Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/3D6_rJ9xNJPRH0RYlkqAI-XA8-o.roa
File:                     3D6_rJ9xNJPRH0RYlkqAI-XA8-o.roa (raw, json)
Hash identifier:          bJmOp690sqfQ6m3H860R1+Y5zPmRF7WigERz7nneNyo=
Subject key identifier:   DC:3E:BF:AC:9F:71:34:93:D1:1F:44:58:96:4A:80:23:E5:C0:F3:EA
Certificate issuer:       /CN=989ab4e45f6426214cf0a4766e0aa62a4bb6107f
Certificate serial:       018220896237906A87915ACACF8A6BE232BC
Authority key identifier: 98:9A:B4:E4:5F:64:26:21:4C:F0:A4:76:6E:0A:A6:2A:4B:B6:10:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJq05F9kJiFM8KR2bgqmKku2EH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/3D6_rJ9xNJPRH0RYlkqAI-XA8-o.roa
Signing time:             Thu 21 Jul 2022 11:34:10 +0000
ROA not before:           Thu 21 Jul 2022 11:34:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        146.19.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:89:62:37:90:6a:87:91:5a:ca:cf:8a:6b:e2:32:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989ab4e45f6426214cf0a4766e0aa62a4bb6107f
        Validity
            Not Before: Jul 21 11:34:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc3ebfac9f713493d11f4458964a8023e5c0f3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:34:46:43:ac:0c:89:ed:55:bc:56:ab:7b:
                    c8:40:0c:00:c3:be:6c:c6:2f:8b:e8:5f:b9:40:4d:
                    3d:87:8e:38:ce:fc:23:25:6b:0f:3a:ce:fd:b1:1c:
                    fb:1c:a2:3f:b5:1a:5b:9b:b8:f7:95:40:b6:48:04:
                    ac:45:c1:7b:b0:b6:34:60:1a:55:88:61:36:a9:d3:
                    28:7a:b1:2e:f7:98:ed:45:3c:87:f7:52:b0:8a:af:
                    a0:c4:cb:66:e5:92:af:d4:95:13:db:2b:cc:5d:a1:
                    e3:78:f0:b4:a5:75:97:61:99:01:03:55:fc:4a:94:
                    d2:71:21:3e:1e:d2:fa:af:fe:65:4c:86:99:36:03:
                    a4:b6:eb:90:e2:73:ce:bf:52:65:20:0b:44:f9:06:
                    9e:5c:4d:89:a8:0f:19:e4:c8:e7:b3:b7:ff:34:b3:
                    87:86:1d:ea:27:98:56:48:64:ce:07:da:a3:91:b4:
                    c5:fd:fe:2b:24:0a:8b:9b:df:e5:46:91:6d:d7:2b:
                    75:96:d9:ca:7f:f6:34:0c:57:8b:03:30:56:d9:73:
                    c1:e8:b5:25:fc:98:62:5b:3d:9f:d1:8b:be:9e:f3:
                    8c:26:73:0e:74:69:67:07:3a:b4:c3:20:df:a5:2e:
                    2c:64:07:6a:10:94:96:e0:a4:7d:c3:2c:c9:1d:0d:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3E:BF:AC:9F:71:34:93:D1:1F:44:58:96:4A:80:23:E5:C0:F3:EA
            X509v3 Authority Key Identifier:
                keyid:98:9A:B4:E4:5F:64:26:21:4C:F0:A4:76:6E:0A:A6:2A:4B:B6:10:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJq05F9kJiFM8KR2bgqmKku2EH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/3D6_rJ9xNJPRH0RYlkqAI-XA8-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/mJq05F9kJiFM8KR2bgqmKku2EH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:23:27:45:75:5e:9e:48:6b:26:fc:93:46:e9:30:65:4f:
         76:33:c3:c4:64:ae:d0:5d:01:67:1c:87:2d:f3:89:ac:e5:a0:
         0a:3e:f3:4b:84:c3:89:89:ab:30:8c:12:41:79:cd:56:34:e8:
         40:5f:e8:fa:a2:b9:9a:4e:91:26:56:9a:2b:43:c3:8b:77:1f:
         ba:e3:3f:d5:0e:30:e3:04:91:03:21:63:a8:fe:bc:d9:0a:42:
         2c:fd:ee:25:65:bc:70:2f:69:34:7c:03:50:2d:46:3c:7d:77:
         58:56:a7:7c:4f:de:c3:1a:4a:f4:f7:a2:51:e9:35:0d:84:fa:
         36:24:2a:dc:77:63:60:9a:91:c0:44:c3:23:f0:8f:99:01:e5:
         e7:b7:f2:f0:36:02:a1:cb:ba:3b:fc:f7:b7:29:23:a2:33:42:
         84:85:91:5c:95:01:25:88:c2:b9:ea:1d:86:e0:91:53:99:68:
         59:dd:ed:29:8d:11:23:07:72:77:56:3d:db:6c:75:41:ff:44:
         35:8d:04:41:5b:46:02:b6:31:6b:fb:27:b2:1b:e7:39:05:5a:
         b1:26:36:4c:ea:9c:3c:9a:47:ed:ef:0d:a1:78:ab:68:27:14:
         cb:12:3d:8f:80:8a:8a:aa:b3:14:db:ed:59:39:57:f7:99:a9:
         dd:34:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org