Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/qINGA0_xWX91DAY28tWgXb977hA.roa
File:                     qINGA0_xWX91DAY28tWgXb977hA.roa (raw, json)
Hash identifier:          9b6EuSpIVq36By/7miJaiEJ7hP+bQi1THcKTdnjpbZM=
Subject key identifier:   A8:83:46:03:4F:F1:59:7F:75:0C:06:36:F2:D5:A0:5D:BF:7B:EE:10
Certificate issuer:       /CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Certificate serial:       01A74F5B
Authority key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/qINGA0_xWX91DAY28tWgXb977hA.roa
Signing time:             Fri 03 Jun 2022 13:21:20 +0000
ROA not before:           Fri 03 Jun 2022 13:21:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27742043 (0x1a74f5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
        Validity
            Not Before: Jun  3 13:21:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a88346034ff1597f750c0636f2d5a05dbf7bee10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:cc:26:09:18:c0:34:77:c1:a2:6d:50:69:
                    80:81:7c:9d:94:d4:13:c1:02:63:ac:9a:2f:e5:24:
                    b4:2d:cd:f5:fa:94:30:76:c3:e8:8b:0a:2d:72:8c:
                    9a:87:d5:ae:ad:b2:11:06:4b:c8:d3:95:b6:52:5b:
                    dc:3c:8c:b3:1e:f5:48:d5:a3:76:6d:0e:35:a3:45:
                    d6:8e:cc:1f:6b:6b:92:08:67:ce:d7:1b:66:bb:03:
                    42:5c:d1:27:51:80:35:30:f7:d5:a4:50:78:5b:6f:
                    e9:04:74:a2:e9:05:3b:45:95:09:52:5b:73:24:72:
                    b5:81:bc:b4:75:a9:02:dd:db:2c:03:71:46:72:c4:
                    c7:c8:f5:0f:c9:84:75:4d:72:ca:cb:f2:eb:7d:48:
                    a6:b4:d3:b1:bb:ae:14:d3:d1:25:2b:e9:9a:74:c3:
                    4f:ca:b4:75:78:d0:86:66:74:98:b0:54:80:81:74:
                    71:19:09:1c:c7:9c:d8:12:0b:ac:98:e4:f2:39:7a:
                    a0:17:67:93:84:b8:d1:70:5c:9e:9b:e1:be:a0:d8:
                    fe:87:bf:a2:a9:4e:1a:41:89:fe:44:47:0e:f2:ab:
                    e1:ff:cd:86:bc:e4:ca:e8:03:cb:cf:f8:6c:7e:c1:
                    43:25:31:2c:87:c6:8c:b2:5e:12:25:ac:1a:6a:c0:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:83:46:03:4F:F1:59:7F:75:0C:06:36:F2:D5:A0:5D:BF:7B:EE:10
            X509v3 Authority Key Identifier:
                keyid:03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/qINGA0_xWX91DAY28tWgXb977hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:7e:64:37:38:cb:e8:9d:e4:98:ab:78:4f:52:bf:44:f9:98:
         7d:8d:db:13:b7:2d:f8:81:7d:21:1d:c8:2e:2e:c8:76:54:6f:
         90:68:8b:71:65:59:8f:cb:91:96:a8:72:19:51:a1:88:7f:77:
         e7:ae:ee:1a:e5:e4:aa:40:d8:90:0e:e6:73:87:ff:0c:08:86:
         45:6c:eb:e5:04:49:26:55:33:23:c4:5f:fe:26:40:b2:1b:52:
         25:1b:c5:66:2c:ef:19:1d:c5:0e:3d:26:3f:a4:18:bc:93:22:
         84:96:8e:d8:30:b4:89:4c:52:b6:a9:b7:15:cc:b1:ca:56:86:
         25:7c:68:0d:99:01:e1:60:6f:bc:a4:ca:ad:5c:50:b8:9a:d4:
         5c:81:da:0f:48:a7:0a:aa:5d:d7:e7:49:81:3a:cc:ac:1b:1d:
         03:31:bd:65:74:43:34:21:2c:b9:8d:27:03:65:46:f3:6e:b2:
         4f:c2:83:a4:21:d4:bf:5a:68:e1:df:36:02:e8:29:1a:9e:ca:
         34:62:21:11:3a:4e:e0:be:6d:ee:33:e6:b5:92:2f:0c:00:8d:
         94:77:7e:ce:5c:90:05:45:64:6f:79:36:7c:28:b2:ae:c6:2e:
         ac:d9:c4:9c:0a:5b:e1:4f:03:13:f9:ea:3f:28:1a:63:b7:9f:
         77:13:aa:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAadPWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MzJiNDVkNDYyNTAzMjFmMmQ2ODAxZTFjY2Q4ODg2MWFmZDZkNTJlMB4XDTIyMDYw
MzEzMjEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTg4MzQ2MDM0ZmYx
NTk3Zjc1MGMwNjM2ZjJkNWEwNWRiZjdiZWUxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRGzCYJGMA0d8GibVBpgIF8nZTUE8ECY6yaL+UktC3N9fqU
MHbD6IsKLXKMmofVrq2yEQZLyNOVtlJb3DyMsx71SNWjdm0ONaNF1o7MH2trkghn
ztcbZrsDQlzRJ1GANTD31aRQeFtv6QR0oukFO0WVCVJbcyRytYG8tHWpAt3bLANx
RnLEx8j1D8mEdU1yysvy631IprTTsbuuFNPRJSvpmnTDT8q0dXjQhmZ0mLBUgIF0
cRkJHMec2BILrJjk8jl6oBdnk4S40XBcnpvhvqDY/oe/oqlOGkGJ/kRHDvKr4f/N
hrzkyugDy8/4bH7BQyUxLIfGjLJeEiWsGmrARgcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSog0YDT/FZf3UMBjby1aBdv3vuEDAfBgNVHSMEGDAWgBQDK0XUYlAyHy1o
AeHM2Ihhr9bVLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0F5dEYxR0pRTWg4dGFBSGh6TmlJWWFfVzFTNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvNWUzMjBhLTJmYjYtNGMxZi1hYjhjLTU4MjQ3NTI3YTE4MC8x
L3FJTkdBMF94V1g5MURBWTI4dFdnWGI5NzdoQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
NWUzMjBhLTJmYjYtNGMxZi1hYjhjLTU4MjQ3NTI3YTE4MC8xL0F5dEYxR0pRTWg4
dGFBSGh6TmlJWWFfVzFTNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIThzANBgkqhkiG9w0BAQsFAAOC
AQEAmn5kNzjL6J3kmKt4T1K/RPmYfY3bE7ct+IF9IR3ILi7IdlRvkGiLcWVZj8uR
lqhyGVGhiH93567uGuXkqkDYkA7mc4f/DAiGRWzr5QRJJlUzI8Rf/iZAshtSJRvF
ZizvGR3FDj0mP6QYvJMihJaO2DC0iUxStqm3FcyxylaGJXxoDZkB4WBvvKTKrVxQ
uJrUXIHaD0inCqpd1+dJgTrMrBsdAzG9ZXRDNCEsuY0nA2VG826yT8KDpCHUv1po
4d82AugpGp7KNGIhETpO4L5t7jPmtZIvDACNlHd+zlyQBUVkb3k2fCiyrsYurNnE
nApb4U8DE/nqPygaY7efdxOqag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org