Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/f39rWROd5Lj5FDHjgBs1DSqJcuY.roa
File:                     f39rWROd5Lj5FDHjgBs1DSqJcuY.roa (raw, json)
Hash identifier:          sIUC40/w6nQD7cnhLXwQrVHTsDXINZbgc5LoO74nojg=
Subject key identifier:   7F:7F:6B:59:13:9D:E4:B8:F9:14:31:E3:80:1B:35:0D:2A:89:72:E6
Certificate issuer:       /CN=df18c5f6675368706b08cc27139aedf7210faf47
Certificate serial:       32A7D317
Authority key identifier: DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/f39rWROd5Lj5FDHjgBs1DSqJcuY.roa
Signing time:             Thu 13 Jan 2022 09:29:57 +0000
ROA not before:           Thu 13 Jan 2022 09:29:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51424
IP address blocks:        212.96.184.0/24 maxlen: 24
                          212.4.132.0/24 maxlen: 24
                          213.211.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849859351 (0x32a7d317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df18c5f6675368706b08cc27139aedf7210faf47
        Validity
            Not Before: Jan 13 09:29:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7f7f6b59139de4b8f91431e3801b350d2a8972e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:5d:6c:71:c5:4c:05:94:5b:1d:36:04:aa:
                    f1:ba:96:1d:b8:e6:74:d4:fd:3d:76:e0:d2:37:af:
                    b2:51:8d:38:70:dc:6c:b4:c4:29:02:be:fc:69:f5:
                    4e:f3:07:5f:01:63:eb:89:8a:4a:c7:31:c1:48:e9:
                    bd:8e:1b:42:7c:1e:61:75:0c:66:93:c2:1b:0f:21:
                    e3:c0:c5:06:7e:66:94:9e:ac:bb:c7:93:73:4d:08:
                    e0:d3:f2:ed:68:be:7e:39:aa:2a:37:04:63:68:8d:
                    d2:47:a4:5b:12:6f:0e:af:4e:fd:93:1a:24:44:37:
                    4a:64:f8:e0:13:b5:71:4e:f1:75:28:17:c2:f6:44:
                    00:9f:8a:b9:74:a1:f6:35:0a:c6:61:64:ed:42:26:
                    37:36:eb:89:6f:d1:83:15:95:52:16:7a:06:c0:dd:
                    29:ac:61:56:ea:47:be:c8:51:5c:a2:1f:cf:e3:0a:
                    45:15:84:60:3a:14:b6:78:73:c9:26:19:c7:87:7f:
                    0c:7c:29:d6:50:38:0c:6f:b3:94:73:c8:96:13:f3:
                    cc:52:f5:9d:24:af:51:89:9a:70:37:9d:e7:71:86:
                    c5:c2:b2:f6:f9:ec:00:c8:e5:6c:2f:d8:e7:c1:99:
                    30:38:64:b7:07:15:3a:ba:23:86:cc:25:05:fa:63:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:6B:59:13:9D:E4:B8:F9:14:31:E3:80:1B:35:0D:2A:89:72:E6
            X509v3 Authority Key Identifier:
                keyid:DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/f39rWROd5Lj5FDHjgBs1DSqJcuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.4.132.0/24
                  212.96.184.0/24
                  213.211.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:fc:30:f5:84:c3:f3:f4:16:1b:fb:5e:5f:b1:b3:dc:95:
         1f:6e:ff:77:fa:79:7b:99:4f:9a:fb:43:ce:de:33:95:6e:f2:
         db:c7:4c:cf:1c:2d:47:c1:c9:15:63:f7:1d:d1:4d:00:74:f3:
         c4:6e:4b:f0:e1:6e:09:bc:17:be:7d:5f:5d:7a:6d:f0:62:a6:
         cb:35:dd:16:2b:80:eb:b5:4b:4d:66:5c:45:a3:a1:be:96:75:
         69:00:37:8f:3a:3b:ed:05:e0:9c:73:34:46:43:a1:a1:7d:1c:
         c2:1a:00:0d:86:ed:7a:0f:78:91:89:e7:c1:6d:95:47:b6:27:
         9c:a4:5e:ba:3b:b4:6e:f2:ad:d0:7f:40:30:e3:cc:b2:47:0d:
         b1:fe:08:99:ef:25:d7:9c:0a:82:35:89:20:5b:56:ed:12:32:
         39:83:45:4b:7c:3e:b6:43:4a:5d:e0:85:db:49:8c:69:49:94:
         3c:3c:82:cb:8f:ae:1b:d6:16:3c:a7:4d:5c:82:8d:0e:2c:06:
         82:4e:59:93:d0:32:0e:7c:a9:bd:7b:25:4f:a5:53:13:46:89:
         75:66:32:99:27:84:2c:8a:3c:12:ee:21:41:1b:cd:cc:48:2b:
         bf:1b:f1:2b:ef:30:fb:05:39:a0:50:fe:d4:6f:b6:fe:ce:47:
         54:16:08:79
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEMqfTFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZjE4YzVmNjY3NTM2ODcwNmIwOGNjMjcxMzlhZWRmNzIxMGZhZjQ3MB4XDTIyMDEx
MzA5Mjk1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Y3ZjZiNTkxMzlk
ZTRiOGY5MTQzMWUzODAxYjM1MGQyYTg5NzJlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJJvXWxxxUwFlFsdNgSq8bqWHbjmdNT9PXbg0jevslGNOHDc
bLTEKQK+/Gn1TvMHXwFj64mKSscxwUjpvY4bQnweYXUMZpPCGw8h48DFBn5mlJ6s
u8eTc00I4NPy7Wi+fjmqKjcEY2iN0kekWxJvDq9O/ZMaJEQ3SmT44BO1cU7xdSgX
wvZEAJ+KuXSh9jUKxmFk7UImNzbriW/RgxWVUhZ6BsDdKaxhVupHvshRXKIfz+MK
RRWEYDoUtnhzySYZx4d/DHwp1lA4DG+zlHPIlhPzzFL1nSSvUYmacDed53GGxcKy
9vnsAMjlbC/Y58GZMDhktwcVOrojhswlBfpj1lsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBR/f2tZE53kuPkUMeOAGzUNKoly5jAfBgNVHSMEGDAWgBTfGMX2Z1NocGsI
zCcTmu33IQ+vRzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzN4akY5bWRUYUhCckNNd25FNXJ0OXlFUHIwYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvNjFjOTUxLWVhMDItNDZjMC1iNmEzLWFjYjQyNzFkZWY3Zi8x
L2YzOXJXUk9kNUxqNUZESGpnQnMxRFNxSmN1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
NjFjOTUxLWVhMDItNDZjMC1iNmEzLWFjYjQyNzFkZWY3Zi8xLzN4akY5bWRUYUhC
ckNNd25FNXJ0OXlFUHIwYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEANQEhAMEANRguAMEANXTJDANBgkq
hkiG9w0BAQsFAAOCAQEAjAb8MPWEw/P0Fhv7Xl+xs9yVH27/d/p5e5lPmvtDzt4z
lW7y28dMzxwtR8HJFWP3HdFNAHTzxG5L8OFuCbwXvn1fXXpt8GKmyzXdFiuA67VL
TWZcRaOhvpZ1aQA3jzo77QXgnHM0RkOhoX0cwhoADYbteg94kYnnwW2VR7YnnKRe
uju0bvKt0H9AMOPMskcNsf4Ime8l15wKgjWJIFtW7RIyOYNFS3w+tkNKXeCF20mM
aUmUPDyCy4+uG9YWPKdNXIKNDiwGgk5Zk9AyDnypvXslT6VTE0aJdWYymSeELIo8
Eu4hQRvNzEgrvxvxK+8w+wU5oFD+1G+2/s5HVBYIeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:46 2023 by rpki-client on console-ams.rpki-client.org