Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/O4et6_f2zsea-iZOdBdw-DEdCrA.roa
File:                     O4et6_f2zsea-iZOdBdw-DEdCrA.roa (raw, json)
Hash identifier:          8DvrgMEDLkYkscgclqqfReIhV07gAOprvFXm4wcvvJ4=
Subject key identifier:   3B:87:AD:EB:F7:F6:CE:C7:9A:FA:26:4E:74:17:70:F8:31:1D:0A:B0
Certificate issuer:       /CN=09ed2bca014c2c44e90b844de89426223c390cf6
Certificate serial:       01A38B77
Authority key identifier: 09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/O4et6_f2zsea-iZOdBdw-DEdCrA.roa
Signing time:             Sun 26 Jun 2022 08:36:21 +0000
ROA not before:           Sun 26 Jun 2022 08:36:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209737
IP address blocks:        185.161.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27495287 (0x1a38b77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ed2bca014c2c44e90b844de89426223c390cf6
        Validity
            Not Before: Jun 26 08:36:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b87adebf7f6cec79afa264e741770f8311d0ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:72:53:9c:32:1a:f9:96:47:ef:50:37:a8:
                    a2:6f:60:1d:06:fa:7e:91:16:b4:7d:1e:88:e2:6e:
                    ff:c9:b0:c4:30:38:15:6b:29:fd:36:43:0f:e7:02:
                    a3:90:b2:34:70:a9:84:35:e1:d5:12:8b:f9:f5:af:
                    a8:57:e2:46:9e:18:ab:1a:8d:ab:53:df:03:07:b7:
                    ed:28:74:2c:af:a6:77:e9:8b:09:c1:01:ad:6f:1f:
                    8d:50:59:1e:cd:be:d8:67:3f:76:eb:e3:45:54:34:
                    9e:0f:d4:81:29:8f:f2:6e:bd:e8:e3:1e:ed:62:5a:
                    91:37:84:c4:f5:e3:8a:23:6b:ae:b6:9b:a5:e1:5a:
                    a1:fa:69:b1:7c:04:42:e7:85:4b:03:7c:d4:5c:4b:
                    ee:4b:e2:f9:d2:ba:79:37:aa:b3:02:32:0c:df:95:
                    81:a1:f7:27:f5:9c:b4:65:9f:88:fd:1c:fb:43:1f:
                    6f:03:c2:68:79:72:76:ec:b9:a2:01:82:0b:06:b6:
                    66:60:51:f6:e0:32:13:e3:b7:ce:26:ef:fb:86:6b:
                    06:d9:db:77:41:9a:d4:c5:81:01:b1:08:50:ea:fe:
                    3b:31:32:b5:d5:db:83:28:27:da:ab:64:80:c4:27:
                    9e:4d:b5:5f:0d:a6:e2:90:1b:d5:09:a5:b6:c4:9b:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:87:AD:EB:F7:F6:CE:C7:9A:FA:26:4E:74:17:70:F8:31:1D:0A:B0
            X509v3 Authority Key Identifier:
                keyid:09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/O4et6_f2zsea-iZOdBdw-DEdCrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:25:2f:b4:21:ec:83:1d:76:98:39:13:81:d9:f7:41:60:
         1d:28:16:5d:b6:af:91:40:9b:4b:8c:c6:86:8e:ac:e8:78:e5:
         bf:25:2b:ed:1b:b7:49:e5:3a:79:14:a3:70:3b:42:57:70:a2:
         ff:f7:e6:fa:8f:ec:9a:51:d2:33:08:3c:3e:4f:1b:94:d8:21:
         90:73:92:36:cf:14:ee:3d:1b:13:41:18:aa:f8:26:e1:32:e7:
         80:bd:5a:63:bc:6a:fa:9a:2d:1b:83:1b:e0:e3:50:10:92:d0:
         de:19:c3:d5:9d:b0:f8:26:53:da:25:79:9d:62:8e:cf:76:ac:
         59:cd:a7:8c:96:d6:1c:52:d1:8a:7f:e7:e6:15:26:96:ae:08:
         0f:82:85:d3:90:3b:d7:44:8d:0b:68:77:5f:0f:2c:27:d8:37:
         0f:d1:2b:08:38:48:0f:7d:0b:95:68:77:35:3a:d9:10:2d:bc:
         80:62:b5:b1:1f:9a:96:71:31:d8:5a:a8:61:43:70:02:f3:44:
         f0:1b:28:15:05:b8:29:b7:77:83:8a:d5:43:4a:66:14:75:ac:
         58:09:28:33:ba:fd:33:fc:98:0f:21:60:d1:d9:fd:2a:d4:20:
         4f:19:92:d2:26:29:4b:dd:f2:d8:bd:b8:eb:cd:d5:c3:ab:3d:
         f6:06:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:02 2024 by rpki-client on console-fra.rpki-client.org