Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/qBuHmRz4Om7UiFfHkuyTExaZL04.roa
File:                     qBuHmRz4Om7UiFfHkuyTExaZL04.roa (raw, json)
Hash identifier:          RemO4VUwMkcxYD/op0PEPlSCZ2Tf0dQgdPzoZqN5w/Y=
Subject key identifier:   A8:1B:87:99:1C:F8:3A:6E:D4:88:57:C7:92:EC:93:13:16:99:2F:4E
Certificate issuer:       /CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Certificate serial:       01856EE69134DF0D42251E2AC305B7DB4034
Authority key identifier: 34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/qBuHmRz4Om7UiFfHkuyTExaZL04.roa
Signing time:             Sun 01 Jan 2023 19:54:42 +0000
ROA not before:           Sun 01 Jan 2023 19:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58061
IP address blocks:        91.226.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:e6:91:34:df:0d:42:25:1e:2a:c3:05:b7:db:40:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
        Validity
            Not Before: Jan  1 19:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a81b87991cf83a6ed48857c792ec931316992f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:e1:89:d1:b6:36:db:7d:64:71:a6:d0:81:
                    29:4f:f2:08:99:d2:df:94:4b:81:73:24:68:27:15:
                    78:cf:a2:bb:fa:f6:7c:c5:42:69:cf:c1:b5:f7:1f:
                    8e:cc:3c:98:66:71:d3:6c:28:b5:f4:33:33:bf:07:
                    6e:0e:b5:82:23:86:38:92:cc:dd:ee:3f:e2:3f:bb:
                    a0:3a:ad:a4:5c:43:c3:35:6e:b8:0b:bf:1b:94:66:
                    bf:25:39:4c:75:c9:38:bc:08:23:84:25:e8:40:4c:
                    10:7c:cd:ce:09:bb:d6:1a:88:61:49:ac:2f:a9:8a:
                    7d:20:f1:4b:55:1e:f1:16:4a:eb:f1:5d:f6:c9:68:
                    fe:11:aa:6e:19:44:f9:05:68:5e:27:c5:51:da:f2:
                    39:79:97:a0:85:0c:eb:55:26:eb:b1:07:12:4e:63:
                    c5:0e:4b:b7:c3:d9:34:d8:3f:16:d6:89:96:69:e1:
                    23:51:68:ae:31:1b:5a:9c:ca:31:81:a6:26:9b:df:
                    4b:46:2f:a3:94:cc:9a:c9:f8:03:74:16:b4:77:65:
                    4c:95:f3:9f:3d:ab:ed:00:f4:f2:ab:5b:23:d4:db:
                    9b:22:d5:cb:e3:ef:7f:7a:3a:d0:8a:d5:2e:b8:4a:
                    bf:d9:4e:76:1a:81:e7:87:31:ae:ac:59:9b:41:1b:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1B:87:99:1C:F8:3A:6E:D4:88:57:C7:92:EC:93:13:16:99:2F:4E
            X509v3 Authority Key Identifier:
                keyid:34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/qBuHmRz4Om7UiFfHkuyTExaZL04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:f4:3f:3e:26:27:fb:d0:69:b2:b7:41:ab:26:c0:df:ac:
         1c:f2:db:91:b4:fd:8d:c8:fa:a7:c8:6a:62:eb:b2:7e:7b:6e:
         5e:07:f0:c5:30:e0:8d:a5:af:72:f5:f9:1a:0c:b9:e2:03:50:
         66:8a:75:d2:48:b7:52:c8:26:d7:f3:e3:03:b2:3b:b8:cc:9a:
         14:6d:83:9f:4a:47:9c:c6:d2:19:e1:75:e7:8a:b9:bc:7c:d5:
         11:d5:b0:22:fb:35:8e:11:4a:16:d9:b5:90:92:b1:11:0d:b2:
         f5:b9:4a:2b:d1:1a:33:e6:2d:eb:6d:94:77:79:56:c1:97:51:
         0f:41:25:bb:d1:16:8e:16:31:ba:f9:9f:d2:01:1a:63:5d:7e:
         52:19:31:32:ff:ad:e0:27:a8:90:56:e9:de:23:11:30:31:dd:
         c4:92:4d:c5:4c:d3:b2:53:4c:46:fb:f0:4e:7b:36:6d:c0:32:
         08:09:b2:ce:76:33:c9:e6:3d:04:18:d5:5d:8a:19:3c:75:ab:
         e9:da:19:ce:01:02:3b:dc:0d:26:83:39:d3:1b:46:9b:f0:e8:
         de:b4:7e:2a:7c:b6:9e:be:cf:78:fa:b3:8d:ef:ab:19:15:ac:
         cb:b7:d4:93:70:38:ca:d1:1a:56:1e:f2:35:d0:b8:bd:8b:e4:
         a9:c6:d7:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu5pE03w1CJR4qwwW320A0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjA0ODY2ODlkMWY5Nzk5Y2MwN2NhZjdiYWQxNGMwZjFl
ZWNiMDYwHhcNMjMwMTAxMTk1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODFiODc5OTFjZjgzYTZlZDQ4ODU3Yzc5MmVjOTMxMzE2OTkyZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxzhidG2Ntt9ZHGm0IEpT/IImdLf
lEuBcyRoJxV4z6K7+vZ8xUJpz8G19x+OzDyYZnHTbCi19DMzvwduDrWCI4Y4kszd
7j/iP7ugOq2kXEPDNW64C78blGa/JTlMdck4vAgjhCXoQEwQfM3OCbvWGohhSawv
qYp9IPFLVR7xFkrr8V32yWj+EapuGUT5BWheJ8VR2vI5eZeghQzrVSbrsQcSTmPF
Dku3w9k02D8W1omWaeEjUWiuMRtanMoxgaYmm99LRi+jlMyayfgDdBa0d2VMlfOf
PavtAPTyq1sj1NubItXL4+9/ejrQitUuuEq/2U52GoHnhzGurFmbQRuN7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgbh5kc+Dpu1IhXx5LskxMWmS9OMB8GA1UdIwQY
MBaAFDRgSGaJ0fl5nMB8r3utFMDx7ssGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdCSVpvblItWG1jd0h5dmU2MFV3UEh1eXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9iNTczNGUtYTMyMi00MzFlLTk0ZjQt
NTRmMTA3YzY3MDJkLzEvcUJ1SG1SejRPbTdVaUZmSGt1eVRFeGFaTDA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9iNTczNGUtYTMyMi00MzFlLTk0ZjQtNTRmMTA3YzY3MDJk
LzEvTkdCSVpvblItWG1jd0h5dmU2MFV3UEh1eXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+L3MA0G
CSqGSIb3DQEBCwUAA4IBAQA/evQ/PiYn+9BpsrdBqybA36wc8tuRtP2NyPqnyGpi
67J+e25eB/DFMOCNpa9y9fkaDLniA1BminXSSLdSyCbX8+MDsju4zJoUbYOfSkec
xtIZ4XXnirm8fNUR1bAi+zWOEUoW2bWQkrERDbL1uUor0Roz5i3rbZR3eVbBl1EP
QSW70RaOFjG6+Z/SARpjXX5SGTEy/63gJ6iQVuneIxEwMd3Ekk3FTNOyU0xG+/BO
ezZtwDIICbLOdjPJ5j0EGNVdihk8davp2hnOAQI73A0mgznTG0ab8OjetH4qfLae
vs94+rON76sZFazLt9STcDjK0RpWHvI10Li9i+Spxtea
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:48 2024 by rpki-client on console-fra.rpki-client.org