Identifier:
                keyid:1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/qMy6uLUNIgaSHhxAR0FdTdljdPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/G4EruP9r0FaJ36e9UyK7mpjO5xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:92:b2:7b:7e:5b:14:fd:be:41:c7:6b:52:1a:25:a2:7b:
         09:a7:7c:26:c1:7e:89:81:3d:6f:10:4c:07:4d:5d:27:f6:34:
         35:ea:c2:2e:e7:78:f0:b1:9b:49:a9:e0:e3:0d:6f:bc:e2:a3:
         a4:91:c8:58:f4:51:b9:cc:65:fd:2d:ef:b9:1b:84:6e:ef:2a:
         09:39:f7:25:8f:f0:39:b0:f9:3c:c0:d7:21:6f:ce:6a:90:93:
         51:77:9b:52:e7:e3:63:fc:e9:e2:c2:ab:77:81:c4:38:4f:e1:
         19:d8:74:89:59:48:86:eb:22:5e:ab:79:ed:b0:c7:c4:45:47:
         86:dc:a3:e8:5e:f7:d2:23:17:98:75:a6:84:dd:77:d7:1e:07:
         30:93:49:88:8a:b3:0a:4a:85:ca:1f:e8:4b:88:03:2d:87:bf:
         d5:75:71:60:60:1c:30:f0:c8:ed:ce:71:89:80:75:72:81:d5:
         f2:8e:2c:0f:5f:72:44:9b:d2:3f:57:e1:1b:c4:22:b8:55:b1:
         e4:9e:0e:0e:73:65:71:47:d2:38:20:0c:bc:cd:b5:6b:55:e6:
         e7:86:0d:63:30:d9:21:64:a6:db:a8:f6:26:b7:c8:66:6c:8e:
         a7:72:f6:4d:f1:54:4f:2f:1a:32:db:22:be:67:d8:32:48:24:
         83:91:cd:6b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKl2mjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjgxMmJiOGZmNmJkMDU2ODlkZmE3YmQ1MzIyYmI5YTk4Y2VlNzE1MB4XDTIyMDEw
MTEyMDE0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYThjY2JhYjhiNTBk
MjIwNjkyMWUxYzQwNDc0MTVkNGRkOTYzNzRmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANJ+DErnd9m/BD9qn63mj9mRUpRgYQUw+Yicj8aJiO0e1hd8
FyfPkew/Cbya1C5d8Rcv0gKh6oiLLyfIiSMIine0CkSpkThbJAb6i+/6oB77Kr8+
9IghcWSr7dXETQZfUDVtbecp9eEJTPrXNLExUhdHB1oEDIktkRDndLpv7gVkMhtd
B/EQCm6KNmrLqwt0dhXHu0xYlLG/lIgN2IXX7q/ML0tn3WCuBbepAvraP1zAbUqJ
QI+Xlko9CnfYWPVr/XjGLQNTb425haVK1Kd0JGpvBjSRSKPXj3ZW3LfEtKpj6nV0
N3N5U7wjI4WcsKhGoroo0LBIFZiWpKAfQZmkd3cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSozLq4tQ0iBpIeHEBHQV1N2WN0+zAfBgNVHSMEGDAWgBQbgSu4/2vQVonf
p71TIruamM7nFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0c0RXJ1UDlyMEZhSjM2ZTlVeUs3bXBqTzV4VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvZTZhNTI0LTA2NzQtNDQyNi04MjExLTBkYjJlZmYzNjljZC8x
L3FNeTZ1TFVOSWdhU0hoeEFSMEZkVGRsamRQcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
ZTZhNTI0LTA2NzQtNDQyNi04MjExLTBkYjJlZmYzNjljZC8xL0c0RXJ1UDlyMEZh
SjM2ZTlVeUs3bXBqTzV4VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7MPDANBgkqhkiG9w0BAQsFAAOC
AQEAf2WSsnt+WxT9vkHHa1IaJaJ7Cad8JsF+iYE9bxBMB01dJ/Y0NerCLud48LGb
Sang4w1vvOKjpJHIWPRRucxl/S3vuRuEbu8qCTn3JY/wObD5PMDXIW/OapCTUXeb
UufjY/zp4sKrd4HEOE/hGdh0iVlIhusiXqt57bDHxEVHhtyj6F730iMXmHWmhN13
1x4HMJNJiIqzCkqFyh/oS4gDLYe/1XVxYGAcMPDI7c5xiYB1coHV8o4sD19yRJvS
P1fhG8QiuFWx5J4ODnNlcUfSOCAMvM21a1Xm54YNYzDZIWSm26j2JrfIZmyOp3L2
TfFUTy8aMtsivmfYMkgkg5HNaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org