Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/RG2jHrYuTAovc3hjctuYEJn7Xf4.roa
File:                     RG2jHrYuTAovc3hjctuYEJn7Xf4.roa (raw, json)
Hash identifier:          /Bcz98DlztkF4oZ6YyEmFlVooyXRocplvsr6B1CpBWE=
Subject key identifier:   44:6D:A3:1E:B6:2E:4C:0A:2F:73:78:63:72:DB:98:10:99:FB:5D:FE
Certificate issuer:       /CN=bc61bfbac54675fe0a8a2f17c73e936e4e1151a5
Certificate serial:       01856EEFEA86B93821A3EB162E3CA752E32C
Authority key identifier: BC:61:BF:BA:C5:46:75:FE:0A:8A:2F:17:C7:3E:93:6E:4E:11:51:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/RG2jHrYuTAovc3hjctuYEJn7Xf4.roa
Signing time:             Sun 01 Jan 2023 20:04:54 +0000
ROA not before:           Sun 01 Jan 2023 20:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        176.126.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:ea:86:b9:38:21:a3:eb:16:2e:3c:a7:52:e3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc61bfbac54675fe0a8a2f17c73e936e4e1151a5
        Validity
            Not Before: Jan  1 20:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=446da31eb62e4c0a2f73786372db981099fb5dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:41:4f:90:aa:05:d1:2f:57:b5:66:e6:46:
                    3c:67:9f:32:48:ec:bb:ae:a7:27:d3:55:a7:33:24:
                    e9:8c:3a:88:6d:6c:c0:29:f1:c9:91:b6:b7:ea:d9:
                    a2:f9:e0:db:72:b4:ae:11:65:fc:42:db:b4:72:27:
                    f6:4c:27:07:d9:c7:14:40:6c:98:39:66:ff:64:d9:
                    3d:d4:e0:ab:91:ec:06:dd:a3:66:8d:38:c4:31:cc:
                    1c:81:ee:c8:4e:50:31:b8:f3:f2:b4:24:02:44:11:
                    c5:7c:4d:75:e2:89:d0:94:ca:ee:14:40:aa:74:30:
                    a8:84:8b:94:16:6d:6c:f6:1e:ca:c5:9d:8c:a0:64:
                    48:52:a1:6c:5b:2f:c4:64:8f:d8:26:73:1f:9a:c0:
                    85:cd:7f:10:1f:b6:e7:6e:d9:93:35:07:52:0e:df:
                    35:93:67:b5:e4:66:cd:df:b7:6e:0c:5a:4b:c2:49:
                    37:a9:23:89:97:a1:08:25:0f:4a:fe:09:f0:31:26:
                    59:a4:ec:af:ac:ba:5b:3d:c5:41:3f:5b:85:88:e8:
                    e9:8a:ef:cc:f9:f5:f0:d2:34:2d:5a:29:55:42:1e:
                    74:6e:61:fc:76:7a:03:aa:53:7a:21:6e:b1:f6:44:
                    ca:49:90:78:1b:ad:9b:c6:2f:08:27:c0:49:b0:9e:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6D:A3:1E:B6:2E:4C:0A:2F:73:78:63:72:DB:98:10:99:FB:5D:FE
            X509v3 Authority Key Identifier:
                keyid:BC:61:BF:BA:C5:46:75:FE:0A:8A:2F:17:C7:3E:93:6E:4E:11:51:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/RG2jHrYuTAovc3hjctuYEJn7Xf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:47:45:48:d5:85:bd:db:df:7b:41:b9:75:a6:36:0d:fe:
         fd:46:a7:73:b5:4f:b0:93:52:37:6f:b9:55:e2:ba:cb:1e:6a:
         62:58:ec:88:54:38:27:5e:06:77:cc:3b:ba:84:03:06:55:a7:
         73:8c:88:bc:3c:d3:16:b2:09:f9:07:cb:9a:bf:a6:3a:f1:8f:
         d4:c0:7e:99:7f:ed:ac:9d:a6:4b:d7:22:bf:c8:b3:3f:1a:a9:
         f7:de:32:71:24:ca:eb:1b:13:12:93:17:36:ed:02:0d:c6:d2:
         63:9f:12:6d:ff:b8:76:51:4a:c4:31:df:04:63:2d:61:8b:d2:
         ad:71:0b:87:ef:68:a6:ac:df:1d:c9:4a:92:b8:35:8a:d1:58:
         da:21:db:59:93:72:bb:b3:14:c9:96:67:3e:9e:77:76:71:b5:
         cb:db:4e:6e:36:e7:5a:7e:4b:5e:17:62:8f:6a:31:09:cb:52:
         3f:0e:c4:af:4f:c4:ba:b9:08:c9:60:95:8d:5d:5b:e7:c6:7c:
         dd:e5:7b:c0:27:a4:27:46:ca:80:5b:89:72:6b:63:33:a6:e3:
         b9:e0:6c:43:d9:fa:19:c9:63:8f:0d:29:48:58:47:68:b0:0b:
         1d:63:c2:cc:80:08:e9:97:6b:b9:2f:b4:5c:00:85:a5:07:1a:
         3c:16:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:47 2024 by rpki-client on console-ams.rpki-client.org