Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/xGkSbEF9slut4P_BYI-rEYuJSdk.roa
File:                     xGkSbEF9slut4P_BYI-rEYuJSdk.roa (raw, json)
Hash identifier:          OA7/zJ1ZsNyxlotezOssQUy6THviUyu954pmLJz9FgQ=
Subject key identifier:   C4:69:12:6C:41:7D:B2:5B:AD:E0:FF:C1:60:8F:AB:11:8B:89:49:D9
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       01826D2E3D586D863FC6A18AD9F98A9CA7A7
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/xGkSbEF9slut4P_BYI-rEYuJSdk.roa
Signing time:             Fri 05 Aug 2022 08:45:23 +0000
ROA not before:           Fri 05 Aug 2022 08:45:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        195.178.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6d:2e:3d:58:6d:86:3f:c6:a1:8a:d9:f9:8a:9c:a7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Aug  5 08:45:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c469126c417db25bade0ffc1608fab118b8949d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:8a:4b:c4:2e:b9:76:1a:fa:27:a7:e2:bd:
                    ba:7a:82:1b:8a:ca:8d:a4:4e:62:82:2c:eb:77:98:
                    9a:93:fa:e7:38:c5:2a:0c:4a:2f:cd:c5:7f:8a:43:
                    46:f9:60:4c:a2:c0:7f:54:96:44:ba:fd:ba:f8:09:
                    17:77:d7:2b:a4:11:fd:35:32:64:5c:71:e0:e9:fd:
                    f9:78:f5:a1:40:94:ce:67:2a:97:3b:04:2f:eb:44:
                    04:4c:31:4e:6e:ef:43:a4:b7:90:74:05:b1:f1:40:
                    40:73:ce:bd:79:88:84:a1:ab:d8:93:14:1a:f7:d9:
                    e8:4d:21:b5:07:01:bb:a8:20:d6:a9:8b:80:49:f7:
                    9d:2f:06:7d:4d:17:f7:05:bf:f0:17:ad:c4:9d:29:
                    8f:52:ca:8f:22:2d:ff:2b:fe:67:0f:74:67:d2:c4:
                    f0:7e:7b:16:87:46:11:56:3e:f8:5d:5d:8f:46:7f:
                    2e:06:b7:f4:14:64:30:70:5f:bc:13:ba:e1:06:e0:
                    1e:a5:30:a9:cb:e6:78:85:8d:fc:2f:e6:81:55:57:
                    3e:17:2b:1c:9f:de:11:b3:9d:e2:7e:70:74:58:b6:
                    d7:21:fa:73:1b:c6:f0:f4:5f:c5:2c:d2:83:16:14:
                    35:5b:85:d2:91:2a:7b:41:33:22:e1:45:d1:18:50:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:69:12:6C:41:7D:B2:5B:AD:E0:FF:C1:60:8F:AB:11:8B:89:49:D9
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/xGkSbEF9slut4P_BYI-rEYuJSdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:f3:5d:f6:8c:d2:65:f0:df:d5:8e:a7:4a:20:f2:79:a5:
         ca:0c:da:0a:a8:37:c3:78:6d:46:6b:ea:f4:23:b2:4f:86:89:
         8f:8f:5c:61:18:b0:01:78:78:63:cf:0b:87:9a:cb:a9:2c:c3:
         f3:6f:cd:d9:91:8a:a9:b4:fe:8d:de:eb:61:39:55:7b:72:b9:
         2d:c9:30:71:6d:30:a0:ba:b2:e0:3a:26:10:7f:6f:6c:fb:7f:
         2e:a1:b9:b6:70:ee:95:55:30:c0:a8:11:91:dd:b9:e5:c7:54:
         40:89:d3:f7:90:a5:e7:8b:01:a9:31:8e:83:63:08:bc:bf:43:
         50:d5:93:97:9e:7f:9d:09:4a:e0:8d:2c:a2:33:b8:d3:ca:1d:
         74:8b:83:28:7a:ec:e2:2d:8b:f3:9c:fe:2d:6b:84:92:32:80:
         15:65:ec:f0:87:42:98:4d:a3:43:4e:2c:41:c8:86:2c:29:57:
         25:0f:05:e0:aa:59:bb:ad:64:ae:5a:c7:0b:6b:35:5a:47:2b:
         3e:b1:1e:e3:e0:ab:61:b0:de:00:e4:52:84:ed:2b:f2:10:d4:
         ab:bc:3a:d9:47:f1:71:cd:a3:d5:ad:b9:f5:d5:4a:47:92:3a:
         1f:e4:ae:9f:61:ca:e6:10:6d:6b:16:f1:9e:1c:cd:0b:ef:8c:
         42:12:08:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJtLj1YbYY/xqGK2fmKnKenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNzgzYzZkZTI5MzNhMzA3NWFiYWEyZDhiYWQyM2YwM2Vh
NzljMTAwHhcNMjIwODA1MDg0NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDY5MTI2YzQxN2RiMjViYWRlMGZmYzE2MDhmYWIxMThiODk0OWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/KKS8QuuXYa+ien4r26eoIbisqN
pE5igizrd5iak/rnOMUqDEovzcV/ikNG+WBMosB/VJZEuv26+AkXd9crpBH9NTJk
XHHg6f35ePWhQJTOZyqXOwQv60QETDFObu9DpLeQdAWx8UBAc869eYiEoavYkxQa
99noTSG1BwG7qCDWqYuASfedLwZ9TRf3Bb/wF63EnSmPUsqPIi3/K/5nD3Rn0sTw
fnsWh0YRVj74XV2PRn8uBrf0FGQwcF+8E7rhBuAepTCpy+Z4hY38L+aBVVc+Fysc
n94Rs53ifnB0WLbXIfpzG8bw9F/FLNKDFhQ1W4XSkSp7QTMi4UXRGFC2iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRpEmxBfbJbreD/wWCPqxGLiUnZMB8GA1UdIwQY
MBaAFFF4PG3ikzowdauqLYutI/A+p5wQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhnOGJlS1RPakIxcTZvdGk2MGo4RDZubkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80ZTQyMjItMDQ4ZC00ZmU1LTk5MjEt
NDFiYmZjNGZlNjA3LzEveEdrU2JFRjlzbHV0NFBfQllJLXJFWXVKU2RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80ZTQyMjItMDQ4ZC00ZmU1LTk5MjEtNDFiYmZjNGZlNjA3
LzEvVVhnOGJlS1RPakIxcTZvdGk2MGo4RDZubkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7JuMA0G
CSqGSIb3DQEBCwUAA4IBAQCG9/Nd9ozSZfDf1Y6nSiDyeaXKDNoKqDfDeG1Ga+r0
I7JPhomPj1xhGLABeHhjzwuHmsupLMPzb83ZkYqptP6N3uthOVV7crktyTBxbTCg
urLgOiYQf29s+38uobm2cO6VVTDAqBGR3bnlx1RAidP3kKXniwGpMY6DYwi8v0NQ
1ZOXnn+dCUrgjSyiM7jTyh10i4MoeuziLYvznP4ta4SSMoAVZezwh0KYTaNDTixB
yIYsKVclDwXgqlm7rWSuWscLazVaRys+sR7j4KthsN4A5FKE7SvyENSrvDrZR/Fx
zaPVrbn11UpHkjof5K6fYcrmEG1rFvGeHM0L74xCEghr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:08 2024 by rpki-client on console-ams.rpki-client.org