Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/ib32Uv17-O_p9sLpFRb8KcRSueA.roa
File:                     ib32Uv17-O_p9sLpFRb8KcRSueA.roa (raw, json)
Hash identifier:          wNMccw8Mgy+RkZRzxE2MlBmOJSqeKRJZ/o2ll3c60hY=
Subject key identifier:   89:BD:F6:52:FD:7B:F8:EF:E9:F6:C2:E9:15:16:FC:29:C4:52:B9:E0
Certificate issuer:       /CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Certificate serial:       CA3863
Authority key identifier: 34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/ib32Uv17-O_p9sLpFRb8KcRSueA.roa
Signing time:             Tue 26 Apr 2022 14:45:35 +0000
ROA not before:           Tue 26 Apr 2022 14:45:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        91.226.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13252707 (0xca3863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
        Validity
            Not Before: Apr 26 14:45:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89bdf652fd7bf8efe9f6c2e91516fc29c452b9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:86:15:1e:26:fd:5e:f9:24:30:c0:59:f9:de:
                    78:0d:11:ce:0c:ce:de:33:77:af:52:72:18:77:45:
                    e0:6b:dc:27:fb:7b:b6:3f:b5:ed:8d:c0:39:12:ed:
                    74:66:c3:8d:9b:93:92:69:5b:5e:9b:33:a9:8c:b2:
                    55:e1:43:68:ac:88:c2:5d:a0:06:8e:e6:74:da:61:
                    c9:b2:f5:68:b0:a1:bb:3f:31:74:54:7e:f6:c3:2f:
                    ee:c2:a9:72:dd:17:c4:0d:7b:5d:b2:08:c3:51:5b:
                    b7:d4:cf:f5:e4:8a:1f:5a:12:af:c0:47:25:c2:1d:
                    79:f3:16:1e:94:d8:1f:36:34:1e:0d:87:6f:de:46:
                    a8:4a:c4:6b:f7:06:9d:96:e0:57:fc:f1:99:82:89:
                    5b:96:0e:47:1b:60:1d:eb:f9:b7:e8:0b:d9:c3:ad:
                    16:a4:48:54:2c:c9:b1:60:91:bf:03:a9:81:ca:c5:
                    36:99:3b:f4:06:d2:3e:86:3a:c9:cb:97:dd:60:ae:
                    d0:27:88:43:fd:85:6a:d5:bb:a3:9a:c0:2b:43:6d:
                    66:91:a4:03:a1:0d:f4:81:0d:fb:48:89:e7:75:fc:
                    99:5c:23:60:76:9d:b3:fb:db:5e:a4:19:0a:37:12:
                    44:ab:b2:67:80:e7:fa:ee:c9:ef:b6:52:14:4c:7a:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:F6:52:FD:7B:F8:EF:E9:F6:C2:E9:15:16:FC:29:C4:52:B9:E0
            X509v3 Authority Key Identifier:
                keyid:34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/ib32Uv17-O_p9sLpFRb8KcRSueA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:07:01:91:76:e8:7a:fc:8c:67:ed:9b:9c:fa:96:aa:ac:10:
         b0:01:11:71:33:56:e8:4a:97:c2:fa:62:41:4b:22:c2:b1:29:
         92:e9:3c:a4:f2:a3:0a:08:8d:3d:d9:11:93:3d:a7:1b:19:fc:
         ab:bf:1e:1b:7e:6c:30:ac:70:dc:00:ed:4f:8b:64:9e:d7:3d:
         d4:73:44:82:30:47:2d:86:f1:be:04:79:30:d7:43:78:80:6e:
         eb:00:23:61:10:73:ce:1d:cc:7d:e4:d6:51:76:4b:6b:2f:8a:
         e3:a6:6e:65:2a:6b:69:2e:b1:3a:d4:2f:68:63:0d:a4:bd:30:
         76:39:fb:05:91:b6:70:3f:f3:ed:01:54:35:c0:48:7b:f2:45:
         49:6d:09:d8:11:9e:e0:ec:3c:69:93:f7:0b:e8:5f:da:c5:eb:
         92:95:a4:53:86:02:52:e6:a8:06:f5:56:97:73:90:b2:a6:48:
         77:e3:84:60:6f:f9:f7:ab:3b:6a:f6:08:e1:97:ad:b6:a3:00:
         d3:8e:d9:de:ce:88:7b:4b:b3:f0:ad:cc:a2:0e:a8:9c:6d:9d:
         03:42:1f:a4:4c:4d:96:75:44:3d:81:42:8f:45:b6:d5:80:e9:
         bc:0f:d3:38:7b:e5:86:77:58:bd:ac:45:bf:70:a7:15:11:25:
         2d:d2:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org