Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/846v_Yw5JM_lLiF8mDXdzAN_I90.roa
File:                     846v_Yw5JM_lLiF8mDXdzAN_I90.roa (raw, json)
Hash identifier:          ZzCWnKT393rbGijX/RJDKy82vUV6VZtlGGr2c8i0ipw=
Subject key identifier:   F3:8E:AF:FD:8C:39:24:CF:E5:2E:21:7C:98:35:DD:CC:03:7F:23:DD
Certificate issuer:       /CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
Certificate serial:       0185727100EDAE485A408B9A85DAE00D836B
Authority key identifier: 96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/846v_Yw5JM_lLiF8mDXdzAN_I90.roa
Signing time:             Mon 02 Jan 2023 12:24:46 +0000
ROA not before:           Mon 02 Jan 2023 12:24:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     996
IP address blocks:        80.71.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:71:00:ed:ae:48:5a:40:8b:9a:85:da:e0:0d:83:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
        Validity
            Not Before: Jan  2 12:24:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f38eaffd8c3924cfe52e217c9835ddcc037f23dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:f1:6a:5c:ae:0d:8d:96:14:38:ae:07:f3:
                    07:89:6d:13:68:c5:b3:f0:56:12:e1:8c:cd:f1:8a:
                    8a:21:32:42:72:46:9f:69:37:9f:23:1a:ad:ff:f2:
                    ce:b1:8e:74:b3:ea:cc:b1:20:50:de:dd:73:23:83:
                    31:e9:62:34:56:13:32:a2:27:8c:9d:8c:6a:f2:f3:
                    aa:6a:31:cb:d4:60:b6:64:a4:6b:15:b6:f4:49:7e:
                    63:db:e2:a7:d6:1d:bf:ad:01:f6:4f:3f:05:b9:52:
                    68:c4:a7:e9:dc:e3:8c:f4:28:b7:b2:5b:bd:5b:7e:
                    d5:19:b9:cb:33:90:9a:25:2f:6c:80:44:9e:b6:f6:
                    1a:8a:1f:1a:a9:b8:1b:85:bd:b4:b0:c0:ca:8f:c0:
                    9e:78:c4:ef:72:04:2a:a4:d8:b4:ea:44:6c:e8:45:
                    c2:fc:ba:81:84:1e:05:5e:93:02:d3:6c:b1:68:9f:
                    cf:f9:64:ed:c0:4e:d1:d4:15:ce:44:5d:ef:af:b8:
                    33:90:6f:80:fa:d1:5a:3c:e6:28:a7:f5:32:3c:69:
                    76:82:16:b7:95:94:d8:cd:04:12:76:63:f8:eb:31:
                    02:aa:b3:f6:8a:6c:b8:53:88:2d:29:7c:a9:b1:9b:
                    49:f2:01:42:c1:db:39:85:41:e1:4e:9f:8a:12:7c:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8E:AF:FD:8C:39:24:CF:E5:2E:21:7C:98:35:DD:CC:03:7F:23:DD
            X509v3 Authority Key Identifier:
                keyid:96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/846v_Yw5JM_lLiF8mDXdzAN_I90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/lgv_0ND7W2jwhxc4Ug3PQihM-jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:40:04:31:83:bc:cd:fc:34:5b:1e:75:f0:cd:9c:62:5c:
         b2:d6:e1:ed:c4:a1:2c:c9:4d:b2:52:c2:79:f7:a0:02:94:cf:
         7f:50:29:c5:f8:be:f7:73:d7:77:9f:b5:c9:a8:2a:f5:d1:68:
         71:e7:5f:53:ad:31:f8:27:c3:f0:c2:f4:95:d5:37:bd:90:fc:
         e3:09:dd:67:0b:5a:37:34:fb:e0:89:0d:5b:d4:8d:6a:8b:00:
         f4:6d:76:5e:17:06:5c:fa:d0:51:04:83:62:0f:fa:e4:a9:95:
         9b:e3:20:26:1b:83:1a:7d:f4:06:99:78:f0:41:56:bc:85:4c:
         fc:12:46:79:3f:4e:d9:41:66:7c:db:73:b8:be:27:33:09:01:
         f4:ab:7d:e0:2e:57:c8:aa:62:23:b3:05:9e:88:a5:0e:22:3b:
         09:ad:7a:ff:f2:b2:0b:fe:97:e9:07:30:24:94:65:ae:45:82:
         43:9d:82:36:64:2a:83:f5:48:2e:64:32:35:4f:69:70:8c:10:
         3b:c7:70:1f:27:c5:03:24:1a:ff:0a:89:93:bc:70:56:1f:7b:
         01:fa:eb:3f:03:d5:6f:55:05:18:19:16:8a:45:be:50:5e:c9:
         02:38:06:2a:49:4a:9b:e9:d9:09:2e:e7:fe:fa:a2:52:82:a6:
         9b:8b:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:18 2024 by rpki-client on console-ams.rpki-client.org