Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/1-9mzTK-emMpWMBEUu831LmbVtx8.roa
File:                     1-9mzTK-emMpWMBEUu831LmbVtx8.roa (raw, json)
Hash identifier:          T7ZE6PcNy4iUo1jBoaxtw9E+p5BrpxoE0WWxz35JF9I=
Subject key identifier:   FB:D9:B3:4C:AF:9E:98:CA:56:30:11:14:BB:CD:F5:2E:66:D5:B7:1F
Certificate issuer:       /CN=c732c680ce512d72f15c136293b737e098ac255f
Certificate serial:       01172FBD
Authority key identifier: C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/1-9mzTK-emMpWMBEUu831LmbVtx8.roa
Signing time:             Sat 01 Jan 2022 01:56:50 +0000
ROA not before:           Sat 01 Jan 2022 01:56:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3320
IP address blocks:        45.90.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18296765 (0x1172fbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c732c680ce512d72f15c136293b737e098ac255f
        Validity
            Not Before: Jan  1 01:56:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fbd9b34caf9e98ca56301114bbcdf52e66d5b71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:45:4a:02:e0:c0:57:69:eb:58:94:34:91:
                    f3:bb:4e:30:87:9d:bc:de:38:5d:47:ea:3e:3d:96:
                    60:bb:59:93:62:38:9f:ed:5d:38:b6:2c:3e:8e:72:
                    92:12:96:67:ef:36:3d:49:be:cf:ce:09:29:78:d8:
                    72:ec:11:2a:04:52:78:d2:a1:c1:c8:ec:5c:13:4c:
                    0e:04:ae:4d:dc:3e:24:7a:58:80:17:e8:24:16:50:
                    cd:44:d2:9f:e7:70:85:25:4d:b0:dd:b4:4d:69:0e:
                    3e:56:c4:fd:84:2b:fa:3c:ff:89:79:ba:73:b0:e9:
                    dc:5d:46:e7:32:d5:51:fe:18:5d:3d:d7:6a:c4:13:
                    e1:d3:08:6d:83:72:e5:58:e7:5b:c6:d6:5d:0f:fb:
                    e9:ef:fc:70:d7:c9:ff:4a:6f:77:67:d8:eb:f2:04:
                    55:fb:bd:1b:24:d0:59:dd:eb:83:24:1b:3d:9d:80:
                    92:c3:e6:d4:9d:be:9b:31:d7:15:66:32:a9:26:ad:
                    d3:97:7a:a6:e4:29:1e:e7:59:af:02:d8:1e:11:dd:
                    59:01:3b:40:93:62:34:5a:6d:25:c4:aa:80:c2:8a:
                    b3:05:7c:3d:36:c5:53:f7:2c:26:5b:a5:01:b0:2d:
                    e7:64:35:1d:9a:0e:92:cd:99:80:27:1c:a5:37:6f:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D9:B3:4C:AF:9E:98:CA:56:30:11:14:BB:CD:F5:2E:66:D5:B7:1F
            X509v3 Authority Key Identifier:
                keyid:C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/1-9mzTK-emMpWMBEUu831LmbVtx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/xzLGgM5RLXLxXBNik7c34JisJV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:0f:52:cd:cc:7d:cb:e0:c6:ed:e2:12:23:1f:65:4c:51:
         ac:aa:55:37:92:4e:59:f2:96:bc:cd:59:1f:39:52:48:13:41:
         23:0d:a5:cb:ed:4c:b2:b8:ae:df:93:52:74:48:c9:a9:6f:b7:
         ef:56:de:89:a2:ca:72:71:65:21:57:b0:9d:ca:96:8c:55:d9:
         42:19:68:5c:d3:8b:95:30:4f:2b:3d:a5:ee:b6:ce:9f:25:02:
         e6:dd:5c:2c:5d:b9:56:67:50:77:5d:c2:73:aa:53:d3:3c:16:
         72:ea:55:5b:4a:b8:fa:b2:06:0c:25:7c:76:2f:80:f2:90:e4:
         cb:ac:dd:78:4c:b1:58:5b:ec:5d:cc:61:61:6b:46:a2:47:1d:
         31:26:7e:ee:a5:a8:c5:93:08:ef:ad:66:74:b2:f0:ec:66:c2:
         ca:84:fd:da:19:96:03:90:2d:0e:a7:9d:df:e8:4c:04:95:bc:
         11:77:cb:0a:a3:7a:31:a0:09:31:bd:cd:0e:52:f7:1a:eb:cb:
         26:18:7e:42:7c:5f:e6:48:d3:03:db:31:32:2e:7d:ef:53:84:
         45:41:54:a4:06:e4:75:c2:a9:18:77:98:96:a7:4d:a1:d5:09:
         4b:d0:92:b5:3e:db:1b:7c:2c:3c:a9:0a:65:6e:70:c1:53:4a:
         e1:89:b2:35
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEARcvvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzMyYzY4MGNlNTEyZDcyZjE1YzEzNjI5M2I3MzdlMDk4YWMyNTVmMB4XDTIyMDEw
MTAxNTY1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJkOWIzNGNhZjll
OThjYTU2MzAxMTE0YmJjZGY1MmU2NmQ1YjcxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJyRUoC4MBXaetYlDSR87tOMIedvN44XUfqPj2WYLtZk2I4
n+1dOLYsPo5ykhKWZ+82PUm+z84JKXjYcuwRKgRSeNKhwcjsXBNMDgSuTdw+JHpY
gBfoJBZQzUTSn+dwhSVNsN20TWkOPlbE/YQr+jz/iXm6c7Dp3F1G5zLVUf4YXT3X
asQT4dMIbYNy5VjnW8bWXQ/76e/8cNfJ/0pvd2fY6/IEVfu9GyTQWd3rgyQbPZ2A
ksPm1J2+mzHXFWYyqSat05d6puQpHudZrwLYHhHdWQE7QJNiNFptJcSqgMKKswV8
PTbFU/csJlulAbAt52Q1HZoOks2ZgCccpTdv+nECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT72bNMr56YylYwERS7zfUuZtW3HzAfBgNVHSMEGDAWgBTHMsaAzlEtcvFc
E2KTtzfgmKwlXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3h6TEdnTTVSTFhMeFhCTmlrN2MzNEppc0pWOC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTYvZjVhNTQ4LTg5N2YtNDAwNy05NmJiLTM4OGVmOTk5N2E3Mi8x
LzEtOW16VEstZW1NcFdNQkVVdTgzMUxtYlZ0eDgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2
L2Y1YTU0OC04OTdmLTQwMDctOTZiYi0zODhlZjk5OTdhNzIvMS94ekxHZ001UkxY
THhYQk5pazdjMzRKaXNKVjguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItWrgwDQYJKoZIhvcNAQELBQAD
ggEBAFTmD1LNzH3L4Mbt4hIjH2VMUayqVTeSTlnylrzNWR85UkgTQSMNpcvtTLK4
rt+TUnRIyalvt+9W3omiynJxZSFXsJ3KloxV2UIZaFzTi5UwTys9pe62zp8lAubd
XCxduVZnUHddwnOqU9M8FnLqVVtKuPqyBgwlfHYvgPKQ5Mus3XhMsVhb7F3MYWFr
RqJHHTEmfu6lqMWTCO+tZnSy8OxmwsqE/doZlgOQLQ6nnd/oTASVvBF3ywqjejGg
CTG9zQ5S9xrryyYYfkJ8X+ZI0wPbMTIufe9ThEVBVKQG5HXCqRh3mJanTaHVCUvQ
krU+2xt8LDypCmVucMFTSuGJsjU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org