Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/BLnP738zD-eDq2A9VmC-r7b2rXo.roa
File:                     BLnP738zD-eDq2A9VmC-r7b2rXo.roa (raw, json)
Hash identifier:          hp+aKBc8gN4cEpWS72Q8BcxIJ06oq3NUub9xZZ3L8sQ=
Subject key identifier:   04:B9:CF:EF:7F:33:0F:E7:83:AB:60:3D:56:60:BE:AF:B6:F6:AD:7A
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       0566677F
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/BLnP738zD-eDq2A9VmC-r7b2rXo.roa
Signing time:             Mon 13 Jun 2022 01:38:02 +0000
ROA not before:           Mon 13 Jun 2022 01:38:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136526
IP address blocks:        185.202.103.0/24 maxlen: 24
                          185.202.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90597247 (0x566677f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Jun 13 01:38:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=04b9cfef7f330fe783ab603d5660beafb6f6ad7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:b7:0e:33:62:59:95:06:db:d8:c7:7a:0b:
                    59:e1:cf:6e:28:9d:6d:4a:3b:2e:fa:64:03:e5:58:
                    35:8a:b3:84:21:4b:8a:18:a5:bd:ae:34:d9:28:aa:
                    4c:45:ae:17:2b:f2:4c:6f:85:5b:45:b0:d0:18:59:
                    41:82:ae:59:87:bd:44:4f:85:25:4f:09:1f:49:86:
                    f6:66:ad:59:27:2d:f3:1e:08:25:c5:c0:0d:19:b7:
                    28:5e:a8:63:e7:98:8f:d1:c1:84:77:72:59:a1:8d:
                    65:c9:81:fb:ad:2d:9c:2c:5c:64:7f:d9:29:c3:55:
                    3e:6e:6a:dd:67:ed:92:fc:d5:6e:44:d7:e4:f3:d4:
                    46:2e:3d:3e:d4:7f:7b:e3:9f:2b:55:16:78:2d:22:
                    d8:d8:2d:d4:67:d7:bc:19:db:d1:b6:d4:ba:50:d1:
                    29:06:34:20:5c:09:92:9f:0e:96:ad:24:8c:fc:99:
                    60:12:06:dc:66:dd:02:7c:e6:99:75:b5:29:1f:ee:
                    a7:6a:04:82:64:7d:6c:f1:15:08:31:dc:03:37:47:
                    83:f6:b0:af:4d:d4:bc:2d:7e:d1:c0:a5:88:3d:5b:
                    77:49:19:10:28:12:cc:da:3f:5f:1a:8e:4e:f4:0e:
                    f4:97:8e:2e:86:3c:13:57:bd:f8:bb:a9:10:a8:1c:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B9:CF:EF:7F:33:0F:E7:83:AB:60:3D:56:60:BE:AF:B6:F6:AD:7A
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/BLnP738zD-eDq2A9VmC-r7b2rXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:77:a6:94:6b:49:90:c2:ae:e2:9e:85:91:a3:26:29:e5:
         83:48:aa:74:83:04:f2:aa:74:9f:4c:f5:b6:66:40:04:a8:0e:
         f6:99:d8:26:61:6e:b3:31:1f:58:49:19:83:db:b5:7a:35:55:
         b3:d1:b8:63:e5:dd:b1:f1:87:ac:5f:57:48:58:05:58:dc:aa:
         a3:33:27:f4:89:8d:9b:62:e5:26:c0:af:e0:36:68:1d:7a:4f:
         fa:65:7c:bb:a4:1d:7e:60:a5:09:63:7a:4c:b2:50:62:af:9d:
         8e:d6:be:bf:a8:10:c6:5b:2c:53:a6:d7:dd:32:6f:be:e2:0c:
         64:b0:6e:95:73:06:9b:d4:fd:e0:33:42:00:15:46:f5:76:62:
         bc:88:6b:a7:a5:e9:cb:80:7d:f5:7f:79:9f:d3:d6:fd:c3:cc:
         df:29:47:ad:75:2c:78:3c:84:f0:17:af:e9:07:c4:10:c7:df:
         e4:b4:44:a6:f8:5f:92:8f:b2:43:18:30:99:87:b0:e1:c0:4a:
         7f:a0:d2:d8:b4:ab:eb:e3:2d:5c:d3:4f:29:7b:1c:2d:18:22:
         98:36:3b:38:8a:1a:8f:69:be:c3:07:e7:81:06:f0:df:38:17:
         24:23:4c:af:bb:f5:a5:0a:ba:96:8e:9c:d2:4e:3f:ea:d0:95:
         d0:53:47:bb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBWZnfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MmFhOTMzMjgxMTk4ZmQyZDE5YmM5N2EwMjU4YzAwMWZmYzllZDlkMB4XDTIyMDYx
MzAxMzgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRiOWNmZWY3ZjMz
MGZlNzgzYWI2MDNkNTY2MGJlYWZiNmY2YWQ3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKWStw4zYlmVBtvYx3oLWeHPbiidbUo7LvpkA+VYNYqzhCFL
ihilva402SiqTEWuFyvyTG+FW0Ww0BhZQYKuWYe9RE+FJU8JH0mG9matWSct8x4I
JcXADRm3KF6oY+eYj9HBhHdyWaGNZcmB+60tnCxcZH/ZKcNVPm5q3WftkvzVbkTX
5PPURi49PtR/e+OfK1UWeC0i2Ngt1GfXvBnb0bbUulDRKQY0IFwJkp8Olq0kjPyZ
YBIG3GbdAnzmmXW1KR/up2oEgmR9bPEVCDHcAzdHg/awr03UvC1+0cCliD1bd0kZ
ECgSzNo/XxqOTvQO9JeOLoY8E1e9+LupEKgcM68CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQEuc/vfzMP54OrYD1WYL6vtvatejAfBgNVHSMEGDAWgBRiqpMygRmP0tGb
yXoCWMAB/8ntnTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lxcVRNb0VaajlMUm04bDZBbGpBQWZfSjdaMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvMDU5Yjk3LTU5MTItNDJhOC05YzJhLTZjNTkzMGNlZDczZC8x
L0JMblA3Mzh6RC1lRHEyQTlWbUMtcjdiMnJYby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
MDU5Yjk3LTU5MTItNDJhOC05YzJhLTZjNTkzMGNlZDczZC8xL1lxcVRNb0VaajlM
Um04bDZBbGpBQWZfSjdaMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnKZjANBgkqhkiG9w0BAQsFAAOC
AQEAGeB3ppRrSZDCruKehZGjJinlg0iqdIME8qp0n0z1tmZABKgO9pnYJmFuszEf
WEkZg9u1ejVVs9G4Y+XdsfGHrF9XSFgFWNyqozMn9ImNm2LlJsCv4DZoHXpP+mV8
u6QdfmClCWN6TLJQYq+djta+v6gQxlssU6bX3TJvvuIMZLBulXMGm9T94DNCABVG
9XZivIhrp6Xpy4B99X95n9PW/cPM3ylHrXUseDyE8Bev6QfEEMff5LREpvhfko+y
QxgwmYew4cBKf6DS2LSr6+MtXNNPKXscLRgimDY7OIoaj2m+wwfngQbw3zgXJCNM
r7v1pQq6lo6c0k4/6tCV0FNHuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org