Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/WGOlYUBRyVhplaWROHBWmh-hEUA.roa
File:                     WGOlYUBRyVhplaWROHBWmh-hEUA.roa (raw, json)
Hash identifier:          g3i1a5WPNiG92Gm7tSo8v7XcytZgjoh85I46CzXSEe4=
Subject key identifier:   58:63:A5:61:40:51:C9:58:69:95:A5:91:38:70:56:9A:1F:A1:11:40
Certificate issuer:       /CN=26de442b81e07acd9f56a194faa233040933caa2
Certificate serial:       01856F42A8F61C7E60B4A0096B38B9C70DA5
Authority key identifier: 26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/WGOlYUBRyVhplaWROHBWmh-hEUA.roa
Signing time:             Sun 01 Jan 2023 21:35:17 +0000
ROA not before:           Sun 01 Jan 2023 21:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52000
IP address blocks:        146.19.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:a8:f6:1c:7e:60:b4:a0:09:6b:38:b9:c7:0d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26de442b81e07acd9f56a194faa233040933caa2
        Validity
            Not Before: Jan  1 21:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5863a5614051c9586995a5913870569a1fa11140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c2:6b:16:c5:18:b5:b8:b6:9f:1e:ac:f3:fa:
                    79:68:ad:0e:5b:95:16:e2:ab:d5:1e:2e:8c:4a:f7:
                    cb:ed:4e:a2:6a:54:a1:cc:51:3c:91:48:aa:d2:78:
                    f7:d5:da:73:66:c2:f3:29:1d:b4:ec:fe:e2:ca:11:
                    d3:e5:a9:63:21:ff:14:49:59:cd:ec:d5:99:36:4c:
                    5b:27:0b:35:66:09:12:ab:36:58:d2:2a:a1:78:13:
                    81:89:03:29:39:1e:2b:95:34:43:1c:ff:8e:43:98:
                    ef:39:1a:e0:9e:e2:1c:03:ec:61:8f:db:8c:3c:47:
                    77:80:10:44:0b:7d:0a:a5:d2:62:94:4f:0e:13:61:
                    cf:a1:9b:bd:af:b6:70:3c:ee:69:f6:ae:db:f9:c1:
                    0a:a6:de:68:f6:4e:bc:a0:07:30:08:61:53:be:07:
                    b8:9f:f5:4a:e7:4c:a8:d7:8b:f5:11:da:1b:93:bc:
                    00:3b:36:08:3b:b1:8f:4f:07:aa:ca:2a:5a:da:2e:
                    9e:eb:f0:22:ce:b3:03:19:36:a0:fc:56:03:7b:e9:
                    0f:26:15:dd:34:4a:fb:2f:30:42:a9:65:2c:8f:11:
                    2d:dc:44:e1:dd:02:a0:15:8e:36:d8:dc:e5:60:de:
                    61:be:83:b1:82:61:ec:6e:3f:89:fc:4b:d5:0c:9c:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:A5:61:40:51:C9:58:69:95:A5:91:38:70:56:9A:1F:A1:11:40
            X509v3 Authority Key Identifier:
                keyid:26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/WGOlYUBRyVhplaWROHBWmh-hEUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:66:1b:2a:9e:65:19:96:cd:b7:9b:80:de:fc:57:34:00:b9:
         11:37:75:69:2b:d9:f9:4b:77:7c:a2:75:91:97:3c:66:8a:4a:
         ae:53:30:36:bc:fb:0f:0c:ea:f5:52:7f:c2:9d:48:8d:1d:2e:
         60:df:87:57:54:07:3f:f6:d7:68:c3:81:90:7e:42:77:c8:89:
         3e:3a:1c:62:29:cf:62:10:8e:b4:5e:d9:a1:96:d1:1f:d6:3e:
         aa:f2:bd:5e:49:f9:08:35:33:39:a4:8f:92:c8:a9:75:8f:b3:
         fa:24:bc:ce:ae:2d:05:c7:1c:81:ff:df:fe:fe:90:2c:93:e4:
         c6:98:0e:56:e8:b4:23:90:10:f2:82:f2:13:0f:5b:da:80:35:
         e1:8b:ba:26:ed:be:76:cf:eb:a1:c2:1c:88:be:e1:3e:e1:cd:
         63:d5:fb:0a:67:eb:f7:09:89:9b:7c:76:e8:9b:bf:42:67:64:
         4b:6b:f1:af:91:4c:ca:8a:b3:7f:a7:91:40:54:a1:e5:17:b4:
         c5:00:15:d8:7b:ca:c8:d8:90:1c:62:25:77:10:46:44:ae:d1:
         3c:6c:c2:17:c5:49:2a:b0:13:1e:38:42:6d:16:88:e4:0f:16:
         bb:bf:7d:bc:ca:a1:fe:62:a1:f7:7e:7c:45:31:2f:95:4b:47:
         58:cb:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:13 2024 by rpki-client on console-ams.rpki-client.org