Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/MYJW6F3ueUFtRGtMy6gkMKWMUzM.roa
File:                     MYJW6F3ueUFtRGtMy6gkMKWMUzM.roa (raw, json)
Hash identifier:          emUZuDWc9Paw5mzdvHIQfgFdC1UcRheqBQWiT8VlTT4=
Subject key identifier:   31:82:56:E8:5D:EE:79:41:6D:44:6B:4C:CB:A8:24:30:A5:8C:53:33
Certificate issuer:       /CN=b8dd97d554fcfc59ddfd062e262a4b3962fe6796
Certificate serial:       030FE474
Authority key identifier: B8:DD:97:D5:54:FC:FC:59:DD:FD:06:2E:26:2A:4B:39:62:FE:67:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/MYJW6F3ueUFtRGtMy6gkMKWMUzM.roa
Signing time:             Sat 01 Jan 2022 05:51:50 +0000
ROA not before:           Sat 01 Jan 2022 05:51:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.8.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51373172 (0x30fe474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dd97d554fcfc59ddfd062e262a4b3962fe6796
        Validity
            Not Before: Jan  1 05:51:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=318256e85dee79416d446b4ccba82430a58c5333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:df:2d:ac:a2:2a:64:ea:f6:70:b5:fc:0b:
                    e2:a4:66:cc:af:e7:86:e6:5d:cb:95:56:be:4a:eb:
                    25:25:8f:62:55:e4:8c:6f:62:3f:8a:03:ad:68:5c:
                    7c:3e:de:3e:4e:79:3a:6d:0a:36:1d:98:73:fe:44:
                    f3:a4:48:52:07:5a:43:91:c5:77:ff:97:22:e9:51:
                    2a:81:b4:f6:7e:4b:02:fb:10:5b:ab:ca:72:a7:72:
                    24:1c:ba:b4:1b:29:c2:6f:8d:24:fc:90:cd:d5:6c:
                    1a:2a:72:8f:22:36:56:80:51:c0:f9:89:af:1f:02:
                    cf:97:97:5a:ce:2a:65:cc:39:1b:d9:dd:d0:8b:0f:
                    32:0f:76:ac:67:c1:8c:41:f3:a7:60:09:02:5d:e3:
                    7a:73:5a:95:5e:59:78:b8:44:02:3f:96:3c:22:bd:
                    10:29:1a:57:bb:f0:a5:9f:1c:c7:a2:6c:f8:dd:dd:
                    76:43:ea:27:66:99:c7:17:1e:a8:10:c8:73:55:a7:
                    c6:ca:1e:bd:a0:6a:9b:6c:d7:12:ad:8e:01:8b:b0:
                    cb:4e:f9:4f:c3:71:20:24:02:7f:c8:47:3f:c7:a9:
                    45:a9:2a:dd:15:69:6f:a6:ab:99:96:97:c0:b2:61:
                    fc:f8:59:d7:36:0e:59:52:a0:99:11:28:ef:e9:4a:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:82:56:E8:5D:EE:79:41:6D:44:6B:4C:CB:A8:24:30:A5:8C:53:33
            X509v3 Authority Key Identifier:
                keyid:B8:DD:97:D5:54:FC:FC:59:DD:FD:06:2E:26:2A:4B:39:62:FE:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/MYJW6F3ueUFtRGtMy6gkMKWMUzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:c1:de:1c:66:46:23:18:3c:36:a8:32:46:9d:65:6d:0b:
         a9:20:a8:e6:b3:9d:bb:3e:0e:3e:eb:2e:44:da:bf:b9:19:dc:
         0b:d8:13:d5:50:eb:e4:36:5a:99:d4:4f:1e:25:78:5c:ed:2c:
         9a:45:d4:e7:48:ed:20:af:88:63:d8:34:4a:32:32:a5:d5:10:
         a2:bd:d0:63:d3:fa:22:e5:85:6e:8c:46:01:f3:ac:9e:1c:2a:
         5e:12:6c:db:42:f1:42:57:00:cf:50:c6:e7:82:a2:ae:84:c5:
         9f:c0:cb:8a:db:ea:21:a8:e6:32:22:a1:97:fc:65:28:19:43:
         35:20:ee:81:84:16:82:b8:61:1f:a2:ce:b8:82:ec:e1:1c:0c:
         f2:a4:91:e0:78:b6:36:6b:90:c9:e0:98:0b:14:d1:44:d1:97:
         c8:59:25:1c:4c:2f:d0:1e:88:2b:73:c0:56:c1:30:64:a6:22:
         5c:c4:a7:82:fa:ac:f5:79:fb:d4:8a:fb:b1:a2:ea:08:4f:fb:
         1c:4b:85:e5:93:4a:2c:02:24:30:f2:f0:0f:df:17:72:bd:d5:
         c2:40:64:53:00:52:d2:73:d6:d6:22:5b:e2:ee:fc:ab:d8:7e:
         44:91:2c:a5:b6:58:78:81:89:3b:81:e2:75:50:f9:98:36:a4:
         2b:68:40:d4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAw/kdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OGRkOTdkNTU0ZmNmYzU5ZGRmZDA2MmUyNjJhNGIzOTYyZmU2Nzk2MB4XDTIyMDEw
MTA1NTE1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzE4MjU2ZTg1ZGVl
Nzk0MTZkNDQ2YjRjY2JhODI0MzBhNThjNTMzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmk3y2soipk6vZwtfwL4qRmzK/nhuZdy5VWvkrrJSWPYlXk
jG9iP4oDrWhcfD7ePk55Om0KNh2Yc/5E86RIUgdaQ5HFd/+XIulRKoG09n5LAvsQ
W6vKcqdyJBy6tBspwm+NJPyQzdVsGipyjyI2VoBRwPmJrx8Cz5eXWs4qZcw5G9nd
0IsPMg92rGfBjEHzp2AJAl3jenNalV5ZeLhEAj+WPCK9ECkaV7vwpZ8cx6Js+N3d
dkPqJ2aZxxceqBDIc1WnxsoevaBqm2zXEq2OAYuwy075T8NxICQCf8hHP8epRakq
3RVpb6armZaXwLJh/PhZ1zYOWVKgmREo7+lKgzECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQxglboXe55QW1Ea0zLqCQwpYxTMzAfBgNVHSMEGDAWgBS43ZfVVPz8Wd39
Bi4mKks5Yv5nljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VOMlgxVlQ4X0ZuZF9RWXVKaXBMT1dMLVo1WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNzlmZjljLTY5ZWItNGY4YS1iN2M5LWIzMjE3NTM0ZjI3MC8x
L01ZSlc2RjN1ZVVGdFJHdE15NmdrTUtXTVV6TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NzlmZjljLTY5ZWItNGY4YS1iN2M5LWIzMjE3NTM0ZjI3MC8xL3VOMlgxVlQ4X0Zu
ZF9RWXVKaXBMT1dMLVo1WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0ISDANBgkqhkiG9w0BAQsFAAOC
AQEAfMDB3hxmRiMYPDaoMkadZW0LqSCo5rOduz4OPusuRNq/uRncC9gT1VDr5DZa
mdRPHiV4XO0smkXU50jtIK+IY9g0SjIypdUQor3QY9P6IuWFboxGAfOsnhwqXhJs
20LxQlcAz1DG54KiroTFn8DLitvqIajmMiKhl/xlKBlDNSDugYQWgrhhH6LOuILs
4RwM8qSR4Hi2NmuQyeCYCxTRRNGXyFklHEwv0B6IK3PAVsEwZKYiXMSngvqs9Xn7
1Ir7saLqCE/7HEuF5ZNKLAIkMPLwD98Xcr3VwkBkUwBS0nPW1iJb4u78q9h+RJEs
pbZYeIGJO4HidVD5mDakK2hA1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org