Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/RlvKz4FAfosnIpRrIVzM6j_LX3M.roa
File:                     RlvKz4FAfosnIpRrIVzM6j_LX3M.roa (raw, json)
Hash identifier:          OOVpa7jVEXBHZEvtFFNbyQihsSU6gDH2vVRe4/EyDqs=
Subject key identifier:   46:5B:CA:CF:81:40:7E:8B:27:22:94:6B:21:5C:CC:EA:3F:CB:5F:73
Certificate issuer:       /CN=7e03dcb666dd224d91429f33c769faebfa951d04
Certificate serial:       018CC3B739C62586D0D9FC647DD622B09430
Authority key identifier: 7E:03:DC:B6:66:DD:22:4D:91:42:9F:33:C7:69:FA:EB:FA:95:1D:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgPctmbdIk2RQp8zx2n66_qVHQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/RlvKz4FAfosnIpRrIVzM6j_LX3M.roa
Signing time:             Mon 01 Jan 2024 06:30:14 +0000
ROA not before:           Mon 01 Jan 2024 06:30:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     399114
IP address blocks:        178.211.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:39:c6:25:86:d0:d9:fc:64:7d:d6:22:b0:94:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e03dcb666dd224d91429f33c769faebfa951d04
        Validity
            Not Before: Jan  1 06:30:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=465bcacf81407e8b2722946b215cccea3fcb5f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:9f:96:da:e0:b8:95:a4:41:f2:cd:3f:57:
                    fd:6d:a3:cf:90:f0:67:69:f7:e4:a0:91:d5:44:71:
                    3b:86:9b:52:6f:fc:8c:82:c8:36:ec:d6:60:8f:97:
                    f7:a8:fa:44:6e:6a:93:ae:30:85:b0:d1:9f:7d:88:
                    d5:5d:3f:47:7b:8b:e0:87:26:6f:7e:2e:7c:31:d9:
                    ca:3f:bb:fd:5e:de:fd:df:52:d7:ac:37:ca:e9:af:
                    5c:64:8b:22:6c:dc:96:e6:3d:99:46:08:2a:91:e0:
                    f7:a9:a3:f2:84:0d:30:9f:c0:96:12:ea:25:24:27:
                    a3:87:01:36:3b:b3:98:ca:a0:6f:e6:f4:f9:d5:e5:
                    0d:5f:73:f0:ca:1f:4b:26:ef:09:4a:f9:ed:e1:a2:
                    07:aa:4b:c5:60:98:0b:62:a0:c8:c1:b0:99:11:47:
                    8b:10:3d:b0:bc:5e:25:18:62:14:72:29:7c:10:92:
                    59:4c:b5:be:d3:1e:d1:0c:c3:37:c8:46:cd:96:13:
                    37:3f:63:61:9a:2c:47:6e:32:ee:c9:60:35:f7:39:
                    bc:ba:ed:25:17:5b:5d:f6:cf:91:87:8e:ed:7b:a3:
                    35:cd:82:e6:eb:cc:a8:d6:20:67:07:b5:5a:5b:27:
                    14:85:1d:3b:b3:5c:74:2c:eb:2c:7c:74:78:1f:92:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:CA:CF:81:40:7E:8B:27:22:94:6B:21:5C:CC:EA:3F:CB:5F:73
            X509v3 Authority Key Identifier:
                keyid:7E:03:DC:B6:66:DD:22:4D:91:42:9F:33:C7:69:FA:EB:FA:95:1D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgPctmbdIk2RQp8zx2n66_qVHQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/RlvKz4FAfosnIpRrIVzM6j_LX3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/03b8b4-fd9d-4fdd-adcb-4373e9ca9704/1/fgPctmbdIk2RQp8zx2n66_qVHQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:24:59:7a:cf:de:5f:73:98:0e:f5:f2:2e:39:5a:17:07:c0:
         51:f4:a3:43:6b:22:32:9d:65:07:71:50:0a:31:ff:bf:bc:0d:
         37:be:39:67:54:68:91:7d:a1:b3:d3:b2:1a:66:8d:f8:4f:47:
         50:f9:5c:0a:18:83:b0:3a:08:5f:4c:09:7b:e1:34:e5:a8:93:
         88:4d:ad:95:ab:e9:4f:31:3b:03:bb:50:ff:1b:7f:88:b4:9c:
         e6:51:a6:a2:eb:72:10:b9:e8:8d:4c:78:b4:67:8d:48:d5:7e:
         88:c4:9c:3d:24:95:14:07:4a:12:d8:18:8e:45:2c:0f:62:f4:
         34:bb:9c:08:39:9a:1e:9f:2a:2f:e7:b6:38:6e:f1:37:49:b4:
         df:f4:3d:fb:80:88:76:ca:ab:67:5e:c5:8d:a7:d8:88:48:57:
         56:93:31:d0:44:f2:42:79:3f:d4:a2:3d:cc:c3:d7:ca:c8:c5:
         b0:a1:c2:4a:14:72:d5:2b:23:c1:88:5a:38:b2:a4:34:b3:b0:
         68:d3:55:f1:98:78:fe:e0:4f:37:5d:86:6b:99:ac:7f:ba:23:
         88:be:03:73:ec:c0:63:81:2f:31:29:06:47:60:ef:99:6c:09:
         d4:3a:82:07:cd:0a:14:30:bb:c8:f9:3e:e1:23:c8:32:e8:d3:
         c7:9a:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:06:39 2024 by rpki-client on console-ams.rpki-client.org