Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/V2P6D_uDTCyy93I1gqio7fwhvYU.roa
File:                     V2P6D_uDTCyy93I1gqio7fwhvYU.roa (raw, json)
Hash identifier:          XbrZvUoCuYMABfR5WGz3Aa0TY11jg8XJeUq+TkhN0Ns=
Subject key identifier:   57:63:FA:0F:FB:83:4C:2C:B2:F7:72:35:82:A8:A8:ED:FC:21:BD:85
Certificate issuer:       /CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Certificate serial:       018D99C1BF961B35EC03BF97BAA8ECB79DCA
Authority key identifier: 1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/V2P6D_uDTCyy93I1gqio7fwhvYU.roa
Signing time:             Sun 11 Feb 2024 20:00:27 +0000
ROA not before:           Sun 11 Feb 2024 20:00:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        2a13:1300::/29 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:99:c1:bf:96:1b:35:ec:03:bf:97:ba:a8:ec:b7:9d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
        Validity
            Not Before: Feb 11 20:00:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5763fa0ffb834c2cb2f7723582a8a8edfc21bd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:76:6e:76:74:77:a1:ac:7d:97:f1:85:0e:
                    15:e8:60:9f:84:59:96:65:24:b8:a7:81:cd:88:56:
                    8e:54:4c:da:1a:4e:06:b4:b8:21:b0:4f:71:6f:9a:
                    45:31:48:cc:01:30:f7:d8:c9:16:f8:f3:dc:ba:09:
                    bc:75:91:a7:55:d5:3b:0a:9f:1e:9e:5f:a4:65:08:
                    8c:48:82:56:d2:bc:25:e1:5c:46:fe:e7:d2:29:ae:
                    b4:e2:68:26:f4:1f:bd:99:40:56:16:cb:b7:3f:98:
                    4e:12:56:12:24:e0:30:35:ed:2e:4c:17:e4:e6:fe:
                    8a:17:84:b5:76:df:0b:00:c3:24:2e:35:d8:22:74:
                    34:de:09:0d:0b:49:83:db:a0:f3:ee:d8:27:9c:88:
                    9b:80:72:46:aa:29:63:3e:72:e5:87:eb:ec:68:38:
                    11:19:a4:99:03:73:2e:bb:d6:1a:46:77:46:1d:20:
                    99:46:7c:39:09:48:41:aa:43:dd:8b:28:19:3a:a1:
                    da:9e:29:96:19:4e:43:19:81:93:6b:00:07:12:b3:
                    95:ec:42:fb:c1:3d:3c:12:a0:e8:0a:4a:d7:39:1f:
                    86:94:bc:54:06:c8:3c:26:92:9e:4c:b1:1e:29:ec:
                    af:6f:df:e4:31:e0:0a:9c:12:0d:1b:1a:7f:04:f7:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:63:FA:0F:FB:83:4C:2C:B2:F7:72:35:82:A8:A8:ED:FC:21:BD:85
            X509v3 Authority Key Identifier:
                keyid:1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/V2P6D_uDTCyy93I1gqio7fwhvYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1300::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:47:f1:99:9a:1f:4e:a2:aa:8a:a3:e1:da:29:b9:28:72:01:
         8b:33:ce:56:b0:b0:79:d9:85:37:de:01:a2:b0:97:84:11:0b:
         0a:01:23:dd:1e:29:1f:ca:ae:65:68:2f:dd:c9:f4:2d:8c:0f:
         a8:bc:34:47:e9:6e:84:c2:95:c5:9f:2b:ce:cd:8e:43:69:46:
         f5:b9:b5:52:f7:87:e0:3a:81:dd:f2:a6:dc:b2:52:23:78:c5:
         f6:01:6b:10:9d:70:de:a6:30:bf:8c:60:e8:6a:24:50:4e:3f:
         c0:a7:48:3e:6e:67:c2:a7:b4:4e:bf:25:37:d3:b6:87:18:93:
         9a:43:5c:e1:e4:c3:82:c4:db:d3:d1:51:45:49:dc:a3:93:bd:
         fe:fb:83:cc:d6:0c:d8:41:46:68:ba:35:af:96:5a:ee:57:bb:
         fd:9c:1d:13:92:3c:57:75:c4:de:a8:27:82:92:df:cd:38:ba:
         0a:5c:98:6c:ef:d3:19:4f:76:fb:05:ec:0a:74:37:61:93:40:
         36:1f:57:7e:85:c2:49:bf:68:83:99:eb:b5:6e:7a:71:3c:22:
         67:77:ac:cc:dc:b6:d9:a6:3a:99:54:4a:aa:12:83:94:86:ec:
         a8:bd:89:19:21:19:c4:35:73:b3:42:d4:a8:99:c0:17:cf:99:
         11:5c:84:0a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY2Zwb+WGzXsA7+Xuqjst53KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMmZiYjAzN2IyZDk4YzQ3NGI2MmE2MGVjODhkYTBjZDJl
MzdjNjEwHhcNMjQwMjExMjAwMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzYzZmEwZmZiODM0YzJjYjJmNzcyMzU4MmE4YThlZGZjMjFiZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA92bnZ0d6GsfZfxhQ4V6GCfhFmW
ZSS4p4HNiFaOVEzaGk4GtLghsE9xb5pFMUjMATD32MkW+PPcugm8dZGnVdU7Cp8e
nl+kZQiMSIJW0rwl4VxG/ufSKa604mgm9B+9mUBWFsu3P5hOElYSJOAwNe0uTBfk
5v6KF4S1dt8LAMMkLjXYInQ03gkNC0mD26Dz7tgnnIibgHJGqiljPnLlh+vsaDgR
GaSZA3Muu9YaRndGHSCZRnw5CUhBqkPdiygZOqHanimWGU5DGYGTawAHErOV7EL7
wT08EqDoCkrXOR+GlLxUBsg8JpKeTLEeKeyvb9/kMeAKnBINGxp/BPe6LQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFdj+g/7g0wssvdyNYKoqO38Ib2FMB8GA1UdIwQY
MBaAFB8vuwN7LZjEdLYqYOyI2gzS43xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHktN0Ezc3RtTVIwdGlwZzdJamFETkxqZkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWM3OTctZWIzNy00YWMyLTk1OTMt
YzQ0ZTlhZTVmMjM5LzEvVjJQNkRfdURUQ3l5OTNJMWdxaW83ZndodllVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lOWM3OTctZWIzNy00YWMyLTk1OTMtYzQ0ZTlhZTVmMjM5
LzEvSHktN0Ezc3RtTVIwdGlwZzdJamFETkxqZkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMTADAN
BgkqhkiG9w0BAQsFAAOCAQEAVEfxmZofTqKqiqPh2im5KHIBizPOVrCwedmFN94B
orCXhBELCgEj3R4pH8quZWgv3cn0LYwPqLw0R+luhMKVxZ8rzs2OQ2lG9bm1UveH
4DqB3fKm3LJSI3jF9gFrEJ1w3qYwv4xg6GokUE4/wKdIPm5nwqe0Tr8lN9O2hxiT
mkNc4eTDgsTb09FRRUnco5O9/vuDzNYM2EFGaLo1r5Za7le7/ZwdE5I8V3XE3qgn
gpLfzTi6ClyYbO/TGU92+wXsCnQ3YZNANh9XfoXCSb9og5nrtW56cTwiZ3eszNy2
2aY6mVRKqhKDlIbsqL2JGSEZxDVzs0LUqJnAF8+ZEVyECg==
-----END CERTIFICATE-----
Generated at Tue Apr 16 11:56:41 2024 by rpki-client on console-fra.rpki-client.org