Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/M_Vr58YUzJICm-_vh91FpWcVhXg.roa
File:                     M_Vr58YUzJICm-_vh91FpWcVhXg.roa (raw, json)
Hash identifier:          NCeeHSOqiSXX+SguBpSv772R3WtLyCkUTPjkD7TrZEs=
Subject key identifier:   33:F5:6B:E7:C6:14:CC:92:02:9B:EF:EF:87:DD:45:A5:67:15:85:78
Certificate issuer:       /CN=647512ad1bb888a7242a584c6f2964988f5c87d4
Certificate serial:       1067C2
Authority key identifier: 64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/M_Vr58YUzJICm-_vh91FpWcVhXg.roa
Signing time:             Tue 17 May 2022 06:36:29 +0000
ROA not before:           Tue 17 May 2022 06:36:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6453
IP address blocks:        77.75.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075138 (0x1067c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647512ad1bb888a7242a584c6f2964988f5c87d4
        Validity
            Not Before: May 17 06:36:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33f56be7c614cc92029befef87dd45a567158578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f7:fb:a7:ec:b7:4d:2f:ae:55:71:ff:42:77:
                    12:5f:00:ef:92:50:36:c8:d7:67:96:2c:22:f2:f9:
                    96:cf:dd:4e:17:d2:51:c9:2f:c9:5c:91:4a:4b:27:
                    60:13:91:38:32:08:4a:a6:af:c2:c8:7d:11:4b:16:
                    59:4c:cd:f1:d6:8d:28:f7:a4:69:10:0b:a3:b6:47:
                    2b:50:d6:bc:74:c7:3a:e8:dd:5d:9a:e0:9f:40:4f:
                    28:71:7a:f1:47:55:7c:b7:af:7b:65:31:a0:8b:ed:
                    33:63:ac:16:0d:9c:ef:d9:38:15:86:8b:3b:e2:45:
                    6e:c4:94:a6:88:ec:2d:30:ad:e8:5e:42:f6:aa:9e:
                    f8:25:0c:20:1c:58:c2:5e:b5:63:38:a7:e8:30:e1:
                    04:96:50:fb:b0:c4:f2:1c:a2:01:45:ac:d4:52:e1:
                    73:66:63:2e:ec:6e:00:28:2b:e4:4b:09:d4:c9:4a:
                    80:a9:33:4b:d4:fd:1f:ca:84:80:2d:d9:a3:f4:33:
                    82:2f:6c:6e:74:dc:9e:5f:34:56:5e:8f:e8:c3:29:
                    95:ca:05:b1:09:19:a7:73:bb:86:01:39:b3:d3:44:
                    bd:6d:49:60:6b:de:a8:b9:36:bc:23:2b:ea:d1:0c:
                    08:3d:bb:8b:a3:86:0a:b6:15:2d:fd:75:e9:58:de:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F5:6B:E7:C6:14:CC:92:02:9B:EF:EF:87:DD:45:A5:67:15:85:78
            X509v3 Authority Key Identifier:
                keyid:64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/M_Vr58YUzJICm-_vh91FpWcVhXg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:98:5d:95:98:3b:74:2c:61:25:05:68:34:d1:43:ea:a4:
         41:8e:e8:ef:e6:dd:f2:30:4e:dc:b2:df:5b:2b:b1:24:bb:1c:
         46:e5:10:15:2e:9a:18:01:c1:69:bc:48:65:f1:dc:23:4f:c6:
         f5:88:ea:6c:24:eb:c6:93:61:7c:ec:aa:77:41:78:50:9a:96:
         d2:46:dc:13:01:cd:18:87:35:4e:df:85:e4:52:32:a9:c4:70:
         d0:b4:6d:61:31:9d:f9:21:41:1d:9d:12:09:57:de:d9:d3:db:
         44:7c:09:4e:99:8d:db:d8:77:e2:d6:6a:85:a4:42:25:7d:35:
         d3:16:34:a4:ba:38:be:bf:b6:d0:2f:02:b8:bf:7f:95:f2:c6:
         9c:a9:93:c0:22:9a:e5:fc:d6:54:60:20:4d:cd:5b:94:a1:f5:
         a2:96:5e:c6:bc:a0:98:a3:ac:82:6e:1c:f2:f3:cd:1b:c8:1c:
         9c:17:1a:dc:c9:35:e8:42:ae:b8:48:95:10:d1:43:1f:cb:4b:
         53:44:93:9e:d0:2a:2c:7b:77:fa:de:37:08:1d:60:91:7e:11:
         ba:00:50:11:83:18:e6:43:4e:b2:ed:7d:f3:58:e7:62:6e:b5:
         80:1d:52:17:52:a9:00:52:58:30:bc:f0:2a:cc:d8:c7:60:ab:
         91:e0:80:53
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDEGfCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
NzUxMmFkMWJiODg4YTcyNDJhNTg0YzZmMjk2NDk4OGY1Yzg3ZDQwHhcNMjIwNTE3
MDYzNjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzM2Y1NmJlN2M2MTRj
YzkyMDI5YmVmZWY4N2RkNDVhNTY3MTU4NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4ff7p+y3TS+uVXH/QncSXwDvklA2yNdnliwi8vmWz91OF9JR
yS/JXJFKSydgE5E4MghKpq/CyH0RSxZZTM3x1o0o96RpEAujtkcrUNa8dMc66N1d
muCfQE8ocXrxR1V8t697ZTGgi+0zY6wWDZzv2TgVhos74kVuxJSmiOwtMK3oXkL2
qp74JQwgHFjCXrVjOKfoMOEEllD7sMTyHKIBRazUUuFzZmMu7G4AKCvkSwnUyUqA
qTNL1P0fyoSALdmj9DOCL2xudNyeXzRWXo/owymVygWxCRmnc7uGATmz00S9bUlg
a96ouTa8Iyvq0QwIPbuLo4YKthUt/XXpWN4rfQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDP1a+fGFMySApvv74fdRaVnFYV4MB8GA1UdIwQYMBaAFGR1Eq0buIinJCpY
TG8pZJiPXIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WkhVU3JSdTRpS2NrS2xoTWJ5bGttSTljaDlRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82ZS82MWM0NzgtMjI1Ny00OWFhLTllODAtMmJkM2ZjZmJmODQ1LzEv
TV9WcjU4WVV6SklDbS1fdmg5MUZwV2NWaFhnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82
MWM0NzgtMjI1Ny00OWFhLTllODAtMmJkM2ZjZmJmODQ1LzEvWkhVU3JSdTRpS2Nr
S2xoTWJ5bGttSTljaDlRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUvgMA0GCSqGSIb3DQEBCwUAA4IB
AQA7/ZhdlZg7dCxhJQVoNNFD6qRBjujv5t3yME7cst9bK7EkuxxG5RAVLpoYAcFp
vEhl8dwjT8b1iOpsJOvGk2F87Kp3QXhQmpbSRtwTAc0YhzVO34XkUjKpxHDQtG1h
MZ35IUEdnRIJV97Z09tEfAlOmY3b2Hfi1mqFpEIlfTXTFjSkuji+v7bQLwK4v3+V
8sacqZPAIprl/NZUYCBNzVuUofWill7GvKCYo6yCbhzy880byBycFxrcyTXoQq64
SJUQ0UMfy0tTRJOe0Cose3f63jcIHWCRfhG6AFARgxjmQ06y7X3zWOdibrWAHVIX
UqkAUlgwvPAqzNjHYKuR4IBT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:12 2024 by rpki-client on console-fra.rpki-client.org