Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/uevQVzlTrbcd_1EwAyjmOPuekXo.roa
File:                     uevQVzlTrbcd_1EwAyjmOPuekXo.roa (raw, json)
Hash identifier:          Mvr9+UVaZSn7OWVddZxt2hqFiVdDUIdO2zPyQ0mWWT4=
Subject key identifier:   B9:EB:D0:57:39:53:AD:B7:1D:FF:51:30:03:28:E6:38:FB:9E:91:7A
Certificate issuer:       /CN=d85f704992446820e7afc198a3b2b9ee2bd9f6c2
Certificate serial:       01856C011F8B52F450656E8410758AE187AE
Authority key identifier: D8:5F:70:49:92:44:68:20:E7:AF:C1:98:A3:B2:B9:EE:2B:D9:F6:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2F9wSZJEaCDnr8GYo7K57ivZ9sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/uevQVzlTrbcd_1EwAyjmOPuekXo.roa
Signing time:             Sun 01 Jan 2023 06:24:50 +0000
ROA not before:           Sun 01 Jan 2023 06:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58075
IP address blocks:        176.56.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:01:1f:8b:52:f4:50:65:6e:84:10:75:8a:e1:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85f704992446820e7afc198a3b2b9ee2bd9f6c2
        Validity
            Not Before: Jan  1 06:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9ebd0573953adb71dff51300328e638fb9e917a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:00:b1:25:f2:55:dc:71:c4:7f:15:8f:c3:
                    a2:4c:ff:6f:7d:f7:36:f3:4d:7e:99:5c:c3:0a:39:
                    d9:0f:85:8d:5e:d1:20:cc:bc:65:83:84:2e:36:58:
                    40:c7:9d:01:8e:76:43:9f:63:73:5a:23:72:31:ca:
                    0c:61:eb:9c:3f:ea:d4:6b:68:43:ab:49:6f:f6:f2:
                    0f:cd:b3:f2:79:d5:20:12:74:4b:0f:85:f4:eb:a5:
                    5f:f1:68:85:35:fa:10:b8:a0:b8:9f:ef:ca:aa:07:
                    ce:51:7a:13:78:96:57:b3:c5:96:d9:11:e9:be:3f:
                    6c:a7:bc:35:74:87:d7:d2:d5:de:48:d9:8b:79:be:
                    a2:eb:c4:e3:5b:84:c9:72:6b:ef:5b:cb:21:a4:3f:
                    12:a5:1d:ea:3e:b1:14:2e:ad:56:84:6b:cc:31:e4:
                    b4:25:47:aa:98:1d:e0:e2:32:b6:f4:5f:94:8b:77:
                    39:87:78:14:8d:a0:81:c9:e6:db:f1:26:33:bc:d8:
                    24:ea:5e:c8:ba:04:8f:63:39:7f:5a:06:ee:48:d6:
                    dc:51:d4:25:cc:16:2f:79:e2:40:bf:c6:48:86:1e:
                    e2:88:7f:a0:db:c8:25:71:5e:3f:ec:37:33:e1:9e:
                    ee:8b:8f:fd:5c:14:5c:01:eb:49:75:9e:85:75:15:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EB:D0:57:39:53:AD:B7:1D:FF:51:30:03:28:E6:38:FB:9E:91:7A
            X509v3 Authority Key Identifier:
                keyid:D8:5F:70:49:92:44:68:20:E7:AF:C1:98:A3:B2:B9:EE:2B:D9:F6:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2F9wSZJEaCDnr8GYo7K57ivZ9sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/uevQVzlTrbcd_1EwAyjmOPuekXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/2F9wSZJEaCDnr8GYo7K57ivZ9sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.56.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:9b:70:0c:1d:63:7e:d7:32:84:77:d7:d6:e1:e2:25:a0:cf:
         5f:08:8a:03:64:eb:f8:a9:2a:36:cb:e0:a4:95:08:f9:91:88:
         f6:61:db:40:2d:26:83:5e:17:d9:39:7e:53:66:d1:42:90:ab:
         6a:a2:1e:ce:ff:a8:ea:26:f0:f4:da:1d:cf:c2:0e:2a:fe:57:
         f5:dc:82:af:d1:6a:a5:8f:05:99:ad:8a:e6:ac:4f:4c:6d:20:
         71:71:47:11:c9:d5:d8:36:a2:91:c9:42:f2:12:6a:4c:80:1e:
         c5:5e:59:99:39:03:b0:34:fd:f1:1e:14:19:3f:10:e1:3c:cb:
         ff:a8:16:13:f2:7b:22:08:54:3c:bf:24:6a:f4:23:7a:53:4f:
         12:be:c9:8c:d8:ff:4a:7e:bc:78:ee:ce:c5:74:77:3e:01:e8:
         39:87:99:2c:91:64:cd:05:29:69:ba:56:de:8e:09:fa:d7:92:
         84:d7:1e:19:44:20:17:c3:b1:a2:65:80:af:31:06:95:6a:f1:
         fa:66:65:10:14:73:f4:e3:14:e8:ea:c2:52:7f:44:9e:a7:49:
         ad:75:a9:c2:92:7c:a3:c4:f1:a5:4e:76:c4:62:5e:e6:e2:a0:
         ec:8b:3a:c6:72:5f:36:1c:b6:d4:f1:79:66:b8:89:8f:50:b6:
         07:06:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:04 2024 by rpki-client on console-fra.rpki-client.org