Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/ebYrQbILH18xgM1j-g5pIrP2GHY.roa
File:                     ebYrQbILH18xgM1j-g5pIrP2GHY.roa (raw, json)
Hash identifier:          qaTPgZ/ncjaMvhI4uAhCmRH/DQX3jmij7TuxxWZl0YI=
Subject key identifier:   79:B6:2B:41:B2:0B:1F:5F:31:80:CD:63:FA:0E:69:22:B3:F6:18:76
Certificate issuer:       /CN=46a8cc61de20a90048831facae22fa370e576936
Certificate serial:       01882086B1F5EBDE47D524B7A5131E2C6C78
Authority key identifier: 46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/ebYrQbILH18xgM1j-g5pIrP2GHY.roa
Signing time:             Mon 15 May 2023 17:47:58 +0000
ROA not before:           Mon 15 May 2023 17:47:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        91.246.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:b1:f5:eb:de:47:d5:24:b7:a5:13:1e:2c:6c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46a8cc61de20a90048831facae22fa370e576936
        Validity
            Not Before: May 15 17:47:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79b62b41b20b1f5f3180cd63fa0e6922b3f61876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:98:0b:0a:90:81:03:b1:32:80:95:f2:fa:
                    b9:69:56:1f:ae:24:b5:f4:ec:ca:ed:8f:82:90:eb:
                    b3:bb:07:57:cd:1a:d6:91:d5:57:26:1b:a0:1e:8b:
                    1f:92:d8:dd:53:b4:0e:fa:55:25:4a:3d:50:c3:c2:
                    d9:dd:a9:14:ea:f7:c1:e6:54:28:a9:09:dd:80:af:
                    12:05:b2:39:6f:d2:95:c9:0b:51:89:b5:16:fb:d5:
                    c4:f3:db:11:c5:05:dd:82:72:20:2e:cd:e3:c0:bf:
                    db:c5:4d:65:01:43:53:5d:b6:4c:dd:af:ea:6f:e2:
                    13:95:d4:b3:73:0c:88:18:ac:3c:12:0f:90:e1:fc:
                    43:63:74:34:eb:56:39:c1:7a:98:70:a8:21:b3:0d:
                    2c:a8:60:02:c1:fa:65:73:60:fc:f1:e6:b8:6d:11:
                    f8:02:c1:51:a0:50:50:13:d3:42:55:1b:b2:fa:5d:
                    4c:a8:cd:9f:d8:3e:07:1a:a8:f0:97:a6:be:a8:9c:
                    3b:72:20:e1:06:e4:3d:d9:60:4b:d5:54:e6:21:9a:
                    a4:37:96:55:89:b3:75:ea:97:08:7d:34:5c:67:6b:
                    2c:f3:09:d5:49:6d:35:c6:d6:1d:22:32:e3:6c:04:
                    c5:01:fd:bc:7b:fe:59:f2:64:de:e3:c9:a6:2c:15:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B6:2B:41:B2:0B:1F:5F:31:80:CD:63:FA:0E:69:22:B3:F6:18:76
            X509v3 Authority Key Identifier:
                keyid:46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/ebYrQbILH18xgM1j-g5pIrP2GHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:bf:28:eb:55:b8:40:09:97:5d:3b:c7:1e:a1:47:4c:db:70:
         9c:8f:fa:c9:fa:35:06:c8:92:5e:93:a7:bf:45:e8:ec:5b:60:
         59:38:7b:56:4b:cf:c0:0d:e7:01:06:d3:b4:7b:be:22:4e:09:
         b2:f8:d6:96:67:25:a5:95:b0:d5:b2:7e:71:6d:07:4c:41:18:
         88:57:5e:91:ac:d1:b2:2b:34:83:16:ae:32:80:d8:a8:66:a6:
         65:6b:92:e4:f6:d9:d1:18:09:f9:cc:8e:19:f5:07:b9:c7:6d:
         48:4b:8b:e7:bf:55:27:76:5d:74:5f:71:96:4d:eb:ae:8f:ae:
         1b:c7:e5:81:bc:4e:14:eb:5d:17:e8:ec:87:bf:60:ca:bf:30:
         c5:39:98:4a:ef:3f:2d:00:6f:c6:76:a9:e7:96:de:c1:9e:72:
         ba:43:d1:c9:84:69:9f:34:40:d7:3f:18:f4:6f:c5:b5:24:7e:
         fc:2a:89:7e:ae:ce:6f:e2:3f:18:d6:98:84:5e:be:98:09:13:
         6f:fe:de:b0:19:6d:4b:64:0f:1b:1e:ee:6b:98:bf:ac:e6:de:
         65:1e:25:91:17:ed:1d:de:9a:27:de:70:4e:e0:f3:40:70:57:
         2f:be:53:8e:ef:19:45:dd:e1:9e:ac:c1:61:a0:b6:56:da:a0:
         42:00:4c:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrH1695H1SS3pRMeLGx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YThjYzYxZGUyMGE5MDA0ODgzMWZhY2FlMjJmYTM3MGU1
NzY5MzYwHhcNMjMwNTE1MTc0NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWI2MmI0MWIyMGIxZjVmMzE4MGNkNjNmYTBlNjkyMmIzZjYxODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpSYCwqQgQOxMoCV8vq5aVYfriS1
9OzK7Y+CkOuzuwdXzRrWkdVXJhugHosfktjdU7QO+lUlSj1Qw8LZ3akU6vfB5lQo
qQndgK8SBbI5b9KVyQtRibUW+9XE89sRxQXdgnIgLs3jwL/bxU1lAUNTXbZM3a/q
b+ITldSzcwyIGKw8Eg+Q4fxDY3Q061Y5wXqYcKghsw0sqGACwfplc2D88ea4bRH4
AsFRoFBQE9NCVRuy+l1MqM2f2D4HGqjwl6a+qJw7ciDhBuQ92WBL1VTmIZqkN5ZV
ibN16pcIfTRcZ2ss8wnVSW01xtYdIjLjbATFAf28e/5Z8mTe48mmLBVtbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHm2K0GyCx9fMYDNY/oOaSKz9hh2MB8GA1UdIwQY
MBaAFEaozGHeIKkASIMfrK4i+jcOV2k2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFqTVlkNGdxUUJJZ3gtc3JpTDZOdzVYYVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hNzVmNjAtMDU4ZS00M2M3LTljYTUt
NzFkNDcyNzQ4YjUzLzEvZWJZclFiSUxIMTh4Z00xai1nNXBJclAyR0hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hNzVmNjAtMDU4ZS00M2M3LTljYTUtNzFkNDcyNzQ4YjUz
LzEvUnFqTVlkNGdxUUJJZ3gtc3JpTDZOdzVYYVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y/MA0G
CSqGSIb3DQEBCwUAA4IBAQC2vyjrVbhACZddO8ceoUdM23Ccj/rJ+jUGyJJek6e/
RejsW2BZOHtWS8/ADecBBtO0e74iTgmy+NaWZyWllbDVsn5xbQdMQRiIV16RrNGy
KzSDFq4ygNioZqZla5Lk9tnRGAn5zI4Z9Qe5x21IS4vnv1Undl10X3GWTeuuj64b
x+WBvE4U610X6OyHv2DKvzDFOZhK7z8tAG/Gdqnnlt7BnnK6Q9HJhGmfNEDXPxj0
b8W1JH78Kol+rs5v4j8Y1piEXr6YCRNv/t6wGW1LZA8bHu5rmL+s5t5lHiWRF+0d
3pon3nBO4PNAcFcvvlOO7xlF3eGerMFhoLZW2qBCAExv
-----END CERTIFICATE-----
Generated at Thu Nov 2 14:44:48 2023 by rpki-client on console-fra.rpki-client.org