Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/HIW8kwKFyzTefiWyQMH8C5ozaR4.roa
File:                     HIW8kwKFyzTefiWyQMH8C5ozaR4.roa (raw, json)
Hash identifier:          +lh2FPuA0LCGxmwnDSqDzW7qzWgAzYL2kQP/VBGL69Q=
Subject key identifier:   1C:85:BC:93:02:85:CB:34:DE:7E:25:B2:40:C1:FC:0B:9A:33:69:1E
Certificate issuer:       /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial:       018899BDC9354A655FC2797E4DB2EBA41D60
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/HIW8kwKFyzTefiWyQMH8C5ozaR4.roa
Signing time:             Thu 08 Jun 2023 06:42:11 +0000
ROA not before:           Thu 08 Jun 2023 06:42:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        193.162.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:99:bd:c9:35:4a:65:5f:c2:79:7e:4d:b2:eb:a4:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
        Validity
            Not Before: Jun  8 06:42:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c85bc930285cb34de7e25b240c1fc0b9a33691e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:50:1c:f0:85:38:88:35:51:6e:24:d3:50:
                    3d:a1:90:06:bd:1e:9e:18:03:66:3e:49:d9:43:a0:
                    ad:48:35:dc:04:46:a3:0d:7a:b4:95:41:7b:9d:f1:
                    25:e0:c3:ec:56:86:ca:50:f0:cc:d8:7d:9b:df:d2:
                    00:0f:1d:48:2c:af:51:d8:2b:14:78:36:70:31:9d:
                    8f:5a:d8:33:aa:9f:92:75:6d:be:fe:02:68:9f:93:
                    32:82:c7:cf:e7:3c:09:fb:6b:9d:71:4c:e5:9c:68:
                    4e:89:30:3a:64:ac:88:56:9c:80:1c:a9:d3:61:1e:
                    ad:82:32:8f:66:8a:58:90:f5:4f:d2:7e:a2:fe:3b:
                    09:a4:1a:21:cb:42:17:8a:34:05:1a:4d:a5:00:60:
                    ec:1c:f2:9e:02:c6:63:22:09:bc:40:01:47:9e:20:
                    41:8f:4e:28:88:61:27:e8:99:d4:b6:b2:a3:b3:78:
                    71:b1:e6:97:91:c4:47:62:f5:70:fb:b4:f2:66:14:
                    22:f7:75:3b:11:9f:da:c6:1b:a6:8e:c8:aa:45:e4:
                    83:28:55:f9:f9:a7:09:55:cd:82:78:d7:b8:86:c3:
                    9d:69:67:53:b7:56:1c:98:70:77:f6:d1:9f:c7:8f:
                    5b:dd:4f:f3:69:83:c2:89:57:7a:14:13:eb:cd:28:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:85:BC:93:02:85:CB:34:DE:7E:25:B2:40:C1:FC:0B:9A:33:69:1E
            X509v3 Authority Key Identifier:
                keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/HIW8kwKFyzTefiWyQMH8C5ozaR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:85:88:6d:26:3d:8f:9f:46:a2:dc:ee:12:0b:30:79:00:04:
         a3:c7:a4:8d:c0:31:bc:2d:64:ff:91:c8:83:e2:ba:9d:a9:3e:
         20:27:46:d3:24:d1:66:3a:f4:89:8a:b7:04:f8:35:f3:1a:82:
         30:74:f0:11:06:ce:e4:79:79:68:64:52:bd:45:3c:34:29:c2:
         46:6a:ab:5e:aa:64:f5:e8:24:5d:71:c8:08:a7:10:37:91:39:
         24:bc:6b:05:80:a0:0e:26:7c:0c:95:25:59:0b:d9:82:a8:0d:
         b3:46:c6:13:2d:c9:6e:e8:e9:e8:b8:84:5d:4f:42:54:09:21:
         18:f4:7d:18:e6:29:f8:0f:d1:30:ca:17:81:60:ae:c4:1f:97:
         59:40:97:7f:af:bc:01:c5:c6:d1:48:1b:9d:ae:89:a1:fa:40:
         96:5b:7b:20:55:c3:e9:ef:1b:52:5e:83:67:36:c4:f1:01:3d:
         99:24:0e:42:46:53:78:71:88:22:2c:62:2f:a1:58:f4:b4:fb:
         b9:09:05:49:e7:f6:5e:21:fa:8f:64:12:38:79:89:ae:72:ba:
         ca:34:54:b6:06:90:eb:cd:e1:02:c8:a2:c7:f5:c4:67:3e:ef:
         03:2d:76:67:7b:bc:4f:42:0d:29:c2:93:fc:4b:30:6d:fc:13:
         24:40:f1:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiZvck1SmVfwnl+TbLrpB1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyN2RlOTc4Y2RjMmViMDVjM2YwODkwNjFiMGFiZTNjNWY2
OThhZWUwHhcNMjMwNjA4MDY0MjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzg1YmM5MzAyODVjYjM0ZGU3ZTI1YjI0MGMxZmMwYjlhMzM2OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpJQHPCFOIg1UW4k01A9oZAGvR6e
GANmPknZQ6CtSDXcBEajDXq0lUF7nfEl4MPsVobKUPDM2H2b39IADx1ILK9R2CsU
eDZwMZ2PWtgzqp+SdW2+/gJon5MygsfP5zwJ+2udcUzlnGhOiTA6ZKyIVpyAHKnT
YR6tgjKPZopYkPVP0n6i/jsJpBohy0IXijQFGk2lAGDsHPKeAsZjIgm8QAFHniBB
j04oiGEn6JnUtrKjs3hxseaXkcRHYvVw+7TyZhQi93U7EZ/axhumjsiqReSDKFX5
+acJVc2CeNe4hsOdaWdTt1YcmHB39tGfx49b3U/zaYPCiVd6FBPrzSiAeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFByFvJMChcs03n4lskDB/AuaM2keMB8GA1UdIwQY
MBaAFGJ96XjNwusFw/CJBhsKvjxfaYruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW4zcGVNM0M2d1hEOElrR0d3cS1QRjlwaXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hZDYwZTgtNDYwOS00ZDQzLTg5ZmYt
ZTNjMmY0ZDJhYjNiLzEvSElXOGt3S0Z5elRlZmlXeVFNSDhDNW96YVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hZDYwZTgtNDYwOS00ZDQzLTg5ZmYtZTNjMmY0ZDJhYjNi
LzEvWW4zcGVNM0M2d1hEOElrR0d3cS1QRjlwaXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaIdMA0G
CSqGSIb3DQEBCwUAA4IBAQB0hYhtJj2Pn0ai3O4SCzB5AASjx6SNwDG8LWT/kciD
4rqdqT4gJ0bTJNFmOvSJircE+DXzGoIwdPARBs7keXloZFK9RTw0KcJGaqteqmT1
6CRdccgIpxA3kTkkvGsFgKAOJnwMlSVZC9mCqA2zRsYTLclu6OnouIRdT0JUCSEY
9H0Y5in4D9EwyheBYK7EH5dZQJd/r7wBxcbRSBudromh+kCWW3sgVcPp7xtSXoNn
NsTxAT2ZJA5CRlN4cYgiLGIvoVj0tPu5CQVJ5/ZeIfqPZBI4eYmucrrKNFS2BpDr
zeECyKLH9cRnPu8DLXZne7xPQg0pwpP8SzBt/BMkQPFC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org