Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/2x7sC5_QYtkE6hYQjqTtILfgftw.roa
File:                     2x7sC5_QYtkE6hYQjqTtILfgftw.roa (raw, json)
Hash identifier:          FtR0XGRXm28yK6VosQ2TWdrSB8jfqaqCEgILCve4FIA=
Subject key identifier:   DB:1E:EC:0B:9F:D0:62:D9:04:EA:16:10:8E:A4:ED:20:B7:E0:7E:DC
Certificate issuer:       /CN=9e0bba6d2e11171335417caa758189f0cf47a444
Certificate serial:       01876B87A1A25801032C7AF50447AE368FE6
Authority key identifier: 9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/2x7sC5_QYtkE6hYQjqTtILfgftw.roa
Signing time:             Mon 10 Apr 2023 14:17:43 +0000
ROA not before:           Mon 10 Apr 2023 14:17:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        146.19.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6b:87:a1:a2:58:01:03:2c:7a:f5:04:47:ae:36:8f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0bba6d2e11171335417caa758189f0cf47a444
        Validity
            Not Before: Apr 10 14:17:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db1eec0b9fd062d904ea16108ea4ed20b7e07edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:54:b1:a3:4e:cc:ff:7b:01:ac:a8:91:47:
                    dc:00:0e:aa:c7:b0:18:52:5e:74:eb:dc:ca:a7:ba:
                    d4:c3:87:b9:26:71:a0:be:bf:03:c8:13:85:97:cc:
                    86:e6:61:0f:c9:50:10:16:f9:d9:04:ad:15:82:45:
                    01:9f:2c:63:49:7d:82:f4:fb:19:de:5a:57:fb:e3:
                    61:fb:db:3e:89:30:65:c9:ff:a1:a4:75:dc:a4:00:
                    e0:e8:51:c6:28:c7:c4:d3:21:37:55:6c:66:89:09:
                    36:fe:81:b0:df:c4:9d:b7:e1:30:83:de:5f:d6:fe:
                    d9:36:85:fa:d6:a8:51:4a:e6:7d:e2:27:7b:ca:15:
                    63:0b:1f:29:51:98:e4:76:31:6d:bd:79:b9:f7:e8:
                    27:3c:70:09:0a:7a:db:3b:8a:96:76:80:66:0d:f6:
                    4b:ea:8c:46:ab:1e:e6:b7:c9:6c:83:b6:45:ef:a6:
                    64:d1:97:9c:67:79:5c:09:80:38:67:0b:2d:b7:70:
                    c1:91:a8:58:a1:43:af:ad:3d:32:49:59:c6:fc:5d:
                    61:23:cf:32:e1:f4:52:eb:57:11:c3:4a:df:50:15:
                    6c:8f:6a:96:0e:c7:dd:18:84:87:c9:57:57:29:86:
                    a8:53:12:e5:33:b7:dc:3f:7f:cb:d8:97:a2:c7:f3:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1E:EC:0B:9F:D0:62:D9:04:EA:16:10:8E:A4:ED:20:B7:E0:7E:DC
            X509v3 Authority Key Identifier:
                keyid:9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/2x7sC5_QYtkE6hYQjqTtILfgftw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:eb:7f:14:e3:e1:a8:d9:82:55:20:94:a1:64:ff:3d:99:f5:
         71:f3:40:82:83:80:f8:63:0d:03:aa:65:e9:fc:21:3b:0b:a5:
         24:2c:3f:85:f3:13:f6:92:ed:e8:b5:6f:43:7f:b8:f8:a8:46:
         ea:b0:20:78:08:56:3e:59:39:83:91:a2:bc:3c:86:db:91:f4:
         3d:2a:9c:43:3b:72:68:ff:ad:9a:30:79:62:4f:83:e0:59:d0:
         90:c1:53:62:4e:f8:91:f5:0b:5f:ba:eb:61:e5:9d:e9:f1:4e:
         32:8b:ca:50:bc:21:c0:cf:c3:79:43:29:ef:b0:f3:42:e1:a6:
         12:06:cd:41:be:e0:e2:c2:a1:3d:78:5e:60:f4:e6:2c:20:09:
         2e:29:68:0b:f5:0c:13:ab:5e:3a:de:83:96:81:34:4c:96:d1:
         a0:8b:cf:1d:91:03:3d:19:0e:02:cb:3c:20:06:0d:4f:a4:56:
         ed:cb:9b:f2:70:b1:cd:df:08:88:93:8b:ba:ec:93:d7:06:94:
         71:f9:97:d9:3d:0e:3f:de:bb:db:f5:c4:ff:99:9b:6a:26:59:
         ff:65:82:2b:17:b4:4f:49:f0:96:e8:77:fd:1f:57:45:24:d2:
         26:ce:8a:66:5f:a6:cd:6f:8a:de:3e:68:0d:9e:7c:71:3e:77:
         6b:7f:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:32 2024 by rpki-client on console-ams.rpki-client.org