Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BtNF5FWLZso5nvHKDyfm71a15xI.roa
File:                     BtNF5FWLZso5nvHKDyfm71a15xI.roa (raw, json)
Hash identifier:          OeL6uBt3w12F/Xw1m9uCjPDpVOyDEFM9peaT/l7wqt0=
Subject key identifier:   06:D3:45:E4:55:8B:66:CA:39:9E:F1:CA:0F:27:E6:EF:56:B5:E7:12
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01828EC440F0888C0CE713E8003FF392DD95
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BtNF5FWLZso5nvHKDyfm71a15xI.roa
Signing time:             Thu 11 Aug 2022 21:16:42 +0000
ROA not before:           Thu 11 Aug 2022 21:16:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203415
IP address blocks:        2a06:a005:5ac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8e:c4:40:f0:88:8c:0c:e7:13:e8:00:3f:f3:92:dd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 11 21:16:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=06d345e4558b66ca399ef1ca0f27e6ef56b5e712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:4c:05:71:89:c5:d0:dc:4e:87:05:bc:3d:
                    cd:95:54:76:53:85:0a:32:6b:3f:c6:05:c7:31:2b:
                    b2:70:ad:4f:69:27:2a:64:ad:2b:d3:19:87:71:2d:
                    b7:69:b9:75:9e:4f:4c:64:24:0a:9e:61:9b:f9:a5:
                    2d:41:ea:fb:5f:16:cc:20:d1:cf:51:db:a7:d2:06:
                    a3:8a:7f:8a:d0:d2:75:d0:90:3f:d0:04:88:bb:cb:
                    65:59:9e:c4:5e:ab:47:c6:35:7c:54:a5:15:c3:fb:
                    df:a4:b7:d2:95:11:44:c9:00:3a:a1:73:2d:65:06:
                    c1:74:95:90:1f:8e:a1:66:29:3a:1d:6f:e9:ec:39:
                    eb:79:a6:20:55:f7:ac:d8:8b:39:73:09:b6:db:5d:
                    1e:90:be:21:0e:4b:3c:3a:b9:4d:d5:46:4b:39:20:
                    79:6f:83:78:7f:89:c7:84:9e:22:34:39:1e:b2:4a:
                    4a:79:fb:63:a9:e3:1b:e6:55:02:92:2f:29:2d:f1:
                    44:e3:d9:8b:1d:6c:a9:c7:8e:a4:86:5d:a2:c3:ec:
                    8d:88:59:03:be:a1:12:67:d5:2c:87:84:d1:ed:6c:
                    7c:25:50:34:ac:72:fd:63:a7:cf:d3:07:72:22:1d:
                    ef:1d:c0:6c:4c:36:54:2c:33:c5:c1:30:c6:1c:53:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D3:45:E4:55:8B:66:CA:39:9E:F1:CA:0F:27:E6:EF:56:B5:E7:12
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BtNF5FWLZso5nvHKDyfm71a15xI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:18:81:ac:15:58:77:57:82:12:6e:92:b4:44:a3:1d:c5:
         cc:55:ed:e2:20:84:de:8d:37:4c:d4:0d:1d:76:04:99:8d:71:
         50:cb:d7:ae:22:73:ee:bd:07:77:01:b1:35:fe:98:43:95:b9:
         db:25:78:eb:48:73:67:99:76:71:42:49:cd:79:76:54:05:1e:
         97:65:c2:05:87:d0:22:8f:b7:79:ed:6c:9e:c0:dc:cb:1a:b8:
         07:3c:72:cf:8a:a1:c7:65:e5:f4:1e:53:e6:8b:5a:5d:b8:e5:
         0b:92:4d:67:99:88:47:96:b8:7d:7c:7d:f8:3f:fe:b9:cd:11:
         ad:fa:29:87:0d:de:b1:37:bd:62:37:87:0b:f2:35:f4:14:56:
         d7:3f:6d:0a:8d:92:a1:59:22:75:f5:f6:d5:bc:f2:ad:60:bb:
         04:12:94:86:d0:8a:6a:b9:1c:de:e6:07:a6:fa:fe:80:e4:4c:
         b7:7a:3e:61:f0:57:46:da:0a:f7:c4:be:c6:25:9e:5c:08:a6:
         8f:d4:be:46:9c:68:f0:75:63:d3:88:33:7d:56:fa:d8:f3:a1:
         e4:4f:a0:cf:be:aa:8f:56:fc:aa:d4:f7:a7:b9:aa:6e:43:48:
         85:be:0d:21:2f:6a:9d:5e:30:72:da:ac:7c:c6:2e:12:af:c4:
         99:95:55:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYKOxEDwiIwM5xPoAD/zkt2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODExMjExNjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmQzNDVlNDU1OGI2NmNhMzk5ZWYxY2EwZjI3ZTZlZjU2YjVlNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmxMBXGJxdDcTocFvD3NlVR2U4UK
Mms/xgXHMSuycK1PaScqZK0r0xmHcS23abl1nk9MZCQKnmGb+aUtQer7XxbMINHP
Udun0gajin+K0NJ10JA/0ASIu8tlWZ7EXqtHxjV8VKUVw/vfpLfSlRFEyQA6oXMt
ZQbBdJWQH46hZik6HW/p7DnreaYgVfes2Is5cwm2210ekL4hDks8OrlN1UZLOSB5
b4N4f4nHhJ4iNDkeskpKeftjqeMb5lUCki8pLfFE49mLHWypx46khl2iw+yNiFkD
vqESZ9Ush4TR7Wx8JVA0rHL9Y6fP0wdyIh3vHcBsTDZULDPFwTDGHFP9VwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAbTReRVi2bKOZ7xyg8n5u9WtecSMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQnRORjVGV0xac281bnZIS0R5Zm03MWExNXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQWs
MA0GCSqGSIb3DQEBCwUAA4IBAQBnPRiBrBVYd1eCEm6StESjHcXMVe3iIITejTdM
1A0ddgSZjXFQy9euInPuvQd3AbE1/phDlbnbJXjrSHNnmXZxQknNeXZUBR6XZcIF
h9Aij7d57WyewNzLGrgHPHLPiqHHZeX0HlPmi1pduOULkk1nmYhHlrh9fH34P/65
zRGt+imHDd6xN71iN4cL8jX0FFbXP20KjZKhWSJ19fbVvPKtYLsEEpSG0IpquRze
5gem+v6A5Ey3ej5h8FdG2gr3xL7GJZ5cCKaP1L5GnGjwdWPTiDN9VvrY86HkT6DP
vqqPVvyq1PenuapuQ0iFvg0hL2qdXjBy2qx8xi4Sr8SZlVUg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org