Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/_KZBiOX_r6hmZ8RgK5LnTRj763k.roa
File:                     _KZBiOX_r6hmZ8RgK5LnTRj763k.roa (raw, json)
Hash identifier:          dGleiOL2vSR1SmnqYVVkDZMzuVZz6aB+9kGItjxFlUs=
Subject key identifier:   FC:A6:41:88:E5:FF:AF:A8:66:67:C4:60:2B:92:E7:4D:18:FB:EB:79
Certificate issuer:       /CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
Certificate serial:       087DB516
Authority key identifier: A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/_KZBiOX_r6hmZ8RgK5LnTRj763k.roa
Signing time:             Sat 01 Jan 2022 11:05:11 +0000
ROA not before:           Sat 01 Jan 2022 11:05:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208882
IP address blocks:        45.81.40.0/23 maxlen: 23
                          2a0e:4d80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142456086 (0x87db516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
        Validity
            Not Before: Jan  1 11:05:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fca64188e5ffafa86667c4602b92e74d18fbeb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:53:eb:dc:63:12:c7:78:62:b0:0e:71:74:
                    64:6c:df:1f:71:cf:5e:dc:b7:ba:d3:c1:f8:c7:87:
                    8d:1d:5e:9e:1d:33:ec:e0:1e:fd:c8:6b:b5:a8:ef:
                    ae:f0:02:50:8a:cc:3c:17:6a:ad:6b:de:38:85:c1:
                    cc:b1:ef:e5:a5:e0:54:a4:71:f3:c4:4b:c6:05:72:
                    9a:a5:32:f6:5f:28:94:3e:2a:92:41:4b:8d:21:10:
                    8b:a2:92:d5:c6:4a:e8:f6:58:a7:dc:75:84:6f:ac:
                    c6:b9:ca:aa:e9:4c:5c:31:89:5d:30:d9:34:9a:13:
                    66:50:04:a0:32:b8:a7:79:5f:6f:1e:93:a0:7c:fe:
                    20:d7:f1:c3:5f:3d:5f:d4:5b:a0:34:37:cf:71:81:
                    d6:33:17:ee:af:2f:3e:11:78:e2:48:76:2d:9b:9b:
                    9c:f1:cb:b8:52:73:1b:f1:4c:08:f2:a7:9f:ef:94:
                    64:fa:42:fa:9f:fd:4d:c9:8c:f8:3b:3e:b6:72:f0:
                    70:1e:ec:b0:d7:be:a3:68:dc:11:5b:bd:18:f4:7e:
                    d2:48:00:6b:9e:ee:e2:b4:23:45:8c:48:8f:11:a0:
                    dd:c8:03:1b:91:90:ec:44:04:de:7a:12:a1:a7:32:
                    93:dd:e9:d0:d9:ec:2b:82:38:d8:b3:98:89:98:46:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:41:88:E5:FF:AF:A8:66:67:C4:60:2B:92:E7:4D:18:FB:EB:79
            X509v3 Authority Key Identifier:
                keyid:A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/_KZBiOX_r6hmZ8RgK5LnTRj763k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/oc5tOQmePRamA5kqwh9YVUquz38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.40.0/23
                IPv6:
                  2a0e:4d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:65:9a:1d:e8:f3:e8:7f:d2:4d:79:7d:1c:4a:dc:f9:ce:
         45:14:91:85:42:03:f2:58:2c:1c:3e:52:f6:d1:ed:03:df:80:
         0b:67:fa:83:0b:c9:3e:cb:b1:51:6c:06:d2:e1:bb:64:e5:98:
         05:1c:bf:a6:42:fa:5b:98:1c:ef:ee:09:e7:46:fe:fe:7c:3f:
         29:e0:39:20:4a:3b:32:7c:27:05:a9:d8:37:47:64:58:4c:e0:
         c7:88:bd:89:cd:93:88:10:de:16:27:1d:e3:23:57:0c:32:13:
         42:0d:97:f1:48:c2:28:6d:d0:70:7d:b5:e3:96:a9:3c:9f:3a:
         9d:d9:16:21:57:15:86:f9:66:a8:6f:63:f4:46:ef:9b:6a:1e:
         da:df:61:83:f5:8b:de:9e:5b:19:2a:95:1d:b0:22:bf:41:ca:
         3c:0b:78:8a:b8:26:fd:b2:ad:aa:2c:a8:3a:c4:e1:15:f7:6e:
         1e:78:5e:c3:42:3e:24:70:c4:90:c8:53:6d:6f:5f:ba:53:7a:
         b5:7b:57:c1:30:87:42:84:22:74:a6:e2:44:a7:b4:62:8b:ce:
         2c:93:46:22:1e:15:b6:63:c4:c9:0a:3c:7d:ec:c9:23:98:75:
         c4:92:72:8a:5e:69:ac:57:70:3c:42:f7:28:e0:70:ce:93:a1:
         74:1a:61:13
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECH21FjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MWNlNmQzOTA5OWUzZDE2YTYwMzk5MmFjMjFmNTg1NTRhYWVjZjdmMB4XDTIyMDEw
MTExMDUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmNhNjQxODhlNWZm
YWZhODY2NjdjNDYwMmI5MmU3NGQxOGZiZWI3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANWOU+vcYxLHeGKwDnF0ZGzfH3HPXty3utPB+MeHjR1enh0z
7OAe/chrtajvrvACUIrMPBdqrWveOIXBzLHv5aXgVKRx88RLxgVymqUy9l8olD4q
kkFLjSEQi6KS1cZK6PZYp9x1hG+sxrnKqulMXDGJXTDZNJoTZlAEoDK4p3lfbx6T
oHz+INfxw189X9RboDQ3z3GB1jMX7q8vPhF44kh2LZubnPHLuFJzG/FMCPKnn++U
ZPpC+p/9TcmM+Ds+tnLwcB7ssNe+o2jcEVu9GPR+0kgAa57u4rQjRYxIjxGg3cgD
G5GQ7EQE3noSoacyk93p0NnsK4I42LOYiZhG5m8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT8pkGI5f+vqGZnxGArkudNGPvreTAfBgNVHSMEGDAWgBShzm05CZ49FqYD
mSrCH1hVSq7PfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29jNXRPUW1lUFJhbUE1a3F3aDlZVlVxdXozOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvMWZlMzZhLWY1OGUtNDRlMS1iNDE1LTNiZjBkZmJjNzQ4ZS8x
L19LWkJpT1hfcjZobVo4UmdLNUxuVFJqNzYzay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
MWZlMzZhLWY1OGUtNDRlMS1iNDE1LTNiZjBkZmJjNzQ4ZS8xL29jNXRPUW1lUFJh
bUE1a3F3aDlZVlVxdXozOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS1RKDANBAIAAjAHAwUDKg5NgDAN
BgkqhkiG9w0BAQsFAAOCAQEAJ/1lmh3o8+h/0k15fRxK3PnORRSRhUID8lgsHD5S
9tHtA9+AC2f6gwvJPsuxUWwG0uG7ZOWYBRy/pkL6W5gc7+4J50b+/nw/KeA5IEo7
MnwnBanYN0dkWEzgx4i9ic2TiBDeFicd4yNXDDITQg2X8UjCKG3QcH2145apPJ86
ndkWIVcVhvlmqG9j9Ebvm2oe2t9hg/WL3p5bGSqVHbAiv0HKPAt4irgm/bKtqiyo
OsThFfduHnhew0I+JHDEkMhTbW9fulN6tXtXwTCHQoQidKbiRKe0YovOLJNGIh4V
tmPEyQo8fezJI5h1xJJyil5prFdwPEL3KOBwzpOhdBphEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:44 2024 by rpki-client on console-ams.rpki-client.org