Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/c3m7NP2P-CKo61QK8fPblt8yzi4.roa
File:                     c3m7NP2P-CKo61QK8fPblt8yzi4.roa (raw, json)
Hash identifier:          u7zVSvFdf+wXsgbbRJgByRQu7FbVJo3ECAmxA57vAYs=
Subject key identifier:   73:79:BB:34:FD:8F:F8:22:A8:EB:54:0A:F1:F3:DB:96:DF:32:CE:2E
Certificate issuer:       /CN=18f2f0de77f27a9d98b844550431b6880cd7368c
Certificate serial:       18635355
Authority key identifier: 18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/c3m7NP2P-CKo61QK8fPblt8yzi4.roa
Signing time:             Sat 01 Jan 2022 14:54:51 +0000
ROA not before:           Sat 01 Jan 2022 14:54:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16347
IP address blocks:        185.14.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409162581 (0x18635355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f2f0de77f27a9d98b844550431b6880cd7368c
        Validity
            Not Before: Jan  1 14:54:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7379bb34fd8ff822a8eb540af1f3db96df32ce2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:5d:70:53:f3:25:1f:1d:d7:d9:22:f4:47:
                    23:6d:d1:04:fe:fd:cb:cc:1a:09:ad:e3:b5:8d:13:
                    b3:4b:6c:81:61:a0:04:3f:dc:0c:dd:f6:74:ca:69:
                    fd:8a:e0:b6:48:48:19:43:e8:e6:5e:b0:6a:ce:6e:
                    9d:34:f8:40:5a:04:d5:99:91:6f:d4:5b:29:fb:4f:
                    25:78:af:c0:42:59:6e:a0:74:6b:0f:a7:3c:2f:d4:
                    c7:65:65:9a:f1:fb:63:bc:97:34:a9:f8:a8:be:3d:
                    e1:3f:41:b1:01:48:02:38:2e:bf:99:ea:d3:52:5d:
                    c9:de:aa:7b:58:e4:b5:09:53:16:cb:70:df:24:a0:
                    82:04:ec:38:72:7a:75:d4:da:79:2b:c4:3d:07:08:
                    9e:49:07:46:5d:c4:76:56:bf:04:27:11:58:37:a1:
                    e8:46:1f:27:19:63:58:9b:16:3a:f3:48:81:89:a9:
                    88:96:69:58:e4:f9:31:84:f0:be:ba:af:1d:b5:48:
                    75:7d:c7:30:1a:9c:c1:3e:1d:9d:1a:c4:01:7a:48:
                    0f:40:b8:b5:d2:4c:3d:be:d0:5a:29:60:a5:77:4d:
                    19:74:31:7e:a9:9d:0a:60:78:5b:55:c8:91:5b:28:
                    16:1d:9e:84:c9:75:f1:4b:a5:4c:91:1a:93:51:0f:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:BB:34:FD:8F:F8:22:A8:EB:54:0A:F1:F3:DB:96:DF:32:CE:2E
            X509v3 Authority Key Identifier:
                keyid:18:F2:F0:DE:77:F2:7A:9D:98:B8:44:55:04:31:B6:88:0C:D7:36:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPLw3nfyep2YuERVBDG2iAzXNow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/c3m7NP2P-CKo61QK8fPblt8yzi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/461b90-2e18-42f8-94b8-66d25e139364/1/GPLw3nfyep2YuERVBDG2iAzXNow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.14.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:d7:de:63:c5:24:77:c4:1e:2e:6b:a5:4d:97:1d:d0:a3:
         f2:9e:75:6a:73:cb:a3:ea:8e:f5:60:10:a2:26:15:9a:cc:41:
         64:a7:8d:05:6c:1d:3f:05:e8:fc:78:83:52:4f:62:97:87:99:
         1a:a6:2a:cc:51:9d:e8:b6:25:d1:c6:f2:2b:0d:e2:8f:9b:da:
         b4:70:77:d4:d6:fd:3b:30:aa:c1:24:cd:e8:74:0f:81:e2:cd:
         a0:86:f7:f3:9f:92:6e:d4:ce:25:ff:78:f5:85:30:9b:58:34:
         73:ca:91:9b:ee:fb:36:b5:dd:ed:e6:03:bd:22:d9:d4:fc:23:
         65:aa:37:2b:56:cb:9e:bc:c5:6b:2b:d5:42:e3:6f:85:34:36:
         6a:c7:d9:fd:f3:b9:10:e1:0c:98:e9:91:1e:80:26:b2:cc:10:
         fa:2e:b9:cb:fd:d9:cf:00:15:b3:78:2d:6d:1d:af:28:ba:69:
         72:47:d2:48:bc:db:af:35:16:04:9a:77:75:e1:de:bd:8c:85:
         2f:d1:9c:04:61:59:4e:09:e1:88:3d:78:11:fa:39:85:fb:05:
         44:4c:d1:86:c1:11:66:24:32:ee:c4:0f:90:84:55:4d:f6:00:
         62:26:c8:a4:e1:7a:5a:bd:f6:cf:22:2d:7f:2e:d7:b5:38:f9:
         7e:1b:a9:e6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGGNTVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OGYyZjBkZTc3ZjI3YTlkOThiODQ0NTUwNDMxYjY4ODBjZDczNjhjMB4XDTIyMDEw
MTE0NTQ1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzM3OWJiMzRmZDhm
ZjgyMmE4ZWI1NDBhZjFmM2RiOTZkZjMyY2UyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK80XXBT8yUfHdfZIvRHI23RBP79y8waCa3jtY0Ts0tsgWGg
BD/cDN32dMpp/YrgtkhIGUPo5l6was5unTT4QFoE1ZmRb9RbKftPJXivwEJZbqB0
aw+nPC/Ux2VlmvH7Y7yXNKn4qL494T9BsQFIAjguv5nq01Jdyd6qe1jktQlTFstw
3ySgggTsOHJ6ddTaeSvEPQcInkkHRl3Edla/BCcRWDeh6EYfJxljWJsWOvNIgYmp
iJZpWOT5MYTwvrqvHbVIdX3HMBqcwT4dnRrEAXpID0C4tdJMPb7QWilgpXdNGXQx
fqmdCmB4W1XIkVsoFh2ehMl18UulTJEak1EPeTMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRzebs0/Y/4IqjrVArx89uW3zLOLjAfBgNVHSMEGDAWgBQY8vDed/J6nZi4
RFUEMbaIDNc2jDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dQTHczbmZ5ZXAyWXVFUlZCREcyaUF6WE5vdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNDYxYjkwLTJlMTgtNDJmOC05NGI4LTY2ZDI1ZTEzOTM2NC8x
L2MzbTdOUDJQLUNLbzYxUUs4ZlBibHQ4eXppNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
NDYxYjkwLTJlMTgtNDJmOC05NGI4LTY2ZDI1ZTEzOTM2NC8xL0dQTHczbmZ5ZXAy
WXVFUlZCREcyaUF6WE5vdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkOszANBgkqhkiG9w0BAQsFAAOC
AQEAYQ/X3mPFJHfEHi5rpU2XHdCj8p51anPLo+qO9WAQoiYVmsxBZKeNBWwdPwXo
/HiDUk9il4eZGqYqzFGd6LYl0cbyKw3ij5vatHB31Nb9OzCqwSTN6HQPgeLNoIb3
85+SbtTOJf949YUwm1g0c8qRm+77NrXd7eYDvSLZ1PwjZao3K1bLnrzFayvVQuNv
hTQ2asfZ/fO5EOEMmOmRHoAmsswQ+i65y/3ZzwAVs3gtbR2vKLppckfSSLzbrzUW
BJp3deHevYyFL9GcBGFZTgnhiD14Efo5hfsFREzRhsERZiQy7sQPkIRVTfYAYibI
pOF6Wr32zyItfy7XtTj5fhup5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:13 2024 by rpki-client on console-fra.rpki-client.org