Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/Zho9Ra9bCwP7dFZtvXR0NcjbQHs.roa
File:                     Zho9Ra9bCwP7dFZtvXR0NcjbQHs.roa (raw, json)
Hash identifier:          KafdPyG5DgMNXHXLCz/M3DIjzLo2lYEtkdofvimuaU8=
Subject key identifier:   66:1A:3D:45:AF:5B:0B:03:FB:74:56:6D:BD:74:74:35:C8:DB:40:7B
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       02C7A8D8
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/Zho9Ra9bCwP7dFZtvXR0NcjbQHs.roa
Signing time:             Tue 28 Jun 2022 10:37:03 +0000
ROA not before:           Tue 28 Jun 2022 10:37:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400377
IP address blocks:        195.178.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46639320 (0x2c7a8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Jun 28 10:37:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=661a3d45af5b0b03fb74566dbd747435c8db407b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:5a:d1:f3:48:67:6a:c5:dd:60:41:d1:fe:
                    7a:f4:c9:db:17:6e:48:db:3e:63:67:b5:02:68:a3:
                    28:09:b2:02:2f:52:a8:a2:3b:aa:5b:a5:e9:2f:53:
                    bb:02:ae:6c:d3:3d:1e:b0:68:73:0f:73:a9:ce:f0:
                    b2:60:f0:ff:d6:a8:ac:2a:a8:e5:22:c8:f8:b5:1e:
                    82:8d:b6:db:8b:52:c7:81:85:4d:b8:30:2b:09:6f:
                    12:5e:3d:ea:e0:60:67:1b:36:d3:e9:6b:e9:a2:57:
                    3a:50:a3:e7:0c:34:87:64:ac:fc:da:f4:05:0f:79:
                    17:a7:f6:b5:aa:a0:64:44:47:37:ee:ff:42:32:2b:
                    34:52:99:75:1d:0b:a4:b3:ad:7c:f4:4a:25:25:74:
                    82:e1:6f:63:7b:e4:fe:6f:32:43:dc:5a:dc:86:e2:
                    bd:c4:6e:30:e5:a9:8e:0c:8b:ee:85:84:98:f9:b9:
                    c5:ee:03:78:d5:f8:0f:48:fa:78:3a:52:e2:a9:f1:
                    97:21:a8:56:63:47:57:e3:82:77:90:f6:51:90:a7:
                    52:a1:5f:25:bd:f8:9d:01:33:46:ff:3b:31:be:e0:
                    f1:bb:0f:f4:91:57:82:30:67:4b:a9:93:04:b3:60:
                    81:da:bb:b8:ca:f9:6f:60:f0:e0:14:f1:41:59:08:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1A:3D:45:AF:5B:0B:03:FB:74:56:6D:BD:74:74:35:C8:DB:40:7B
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/Zho9Ra9bCwP7dFZtvXR0NcjbQHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:38:41:31:39:d6:be:3d:b4:4f:4f:1e:16:fa:b9:10:1f:
         65:36:21:5a:df:36:8e:3b:a6:39:60:7e:87:a9:c9:85:b2:a7:
         a7:12:22:b1:ea:aa:ea:68:b6:b7:e2:e7:11:90:8f:33:03:3e:
         65:1b:c4:8e:56:9e:f7:a4:e2:fa:49:00:97:b8:17:a6:43:99:
         cd:87:71:82:62:b1:a4:75:28:7c:c6:53:be:7a:c4:32:43:57:
         cf:ba:1e:9c:23:84:79:e1:22:3c:27:d8:79:27:f4:05:b3:56:
         2e:8c:be:55:ff:1b:fa:c3:dc:20:1e:99:16:75:55:0c:41:d5:
         49:da:26:40:45:1b:db:ba:d4:fb:1f:e1:91:14:a2:91:85:12:
         08:53:3b:e3:a8:da:f8:55:d5:c2:d4:b4:13:a8:8a:37:22:7c:
         f4:ac:5d:f1:22:7a:c4:3e:9d:01:d8:c3:c1:91:95:7d:b8:5a:
         d4:ae:7d:b4:09:f4:f7:a4:4e:52:47:60:bb:79:74:4a:ea:81:
         5c:52:d1:45:42:19:ef:2d:d1:9a:c6:e0:9f:07:f8:92:01:5b:
         37:28:70:6f:aa:c5:b1:7f:50:29:e1:11:18:61:99:72:64:ac:
         06:7b:d5:96:6e:79:ed:97:0e:c1:7e:ff:32:cf:d8:0f:2c:8d:
         1d:a3:aa:57
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAseo2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MTc4M2M2ZGUyOTMzYTMwNzVhYmFhMmQ4YmFkMjNmMDNlYTc5YzEwMB4XDTIyMDYy
ODEwMzcwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjYxYTNkNDVhZjVi
MGIwM2ZiNzQ1NjZkYmQ3NDc0MzVjOGRiNDA3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALN6WtHzSGdqxd1gQdH+evTJ2xduSNs+Y2e1AmijKAmyAi9S
qKI7qlul6S9TuwKubNM9HrBocw9zqc7wsmDw/9aorCqo5SLI+LUego2224tSx4GF
TbgwKwlvEl496uBgZxs20+lr6aJXOlCj5ww0h2Ss/Nr0BQ95F6f2taqgZERHN+7/
QjIrNFKZdR0LpLOtfPRKJSV0guFvY3vk/m8yQ9xa3IbivcRuMOWpjgyL7oWEmPm5
xe4DeNX4D0j6eDpS4qnxlyGoVmNHV+OCd5D2UZCnUqFfJb34nQEzRv87Mb7g8bsP
9JFXgjBnS6mTBLNggdq7uMr5b2Dw4BTxQVkI6ScCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRmGj1Fr1sLA/t0Vm29dHQ1yNtAezAfBgNVHSMEGDAWgBRReDxt4pM6MHWr
qi2LrSPwPqecEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VYZzhiZUtUT2pCMXE2b3RpNjBqOEQ2bm5CQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvNGU0MjIyLTA0OGQtNGZlNS05OTIxLTQxYmJmYzRmZTYwNy8x
L1pobzlSYTliQ3dQN2RGWnR2WFIwTmNqYlFIcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
NGU0MjIyLTA0OGQtNGZlNS05OTIxLTQxYmJmYzRmZTYwNy8xL1VYZzhiZUtUT2pC
MXE2b3RpNjBqOEQ2bm5CQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOyeTANBgkqhkiG9w0BAQsFAAOC
AQEAMfg4QTE51r49tE9PHhb6uRAfZTYhWt82jjumOWB+h6nJhbKnpxIiseqq6mi2
t+LnEZCPMwM+ZRvEjlae96Ti+kkAl7gXpkOZzYdxgmKxpHUofMZTvnrEMkNXz7oe
nCOEeeEiPCfYeSf0BbNWLoy+Vf8b+sPcIB6ZFnVVDEHVSdomQEUb27rU+x/hkRSi
kYUSCFM746ja+FXVwtS0E6iKNyJ89Kxd8SJ6xD6dAdjDwZGVfbha1K59tAn096RO
Ukdgu3l0SuqBXFLRRUIZ7y3Rmsbgnwf4kgFbNyhwb6rFsX9QKeERGGGZcmSsBnvV
lm557ZcOwX7/Ms/YDyyNHaOqVw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:04 2023 by rpki-client on console-ams.rpki-client.org