Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/TuAYGIbT_-P3fpPQd2kbnOuGYnw.roa
File:                     TuAYGIbT_-P3fpPQd2kbnOuGYnw.roa (raw, json)
Hash identifier:          ru2nbCJH/i3t4rrbvTnzaoCOIMBHGECM0Sj//yEnrbw=
Subject key identifier:   4E:E0:18:18:86:D3:FF:E3:F7:7E:93:D0:77:69:1B:9C:EB:86:62:7C
Certificate issuer:       /CN=7d1b074281719501df300b41c299b2f130ef598b
Certificate serial:       018291A7FCF36DA06F39C8CBA02D4DF7F977
Authority key identifier: 7D:1B:07:42:81:71:95:01:DF:30:0B:41:C2:99:B2:F1:30:EF:59:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRsHQoFxlQHfMAtBwpmy8TDvWYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/TuAYGIbT_-P3fpPQd2kbnOuGYnw.roa
Signing time:             Fri 12 Aug 2022 10:44:41 +0000
ROA not before:           Fri 12 Aug 2022 10:44:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48705
IP address blocks:        193.39.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:91:a7:fc:f3:6d:a0:6f:39:c8:cb:a0:2d:4d:f7:f9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d1b074281719501df300b41c299b2f130ef598b
        Validity
            Not Before: Aug 12 10:44:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ee0181886d3ffe3f77e93d077691b9ceb86627c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:df:40:5c:0f:ce:68:b0:b2:b6:eb:86:78:
                    99:c5:59:e2:0b:42:90:30:bc:05:9d:7b:84:ae:46:
                    0a:0c:5d:d5:fe:4d:7c:e5:be:e3:ef:da:39:c5:1f:
                    22:05:fd:a8:d6:39:45:9d:43:5c:45:4f:6e:08:02:
                    fd:c5:59:0e:11:de:4f:17:4e:b9:b1:1c:9d:fb:6b:
                    d4:b1:b9:66:b4:f0:4b:06:19:fd:59:be:95:11:a0:
                    c6:75:77:84:9a:e8:ec:4d:13:a4:60:1d:cc:f3:92:
                    4f:86:89:a2:4f:c7:58:c1:09:67:ce:3c:92:67:49:
                    af:46:68:0c:91:70:f1:1d:9f:46:bd:5e:8a:91:a2:
                    67:bb:12:84:0c:23:54:77:a2:f9:50:1d:4a:b1:7a:
                    d1:df:1a:6b:e0:18:ba:17:c4:80:a6:6d:f5:bd:e6:
                    89:46:14:93:c5:4e:6d:17:81:59:50:ce:81:01:43:
                    5a:be:66:e1:59:3b:3a:0e:d1:17:a6:e6:5e:5d:82:
                    b4:39:24:fb:56:57:b7:b2:c3:b1:fe:fc:7f:77:94:
                    c3:c2:e2:13:2f:a9:c4:59:6f:66:eb:0d:40:76:10:
                    91:c5:61:ea:63:d0:b3:19:3c:8f:25:90:78:11:09:
                    d4:96:4a:0c:4b:8a:d8:ad:54:af:23:b2:c3:1b:a0:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E0:18:18:86:D3:FF:E3:F7:7E:93:D0:77:69:1B:9C:EB:86:62:7C
            X509v3 Authority Key Identifier:
                keyid:7D:1B:07:42:81:71:95:01:DF:30:0B:41:C2:99:B2:F1:30:EF:59:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRsHQoFxlQHfMAtBwpmy8TDvWYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/TuAYGIbT_-P3fpPQd2kbnOuGYnw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/fRsHQoFxlQHfMAtBwpmy8TDvWYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:39:fb:dc:41:c7:24:44:dd:48:f7:78:e3:fd:13:7e:61:
         4d:4e:21:d7:77:ce:54:79:82:21:13:f1:38:a7:8d:ff:70:cc:
         1f:6e:42:09:f1:56:19:4d:ae:93:cb:33:b3:2f:31:11:d7:ad:
         e3:e1:c3:cd:84:aa:4b:c1:0c:24:a0:da:49:02:31:c2:68:48:
         9e:37:13:7d:57:39:9f:3e:b7:12:e0:27:94:3d:a4:69:5c:e2:
         c5:4c:cf:25:76:c2:e4:76:d2:bb:d6:c6:75:4b:46:c6:21:cb:
         5f:74:45:b1:c9:6c:fa:63:82:92:94:61:d2:27:45:72:af:74:
         e3:56:1e:30:13:04:24:96:e1:9f:23:43:70:7e:26:ac:f9:03:
         dd:7b:16:ba:76:98:89:ef:c3:a1:eb:8e:ec:ee:4d:cb:79:8d:
         7a:31:fd:9f:07:f8:1e:cf:43:f3:79:58:c2:3f:07:29:14:9d:
         07:59:02:e3:37:3e:b6:17:df:4b:00:52:a7:ac:62:34:5c:37:
         7c:91:da:49:13:b2:89:55:1c:1b:63:b3:13:cf:3d:31:e0:f7:
         b0:58:6f:3d:02:66:63:16:76:bb:56:fa:1a:a9:6e:bf:6d:c0:
         48:85:ef:76:4d:a2:fd:3a:be:ae:36:c5:c2:c5:97:17:b4:be:
         cb:fb:15:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKRp/zzbaBvOcjLoC1N9/l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMWIwNzQyODE3MTk1MDFkZjMwMGI0MWMyOTliMmYxMzBl
ZjU5OGIwHhcNMjIwODEyMTA0NDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWUwMTgxODg2ZDNmZmUzZjc3ZTkzZDA3NzY5MWI5Y2ViODY2MjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugLfQFwPzmiwsrbrhniZxVniC0KQ
MLwFnXuErkYKDF3V/k185b7j79o5xR8iBf2o1jlFnUNcRU9uCAL9xVkOEd5PF065
sRyd+2vUsblmtPBLBhn9Wb6VEaDGdXeEmujsTROkYB3M85JPhomiT8dYwQlnzjyS
Z0mvRmgMkXDxHZ9GvV6KkaJnuxKEDCNUd6L5UB1KsXrR3xpr4Bi6F8SApm31veaJ
RhSTxU5tF4FZUM6BAUNavmbhWTs6DtEXpuZeXYK0OST7Vle3ssOx/vx/d5TDwuIT
L6nEWW9m6w1AdhCRxWHqY9CzGTyPJZB4EQnUlkoMS4rYrVSvI7LDG6DExQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7gGBiG0//j936T0HdpG5zrhmJ8MB8GA1UdIwQY
MBaAFH0bB0KBcZUB3zALQcKZsvEw71mLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJzSFFvRnhsUUhmTUF0QndwbXk4VER2V1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80ZGEwNTEtYTVhNi00NDAzLWI1MzQt
Y2JmYWYyMWY2YWQ3LzEvVHVBWUdJYlRfLVAzZnBQUWQya2JuT3VHWW53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC80ZGEwNTEtYTVhNi00NDAzLWI1MzQtY2JmYWYyMWY2YWQ3
LzEvZlJzSFFvRnhsUUhmTUF0QndwbXk4VER2V1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSdCMA0G
CSqGSIb3DQEBCwUAA4IBAQBDpjn73EHHJETdSPd44/0TfmFNTiHXd85UeYIhE/E4
p43/cMwfbkIJ8VYZTa6TyzOzLzER163j4cPNhKpLwQwkoNpJAjHCaEieNxN9Vzmf
PrcS4CeUPaRpXOLFTM8ldsLkdtK71sZ1S0bGIctfdEWxyWz6Y4KSlGHSJ0Vyr3Tj
Vh4wEwQkluGfI0Nwfias+QPdexa6dpiJ78Oh647s7k3LeY16Mf2fB/gez0PzeVjC
PwcpFJ0HWQLjNz62F99LAFKnrGI0XDd8kdpJE7KJVRwbY7MTzz0x4PewWG89AmZj
Fna7VvoaqW6/bcBIhe92TaL9Or6uNsXCxZcXtL7L+xX+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:54 2024 by rpki-client on console-ams.rpki-client.org