Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/wcnxx3XA0wTfeOJaWgFNHy1py88.roa
File:                     wcnxx3XA0wTfeOJaWgFNHy1py88.roa (raw, json)
Hash identifier:          T9F5uQW1r0ICs/h/HzsnbYBfDWQblIT6mXDszaEjgvs=
Subject key identifier:   C1:C9:F1:C7:75:C0:D3:04:DF:78:E2:5A:5A:01:4D:1F:2D:69:CB:CF
Certificate issuer:       /CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Certificate serial:       547C46
Authority key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/wcnxx3XA0wTfeOJaWgFNHy1py88.roa
Signing time:             Sat 01 Jan 2022 01:52:38 +0000
ROA not before:           Sat 01 Jan 2022 01:52:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211252
IP address blocks:        146.19.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5536838 (0x547c46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
        Validity
            Not Before: Jan  1 01:52:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1c9f1c775c0d304df78e25a5a014d1f2d69cbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:1a:b5:90:29:10:84:0d:d6:49:d8:84:dd:
                    e1:6f:9a:f1:88:ee:69:72:bf:cf:aa:3a:28:44:b0:
                    fa:ad:38:84:4e:a6:d3:8d:d5:2a:da:ca:63:48:8a:
                    1e:0d:5d:3b:8c:47:99:7f:77:15:50:14:ea:4e:73:
                    9a:62:43:df:94:82:5b:eb:87:85:54:84:d7:7b:a7:
                    90:b6:7a:a3:e7:8e:29:f1:26:49:70:72:74:82:af:
                    db:8b:b4:9c:4f:91:08:10:94:0c:9b:50:9a:e6:b7:
                    3b:dc:25:9f:47:9e:45:5a:00:eb:70:b8:d8:b4:0f:
                    34:8f:36:00:73:27:de:80:a5:3e:d7:3c:a5:10:ed:
                    d7:3e:33:af:ed:91:2c:54:26:33:3b:1f:c3:b1:e9:
                    a2:bb:f1:77:7b:4b:a7:a1:3a:78:d0:38:8a:74:cd:
                    8a:28:42:02:47:a9:0b:0a:bd:25:44:b2:4e:df:9c:
                    06:43:c1:0b:57:db:9d:44:f2:c8:22:81:b9:40:3b:
                    be:be:2a:c8:d6:26:45:f3:90:88:9f:e6:2e:14:f6:
                    98:af:46:13:36:68:e2:ef:54:f4:93:91:90:fa:63:
                    cc:96:b5:6d:46:06:15:f6:1b:f7:e7:9f:ef:b0:ce:
                    be:a0:bf:f6:c2:79:b4:e2:1d:53:79:3b:47:13:a4:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:F1:C7:75:C0:D3:04:DF:78:E2:5A:5A:01:4D:1F:2D:69:CB:CF
            X509v3 Authority Key Identifier:
                keyid:03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/wcnxx3XA0wTfeOJaWgFNHy1py88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:8c:92:a6:72:6a:d3:e7:4f:38:7a:75:57:06:94:c1:fe:
         9c:9e:5f:c2:45:6d:73:55:a9:5e:87:0c:0c:03:71:ab:0d:b8:
         8d:cb:0c:db:72:68:45:d9:6f:ff:e9:a0:e8:17:0c:52:7f:02:
         6b:51:49:0e:a0:7b:1b:19:fa:ed:42:97:70:95:32:a8:d0:65:
         30:d6:f2:36:d8:c3:fc:ff:ca:1d:94:b9:a8:a5:83:95:85:a1:
         e5:43:ac:61:37:b1:ee:c3:dc:94:32:d8:26:97:5e:44:e0:b0:
         d9:2e:ba:d9:51:1f:21:03:6f:fd:b2:ab:09:47:e5:0b:39:52:
         1d:e4:1c:75:ef:dc:65:e9:ce:13:c2:9a:5c:43:b3:67:fd:63:
         47:ee:b8:74:f9:82:40:45:9e:80:bd:84:5b:59:f4:ab:a0:0b:
         23:b8:26:c3:9e:00:d4:ca:4c:25:65:c5:69:07:ed:7d:13:8e:
         81:90:1d:b7:72:7a:84:a1:1d:49:53:38:9e:8e:31:ce:66:f0:
         e6:32:a8:32:02:f3:24:6e:d1:38:a5:68:e5:11:a1:01:70:49:
         49:42:a3:60:6e:6b:db:e1:68:f9:66:8b:9e:c2:90:5b:b2:81:
         4e:51:3a:de:84:53:f1:ff:45:11:5b:2f:e4:bf:d9:98:7c:66:
         20:88:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org