Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/OHNDlJhu3jWZLmVLVBEWmA_HHYk.roa
File:                     OHNDlJhu3jWZLmVLVBEWmA_HHYk.roa (raw, json)
Hash identifier:          YhTlIFy5UOFmE9GXc5M93or4wceWuB2yspbQN3S8cdQ=
Subject key identifier:   38:73:43:94:98:6E:DE:35:99:2E:65:4B:54:11:16:98:0F:C7:1D:89
Certificate issuer:       /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial:       0183A1EED07CD13503364FEF78D1DAA50F46
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/OHNDlJhu3jWZLmVLVBEWmA_HHYk.roa
Signing time:             Tue 04 Oct 2022 07:38:46 +0000
ROA not before:           Tue 04 Oct 2022 07:38:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29713
IP address blocks:        80.76.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a1:ee:d0:7c:d1:35:03:36:4f:ef:78:d1:da:a5:0f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
        Validity
            Not Before: Oct  4 07:38:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38734394986ede35992e654b541116980fc71d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:17:c6:7c:76:a0:e3:18:cd:62:d3:b3:0e:
                    98:70:87:5b:57:10:a3:bf:fc:85:38:8a:76:6d:83:
                    7b:2c:41:45:6c:d6:cf:45:ee:52:bc:fe:75:34:9f:
                    49:62:3f:38:f0:74:ac:93:dd:26:02:ef:0c:85:d5:
                    90:27:a8:01:9d:ae:5f:3c:4e:eb:d0:a9:fa:87:48:
                    71:05:34:64:99:4e:e6:71:16:0a:1d:35:ff:3a:0e:
                    19:28:88:26:17:65:a6:64:dd:5a:28:eb:04:65:3f:
                    46:f9:e3:87:08:37:03:d7:f8:35:b4:0f:b5:02:39:
                    af:14:e7:b3:68:b7:94:36:25:df:04:34:09:70:aa:
                    c8:a7:a8:cc:f0:7f:57:94:01:bd:08:8b:9d:d4:b1:
                    60:4c:25:84:e9:be:e4:39:12:80:2e:c5:c5:2f:49:
                    68:62:60:d1:6e:73:36:24:b2:ce:74:56:1d:a5:62:
                    1b:57:a7:40:1a:35:4a:60:eb:36:ca:df:46:c8:73:
                    4d:f6:a8:fa:2e:0d:2d:4b:1a:8f:28:28:21:11:83:
                    6b:82:67:27:7c:cf:82:90:63:01:55:af:7b:a7:43:
                    2b:e2:d6:50:1d:a9:4f:e2:0a:39:fa:5b:a0:02:0e:
                    ee:b6:3b:a8:91:c7:a3:39:e4:74:38:c5:0c:84:9f:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:73:43:94:98:6E:DE:35:99:2E:65:4B:54:11:16:98:0F:C7:1D:89
            X509v3 Authority Key Identifier:
                keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/OHNDlJhu3jWZLmVLVBEWmA_HHYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:1f:3d:09:ad:b2:f7:9f:fd:ed:fa:16:c0:6d:d3:cb:5b:
         71:44:15:27:d8:0a:13:ac:19:90:97:0c:d7:d5:19:2a:5e:a4:
         fe:cd:86:f7:ca:0d:1c:46:26:92:d3:86:9e:1a:1e:2f:a7:ab:
         7a:9d:07:cc:c3:8f:95:1a:85:18:e6:8e:7f:61:80:20:45:0d:
         60:d3:8a:3e:01:7a:d7:47:ea:6b:cf:86:70:c6:9d:20:aa:2b:
         6b:e9:23:45:c2:94:8b:d0:61:f1:0c:69:19:dc:79:a5:d5:6c:
         cd:e6:60:1c:2c:de:e3:47:d7:2f:53:ba:0f:cd:61:2c:f8:5b:
         a5:a9:d6:02:de:f1:6d:7c:6c:30:5b:ea:0a:8a:f9:a0:68:c9:
         dd:96:ff:21:c5:36:a8:d7:cd:65:d5:35:44:aa:46:ca:75:d0:
         d8:db:60:36:ed:b1:ef:59:e3:0c:56:19:80:5f:25:5c:04:98:
         ef:04:e3:d5:5d:6f:d1:62:b5:35:c7:16:6a:0b:8d:98:cb:31:
         57:7a:38:d8:f5:3e:b7:04:c8:dc:84:01:b4:04:26:ae:da:b1:
         48:0e:60:c0:91:62:2f:6e:0e:14:7d:55:a0:08:a4:77:59:57:
         0e:cd:f3:63:d7:fc:48:b1:c1:32:de:e7:56:e2:7e:cd:44:2a:
         44:01:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org