Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/1rStzVnO9n4-v8ejs1c2Ti_nJaU.roa
File:                     1rStzVnO9n4-v8ejs1c2Ti_nJaU.roa (raw, json)
Hash identifier:          VJ15AIlRTjIiwketRqezkpacvAZJHedZpJlHBoiMlXo=
Subject key identifier:   D6:B4:AD:CD:59:CE:F6:7E:3E:BF:C7:A3:B3:57:36:4E:2F:E7:25:A5
Certificate issuer:       /CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Certificate serial:       548399
Authority key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/1rStzVnO9n4-v8ejs1c2Ti_nJaU.roa
Signing time:             Sat 01 Jan 2022 01:52:39 +0000
ROA not before:           Sat 01 Jan 2022 01:52:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        146.19.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5538713 (0x548399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
        Validity
            Not Before: Jan  1 01:52:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6b4adcd59cef67e3ebfc7a3b357364e2fe725a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:a2:9f:ae:a5:d8:5f:0b:3a:2b:93:d0:37:
                    34:ca:c6:8f:48:24:bc:9c:0c:9d:8c:f0:d6:de:97:
                    67:d7:63:f1:1b:bf:c6:fd:36:b2:62:eb:e6:66:62:
                    08:77:a2:e4:a4:08:4a:99:e2:37:a4:9a:0a:29:1c:
                    f6:49:c2:e7:37:90:84:35:c1:98:3b:da:08:60:14:
                    89:21:43:68:f6:df:4f:55:ec:c8:24:43:03:5e:8c:
                    68:53:9c:b3:46:7a:6b:49:55:6a:18:a8:02:aa:b3:
                    b4:d4:f1:92:25:84:00:69:e9:da:42:6b:09:fc:9b:
                    9d:86:fe:07:bd:2d:90:85:ce:27:16:b3:40:b5:3c:
                    2a:54:c0:81:11:18:e7:b6:22:ca:bf:de:aa:e8:a6:
                    df:41:67:7c:aa:3c:d7:0e:0e:19:59:1e:f3:95:b7:
                    86:d7:7c:73:5c:6f:31:82:7e:46:0c:09:89:7d:f7:
                    aa:c7:36:97:7a:08:fe:eb:ea:77:4f:14:87:04:0b:
                    b4:09:84:c5:b5:ad:d0:2b:71:df:73:35:8d:40:75:
                    70:32:5d:93:03:2f:7b:0c:52:6f:6b:d1:34:15:e6:
                    5b:f3:14:f2:05:2c:60:4c:cb:b1:46:59:6f:4f:cf:
                    92:62:b5:07:49:41:9f:a3:14:74:5d:a1:d7:37:9b:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B4:AD:CD:59:CE:F6:7E:3E:BF:C7:A3:B3:57:36:4E:2F:E7:25:A5
            X509v3 Authority Key Identifier:
                keyid:03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/1rStzVnO9n4-v8ejs1c2Ti_nJaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:b7:6b:d4:ff:5b:63:4f:f0:14:e8:9c:84:6e:0e:df:7a:
         bf:75:33:ea:bb:9f:c4:59:a6:b7:99:d9:d7:f7:a0:5e:32:d8:
         20:46:07:79:64:18:eb:0c:29:8a:f3:e3:5e:c3:45:65:c3:af:
         27:35:ba:b7:ac:d7:aa:d1:7d:8b:d7:df:91:bb:1e:20:df:a5:
         03:8b:3c:c6:98:95:e9:a0:ed:ba:7c:ab:af:1b:93:08:96:84:
         dd:95:c7:6d:3b:28:a1:0b:4e:6a:da:1c:48:05:42:a3:de:e3:
         54:a5:85:e5:ed:9d:26:03:89:a4:c8:30:38:0a:e1:7f:89:8a:
         81:17:d0:ed:62:f4:de:18:af:1c:35:a8:38:d1:58:40:07:ea:
         22:4e:c9:fd:16:e5:1f:74:52:c0:01:07:97:72:c8:31:ad:c8:
         04:5d:d3:cd:b3:7f:04:d3:67:76:7f:4b:cb:10:c2:50:7d:e0:
         65:b9:15:7f:9e:98:6f:bf:33:0b:39:70:7b:95:ba:9d:8b:61:
         2d:52:5c:b2:eb:70:2c:d4:93:b4:4a:4f:54:aa:ce:12:28:a8:
         0a:11:c5:76:2c:27:22:0d:cd:37:45:a9:97:8f:e9:3d:2e:0b:
         ce:5c:97:f8:09:76:de:86:35:61:e8:f2:a8:12:d8:79:c3:d8:
         5e:31:ca:1b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDVIOZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
MmI0NWQ0NjI1MDMyMWYyZDY4MDFlMWNjZDg4ODYxYWZkNmQ1MmUwHhcNMjIwMTAx
MDE1MjM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkNmI0YWRjZDU5Y2Vm
NjdlM2ViZmM3YTNiMzU3MzY0ZTJmZTcyNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsCWin66l2F8LOiuT0Dc0ysaPSCS8nAydjPDW3pdn12PxG7/G
/TayYuvmZmIId6LkpAhKmeI3pJoKKRz2ScLnN5CENcGYO9oIYBSJIUNo9t9PVezI
JEMDXoxoU5yzRnprSVVqGKgCqrO01PGSJYQAaenaQmsJ/Judhv4HvS2Qhc4nFrNA
tTwqVMCBERjntiLKv96q6KbfQWd8qjzXDg4ZWR7zlbeG13xzXG8xgn5GDAmJffeq
xzaXegj+6+p3TxSHBAu0CYTFta3QK3HfczWNQHVwMl2TAy97DFJva9E0FeZb8xTy
BSxgTMuxRllvT8+SYrUHSUGfoxR0XaHXN5uGVQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFNa0rc1ZzvZ+Pr/Ho7NXNk4v5yWlMB8GA1UdIwQYMBaAFAMrRdRiUDIfLWgB
4czYiGGv1tUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
QXl0RjFHSlFNaDh0YUFIaHpOaUlZYV9XMVM0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81MC81ZTMyMGEtMmZiNi00YzFmLWFiOGMtNTgyNDc1MjdhMTgwLzEv
MXJTdHpWbk85bjQtdjhlanMxYzJUaV9uSmFVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81
ZTMyMGEtMmZiNi00YzFmLWFiOGMtNTgyNDc1MjdhMTgwLzEvQXl0RjFHSlFNaDh0
YUFIaHpOaUlZYV9XMVM0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOHMA0GCSqGSIb3DQEBCwUAA4IB
AQAwTLdr1P9bY0/wFOichG4O33q/dTPqu5/EWaa3mdnX96BeMtggRgd5ZBjrDCmK
8+New0Vlw68nNbq3rNeq0X2L19+Rux4g36UDizzGmJXpoO26fKuvG5MIloTdlcdt
OyihC05q2hxIBUKj3uNUpYXl7Z0mA4mkyDA4CuF/iYqBF9DtYvTeGK8cNag40VhA
B+oiTsn9FuUfdFLAAQeXcsgxrcgEXdPNs38E02d2f0vLEMJQfeBluRV/nphvvzML
OXB7lbqdi2EtUlyy63As1JO0Sk9Uqs4SKKgKEcV2LCciDc03RamXj+k9LgvOXJf4
CXbehjVh6PKoEth5w9heMcob
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org