Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/jd8j0xSD8FSaWlA6IOzFYOGAqks.roa
File:                     jd8j0xSD8FSaWlA6IOzFYOGAqks.roa (raw, json)
Hash identifier:          toxAA06U2ETYfQreINUucxqYgv5NLNLQ22+y3hNZsPU=
Subject key identifier:   8D:DF:23:D3:14:83:F0:54:9A:5A:50:3A:20:EC:C5:60:E1:80:AA:4B
Certificate issuer:       /CN=989ab4e45f6426214cf0a4766e0aa62a4bb6107f
Certificate serial:       01856DC1BE510836079542AE702E18CCCF93
Authority key identifier: 98:9A:B4:E4:5F:64:26:21:4C:F0:A4:76:6E:0A:A6:2A:4B:B6:10:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJq05F9kJiFM8KR2bgqmKku2EH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/jd8j0xSD8FSaWlA6IOzFYOGAqks.roa
Signing time:             Sun 01 Jan 2023 14:34:51 +0000
ROA not before:           Sun 01 Jan 2023 14:34:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208485
IP address blocks:        146.19.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:be:51:08:36:07:95:42:ae:70:2e:18:cc:cf:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989ab4e45f6426214cf0a4766e0aa62a4bb6107f
        Validity
            Not Before: Jan  1 14:34:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ddf23d31483f0549a5a503a20ecc560e180aa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:6c:53:8b:41:70:fe:d2:ea:0c:5c:0e:09:
                    f2:70:df:48:5e:65:30:72:6f:4a:c3:10:81:c2:8f:
                    3c:54:f3:91:c0:b0:5e:50:3c:76:22:b4:bb:14:45:
                    dc:f7:d5:52:11:dd:0c:79:94:d1:35:36:90:b3:56:
                    65:13:e5:20:8d:14:f5:90:5d:74:81:4b:f3:78:22:
                    9f:20:72:d9:e0:a3:33:51:f7:d8:7a:95:8d:18:b4:
                    91:7d:8e:73:37:36:b2:43:11:44:c3:5a:3f:6a:a4:
                    64:77:d6:08:fc:6f:7b:ca:17:a7:7f:b4:d9:9c:2f:
                    f5:d7:cf:d5:c5:3b:5c:16:bc:7e:67:63:82:6a:d6:
                    e4:98:77:19:b6:67:14:d9:06:c1:80:eb:7a:5e:3b:
                    80:b1:bd:6c:66:c2:2c:17:15:c0:00:e1:81:31:ed:
                    d8:2f:bb:99:d0:72:6b:e1:e4:4c:24:ab:aa:f7:2a:
                    53:66:de:db:a9:fd:84:79:ff:86:0e:fc:71:33:fc:
                    1f:32:fc:81:80:63:8c:33:e2:a6:b2:72:58:07:f7:
                    a0:41:5d:01:fc:a5:84:a9:77:6d:98:bc:23:03:58:
                    56:f5:1b:9a:db:c3:1d:72:4b:6d:d1:cc:28:47:62:
                    a1:a8:4a:1f:92:97:75:b1:66:e1:32:0c:f3:dd:f5:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:23:D3:14:83:F0:54:9A:5A:50:3A:20:EC:C5:60:E1:80:AA:4B
            X509v3 Authority Key Identifier:
                keyid:98:9A:B4:E4:5F:64:26:21:4C:F0:A4:76:6E:0A:A6:2A:4B:B6:10:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJq05F9kJiFM8KR2bgqmKku2EH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/jd8j0xSD8FSaWlA6IOzFYOGAqks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/80d10d-b517-42d6-8134-1f49d798ca2b/1/mJq05F9kJiFM8KR2bgqmKku2EH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:92:33:20:01:35:92:54:3d:97:06:24:5e:99:9d:ff:0f:23:
         e6:89:d1:fe:ad:8a:a5:54:44:9e:97:ea:44:ab:de:01:34:ff:
         15:d9:11:8f:33:56:c2:3e:47:d2:ad:eb:52:f5:03:97:66:0d:
         fc:40:68:73:f8:5e:4e:d2:c6:a8:94:da:8e:fe:44:93:98:e7:
         d4:2f:95:75:e0:39:50:5c:1e:f5:b3:2b:ce:99:26:73:a1:df:
         51:cb:19:2b:15:72:7d:9f:a7:4b:ea:23:f7:8c:fa:62:be:58:
         58:ab:19:bc:8a:69:b0:72:2b:b0:1d:71:20:ef:1a:61:cf:f5:
         5b:37:85:48:a0:09:8a:69:1d:34:bf:1b:5f:72:0d:59:72:86:
         20:0d:78:60:5b:1f:3f:bc:87:cf:71:7b:d4:67:d3:d8:92:cc:
         a6:46:a0:e6:cd:98:52:7e:cd:a3:aa:ca:bc:39:5d:c8:1a:f5:
         bd:64:5d:a7:bb:59:c8:d2:b8:ce:f9:a6:a8:40:9b:d3:1e:3b:
         cd:fa:d0:59:84:89:c8:e7:70:00:39:f6:c1:aa:c1:0e:e7:f4:
         47:e2:16:a3:a0:f6:d8:5f:13:d6:65:57:11:a2:32:72:f4:8a:
         20:a1:12:e2:2b:81:9b:04:35:f9:78:1f:bb:d6:c1:94:85:44:
         73:cf:9b:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwb5RCDYHlUKucC4YzM+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OWFiNGU0NWY2NDI2MjE0Y2YwYTQ3NjZlMGFhNjJhNGJi
NjEwN2YwHhcNMjMwMTAxMTQzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGRmMjNkMzE0ODNmMDU0OWE1YTUwM2EyMGVjYzU2MGUxODBhYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTtsU4tBcP7S6gxcDgnycN9IXmUw
cm9KwxCBwo88VPORwLBeUDx2IrS7FEXc99VSEd0MeZTRNTaQs1ZlE+UgjRT1kF10
gUvzeCKfIHLZ4KMzUffYepWNGLSRfY5zNzayQxFEw1o/aqRkd9YI/G97yhenf7TZ
nC/118/VxTtcFrx+Z2OCatbkmHcZtmcU2QbBgOt6XjuAsb1sZsIsFxXAAOGBMe3Y
L7uZ0HJr4eRMJKuq9ypTZt7bqf2Eef+GDvxxM/wfMvyBgGOMM+KmsnJYB/egQV0B
/KWEqXdtmLwjA1hW9Rua28Mdcktt0cwoR2KhqEofkpd1sWbhMgzz3fWbNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI3fI9MUg/BUmlpQOiDsxWDhgKpLMB8GA1UdIwQY
MBaAFJiatORfZCYhTPCkdm4KpipLthB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpxMDVGOWtKaUZNOEtSMmJncW1La3UyRUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MGQxMGQtYjUxNy00MmQ2LTgxMzQt
MWY0OWQ3OThjYTJiLzEvamQ4ajB4U0Q4RlNhV2xBNklPekZZT0dBcWtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84MGQxMGQtYjUxNy00MmQ2LTgxMzQtMWY0OWQ3OThjYTJi
LzEvbUpxMDVGOWtKaUZNOEtSMmJncW1La3UyRUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPHMA0G
CSqGSIb3DQEBCwUAA4IBAQCukjMgATWSVD2XBiRemZ3/DyPmidH+rYqlVESel+pE
q94BNP8V2RGPM1bCPkfSretS9QOXZg38QGhz+F5O0saolNqO/kSTmOfUL5V14DlQ
XB71syvOmSZzod9RyxkrFXJ9n6dL6iP3jPpivlhYqxm8immwciuwHXEg7xphz/Vb
N4VIoAmKaR00vxtfcg1ZcoYgDXhgWx8/vIfPcXvUZ9PYksymRqDmzZhSfs2jqsq8
OV3IGvW9ZF2nu1nI0rjO+aaoQJvTHjvN+tBZhInI53AAOfbBqsEO5/RH4hajoPbY
XxPWZVcRojJy9IogoRLiK4GbBDX5eB+71sGUhURzz5tQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org