Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/KV9FrtTByxk0ApaBlpjUPeXliC4.roa
File:                     KV9FrtTByxk0ApaBlpjUPeXliC4.roa (raw, json)
Hash identifier:          holk0mG0eLuCN62CwjG/GghpNeMS+9+Og1fKwWSAHh4=
Subject key identifier:   29:5F:45:AE:D4:C1:CB:19:34:02:96:81:96:98:D4:3D:E5:E5:88:2E
Certificate issuer:       /CN=26de442b81e07acd9f56a194faa233040933caa2
Certificate serial:       0182A63655F94C9E18996797B24A368033E3
Authority key identifier: 26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/KV9FrtTByxk0ApaBlpjUPeXliC4.roa
Signing time:             Tue 16 Aug 2022 10:32:34 +0000
ROA not before:           Tue 16 Aug 2022 10:32:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49981
IP address blocks:        146.19.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a6:36:55:f9:4c:9e:18:99:67:97:b2:4a:36:80:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26de442b81e07acd9f56a194faa233040933caa2
        Validity
            Not Before: Aug 16 10:32:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=295f45aed4c1cb19340296819698d43de5e5882e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:5f:37:3a:1a:a6:1d:0d:1f:fe:e5:df:76:
                    40:2b:6f:9c:e9:b7:67:4f:e5:55:0c:68:4a:8f:85:
                    36:0a:56:eb:c5:8b:9a:9e:4f:e6:45:7e:2c:89:49:
                    39:61:6e:52:3d:17:e1:92:62:46:5b:38:fb:ab:37:
                    b0:81:36:f6:41:28:74:9a:78:07:45:a3:b1:af:9f:
                    f2:74:3e:a3:45:24:ae:29:60:2b:bb:7d:30:83:cc:
                    40:a3:20:3e:23:89:57:89:46:19:0e:1b:18:3e:40:
                    38:bf:75:28:a2:91:7b:f1:3d:bc:02:9a:92:05:50:
                    89:5f:7e:c9:3b:e7:e0:99:e0:2a:d7:fd:b8:15:c2:
                    f4:20:6b:79:5c:76:dc:7c:8c:66:05:c1:aa:57:9e:
                    59:3e:49:6c:8d:45:a0:06:24:3c:83:de:77:97:73:
                    fc:be:48:58:f6:0e:b3:07:47:fc:a1:45:c1:e6:f0:
                    10:30:35:fc:fc:d6:cc:da:a6:12:61:71:51:1c:22:
                    ee:19:df:34:91:be:c7:00:46:e9:69:ab:e4:33:22:
                    d4:37:b8:d2:b0:e8:4c:43:37:29:dd:66:dd:6c:6b:
                    23:d2:9c:0a:26:ea:8e:da:5f:96:a5:23:f1:5d:33:
                    0e:f6:24:b8:d9:fc:49:f0:d0:eb:32:d5:77:21:ae:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5F:45:AE:D4:C1:CB:19:34:02:96:81:96:98:D4:3D:E5:E5:88:2E
            X509v3 Authority Key Identifier:
                keyid:26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/KV9FrtTByxk0ApaBlpjUPeXliC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:a9:3b:38:6c:6f:0e:e7:12:7d:48:ac:dd:74:7c:31:04:
         21:57:fb:59:3e:03:8d:44:dc:b0:38:56:f4:f7:a2:70:6f:af:
         5f:54:70:bd:37:f2:fe:e7:6e:2e:69:19:36:44:58:96:e6:c5:
         33:6a:19:52:60:a1:b0:16:95:66:03:29:a5:80:24:13:76:5f:
         16:70:ae:2c:d2:3a:6b:51:85:7f:03:b9:58:7f:29:6f:6b:6f:
         26:22:42:bf:51:3e:95:bc:e1:e7:16:26:0f:f2:4e:59:92:fa:
         3e:54:c6:8d:96:c3:a0:2d:5f:40:04:0a:9d:0c:3d:95:0f:f0:
         e1:48:67:98:5d:92:30:84:d3:31:e6:dc:e5:80:01:8e:3f:0f:
         62:02:25:a0:53:d1:ff:af:e0:3d:eb:cb:b5:37:31:15:51:74:
         d6:50:b8:da:e0:7a:4a:ee:7e:bc:40:16:75:29:d6:79:f5:1d:
         5c:5a:0d:68:72:c3:96:f2:45:02:79:5b:dc:31:08:3c:26:dc:
         a4:80:31:a0:b5:4a:9a:00:7d:3c:25:82:84:12:8b:9d:11:f5:
         c2:c6:ca:5b:2f:87:ee:a5:73:2e:bf:d3:02:a5:04:5d:64:4a:
         41:c7:55:ea:34:30:5a:ad:39:01:a7:1d:e3:bc:51:e7:96:f6:
         f1:5d:79:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKmNlX5TJ4YmWeXsko2gDPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZGU0NDJiODFlMDdhY2Q5ZjU2YTE5NGZhYTIzMzA0MDkz
M2NhYTIwHhcNMjIwODE2MTAzMjM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTVmNDVhZWQ0YzFjYjE5MzQwMjk2ODE5Njk4ZDQzZGU1ZTU4ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVBfNzoaph0NH/7l33ZAK2+c6bdn
T+VVDGhKj4U2ClbrxYuank/mRX4siUk5YW5SPRfhkmJGWzj7qzewgTb2QSh0mngH
RaOxr5/ydD6jRSSuKWAru30wg8xAoyA+I4lXiUYZDhsYPkA4v3UoopF78T28ApqS
BVCJX37JO+fgmeAq1/24FcL0IGt5XHbcfIxmBcGqV55ZPklsjUWgBiQ8g953l3P8
vkhY9g6zB0f8oUXB5vAQMDX8/NbM2qYSYXFRHCLuGd80kb7HAEbpaavkMyLUN7jS
sOhMQzcp3WbdbGsj0pwKJuqO2l+WpSPxXTMO9iS42fxJ8NDrMtV3Ia7xdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClfRa7UwcsZNAKWgZaY1D3l5YguMB8GA1UdIwQY
MBaAFCbeRCuB4HrNn1ahlPqiMwQJM8qiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnQ1RUs0SGdlczJmVnFHVS1xSXpCQWt6eXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kNWI2MmQtYzJlZi00OTk3LTg0MmYt
YzFkMTBjZjA4NDg4LzEvS1Y5RnJ0VEJ5eGswQXBhQmxwalVQZVhsaUM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kNWI2MmQtYzJlZi00OTk3LTg0MmYtYzFkMTBjZjA4NDg4
LzEvSnQ1RUs0SGdlczJmVnFHVS1xSXpCQWt6eXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOMMA0G
CSqGSIb3DQEBCwUAA4IBAQAyHqk7OGxvDucSfUis3XR8MQQhV/tZPgONRNywOFb0
96Jwb69fVHC9N/L+524uaRk2RFiW5sUzahlSYKGwFpVmAymlgCQTdl8WcK4s0jpr
UYV/A7lYfylva28mIkK/UT6VvOHnFiYP8k5Zkvo+VMaNlsOgLV9ABAqdDD2VD/Dh
SGeYXZIwhNMx5tzlgAGOPw9iAiWgU9H/r+A968u1NzEVUXTWULja4HpK7n68QBZ1
KdZ59R1cWg1ocsOW8kUCeVvcMQg8JtykgDGgtUqaAH08JYKEEoudEfXCxspbL4fu
pXMuv9MCpQRdZEpBx1XqNDBarTkBpx3jvFHnlvbxXXkg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org