Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/lglaLia6hlABB3bewnJpChT3mNA.roa
File:                     lglaLia6hlABB3bewnJpChT3mNA.roa (raw, json)
Hash identifier:          4z3lUahf4rsGiFd68ocZkyzOWWKEB5craTYmLgQ7L3Y=
Subject key identifier:   96:09:5A:2E:26:BA:86:50:01:07:76:DE:C2:72:69:0A:14:F7:98:D0
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018AB0EE1ED8F31668105676CC0AAB6DB1EF
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/lglaLia6hlABB3bewnJpChT3mNA.roa
Signing time:             Wed 20 Sep 2023 04:51:50 +0000
ROA not before:           Wed 20 Sep 2023 04:51:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        91.217.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b0:ee:1e:d8:f3:16:68:10:56:76:cc:0a:ab:6d:b1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Sep 20 04:51:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96095a2e26ba8650010776dec272690a14f798d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:46:54:57:ca:b7:8b:e1:bd:4e:fd:a3:c8:
                    9c:35:e3:78:cb:8d:03:5e:e4:40:6f:0e:cd:22:81:
                    66:57:5f:d1:68:03:ef:57:53:33:a1:db:d5:85:89:
                    48:65:f9:e5:18:22:11:f7:fe:14:28:01:73:c1:f9:
                    e2:ea:b2:8f:6a:b3:9b:53:dc:68:17:87:ac:1d:31:
                    04:6c:d3:8f:a1:2a:68:ca:60:ba:d5:bd:38:04:a4:
                    09:6b:9a:8d:05:96:ff:48:d3:69:36:f3:40:a9:0d:
                    e6:db:cd:fb:26:3f:ae:0d:aa:cb:9c:a1:14:df:d9:
                    b5:b0:24:bc:8c:36:a5:84:d4:47:6a:13:23:b3:a8:
                    5e:9d:e8:c4:d8:81:f5:45:f8:c4:b1:8e:11:b9:c4:
                    f3:d3:6d:4e:4b:6e:1c:1f:69:7f:c1:c3:10:4f:50:
                    7e:47:f8:29:c9:7a:bb:5e:42:94:a5:bf:6a:76:ef:
                    d6:2f:2e:dc:01:df:50:b7:79:b1:04:9c:c3:0e:3e:
                    45:8c:97:47:ef:13:7d:ae:58:31:c8:a4:0b:a4:8f:
                    01:6e:12:ca:a0:66:44:b7:df:b4:a4:bb:a0:c0:49:
                    6d:30:ba:ae:6e:65:75:26:9e:17:d8:09:18:19:92:
                    5c:ca:bb:90:44:e6:b2:21:08:4d:d7:d3:2a:dc:2b:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:5A:2E:26:BA:86:50:01:07:76:DE:C2:72:69:0A:14:F7:98:D0
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/lglaLia6hlABB3bewnJpChT3mNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a3:e3:4e:bf:7f:66:42:4d:29:69:43:90:40:7e:1f:07:3d:
         96:c1:59:a4:ca:eb:08:45:40:28:bb:bf:96:b3:b0:9e:da:78:
         c6:8d:ea:07:7f:1c:b4:b9:eb:2f:42:ef:2d:51:68:fe:57:9d:
         ea:da:09:c4:66:53:81:1c:f4:b4:b9:08:b5:9f:f2:b7:2d:7a:
         30:b6:02:e0:1b:c4:6f:24:4f:d8:b5:55:03:64:60:33:48:54:
         0f:ab:fd:61:d0:56:4b:d7:01:61:ee:d9:9c:b6:0c:44:22:77:
         a0:b0:1e:ac:9b:9d:db:98:e4:90:c7:80:b5:c0:9a:6d:d3:33:
         30:16:2a:e1:ce:59:f0:7d:54:e3:86:b4:1c:1a:e1:01:00:58:
         cd:fd:61:17:93:4d:01:2c:e6:05:0f:cc:dd:7d:12:a8:09:1f:
         2a:10:ca:e5:6e:13:4f:a5:f0:23:fe:a7:00:f8:c6:94:dd:81:
         cd:f1:6c:22:75:d7:b6:49:c8:c4:dd:5d:8d:1a:68:2e:0b:fb:
         33:ce:4e:7f:32:33:97:e4:62:78:a9:29:03:7e:c2:51:62:f7:
         6d:eb:05:37:18:9e:4d:94:57:88:39:69:0b:1d:f0:05:37:cb:
         5b:c9:17:f8:26:4c:2f:53:d1:f2:99:af:e3:90:44:74:1d:f1:
         37:3b:62:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqw7h7Y8xZoEFZ2zAqrbbHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmNiNzllZjU4YTFjOThlMTUxZjYwYzUxNDI2Zjc0ZWIx
YzM5MzgwHhcNMjMwOTIwMDQ1MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjA5NWEyZTI2YmE4NjUwMDEwNzc2ZGVjMjcyNjkwYTE0Zjc5OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygRGVFfKt4vhvU79o8icNeN4y40D
XuRAbw7NIoFmV1/RaAPvV1MzodvVhYlIZfnlGCIR9/4UKAFzwfni6rKParObU9xo
F4esHTEEbNOPoSpoymC61b04BKQJa5qNBZb/SNNpNvNAqQ3m2837Jj+uDarLnKEU
39m1sCS8jDalhNRHahMjs6henejE2IH1RfjEsY4RucTz021OS24cH2l/wcMQT1B+
R/gpyXq7XkKUpb9qdu/WLy7cAd9Qt3mxBJzDDj5FjJdH7xN9rlgxyKQLpI8BbhLK
oGZEt9+0pLugwEltMLqubmV1Jp4X2AkYGZJcyruQROayIQhN19Mq3CsIOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJYJWi4muoZQAQd23sJyaQoU95jQMB8GA1UdIwQY
MBaAFD68t571ihyY4VH2DFFCb3TrHDk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQt
ZTlmNzlkZmJkMmU2LzEvbGdsYUxpYTZobEFCQjNiZXduSnBDaFQzbU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQtZTlmNzlkZmJkMmU2
LzEvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nbMA0G
CSqGSIb3DQEBCwUAA4IBAQCQo+NOv39mQk0paUOQQH4fBz2WwVmkyusIRUAou7+W
s7Ce2njGjeoHfxy0uesvQu8tUWj+V53q2gnEZlOBHPS0uQi1n/K3LXowtgLgG8Rv
JE/YtVUDZGAzSFQPq/1h0FZL1wFh7tmctgxEInegsB6sm53bmOSQx4C1wJpt0zMw
FirhzlnwfVTjhrQcGuEBAFjN/WEXk00BLOYFD8zdfRKoCR8qEMrlbhNPpfAj/qcA
+MaU3YHN8Wwidde2ScjE3V2NGmguC/szzk5/MjOX5GJ4qSkDfsJRYvdt6wU3GJ5N
lFeIOWkLHfAFN8tbyRf4JkwvU9Hyma/jkER0HfE3O2J6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:34 2024 by rpki-client on console-ams.rpki-client.org