Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/5upjEfkDDcnqJKGcd7NodJAlLsc.roa
File:                     5upjEfkDDcnqJKGcd7NodJAlLsc.roa (raw, json)
Hash identifier:          G1MKaO4d1MM0/h+PKi+vngiX7dalFWiB8857lqyBFOs=
Subject key identifier:   E6:EA:63:11:F9:03:0D:C9:EA:24:A1:9C:77:B3:68:74:90:25:2E:C7
Certificate issuer:       /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial:       7B2E4C
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/5upjEfkDDcnqJKGcd7NodJAlLsc.roa
Signing time:             Sat 01 Jan 2022 02:51:28 +0000
ROA not before:           Sat 01 Jan 2022 02:51:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        62.3.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8072780 (0x7b2e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
        Validity
            Not Before: Jan  1 02:51:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6ea6311f9030dc9ea24a19c77b3687490252ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:1b:e7:0d:d9:93:ee:d2:18:a5:0d:c7:17:
                    c0:1f:70:6f:43:70:83:53:f7:99:92:3a:27:5b:47:
                    05:0d:82:43:2f:9a:5d:22:94:08:ec:3d:d3:40:d8:
                    19:89:5f:07:13:2f:2a:c6:c7:e0:44:c0:b4:da:9a:
                    57:bf:71:0c:5c:d9:a7:2c:ab:6c:bd:d9:97:8a:ea:
                    31:24:3f:4a:80:13:a0:72:42:21:a3:00:7c:11:db:
                    42:33:4b:1e:33:12:c3:1b:e7:35:0c:86:51:55:01:
                    9c:f4:9f:af:34:29:26:96:a5:95:32:bc:bf:a4:9e:
                    9c:15:04:fa:e7:9f:4b:8b:93:a8:d9:ad:83:02:bd:
                    91:01:4d:62:38:2d:2c:b2:67:7b:6c:35:2e:69:40:
                    88:2d:6a:99:d3:0d:29:ed:da:35:1c:17:85:3c:41:
                    64:15:de:2a:5b:05:ef:08:90:15:e3:1e:55:82:bb:
                    f0:2f:a5:d2:e8:2a:b6:52:75:d2:f5:47:d0:c3:68:
                    ec:e2:b8:00:8d:95:39:ed:3d:c9:00:40:22:26:6c:
                    19:70:9a:28:31:c9:c7:32:6c:03:03:36:5c:0d:08:
                    8e:e3:ab:59:dd:2f:d1:d4:a3:e4:79:02:ce:55:8c:
                    5f:df:e4:29:78:e2:15:48:61:bc:6e:8d:40:01:8d:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EA:63:11:F9:03:0D:C9:EA:24:A1:9C:77:B3:68:74:90:25:2E:C7
            X509v3 Authority Key Identifier:
                keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/5upjEfkDDcnqJKGcd7NodJAlLsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:15:f3:b1:cf:6a:02:97:ef:26:59:03:bf:01:7b:35:8e:
         a0:92:25:0f:ad:1d:68:58:3d:e1:0f:ef:1b:aa:d7:80:93:99:
         2c:7b:01:c7:95:6f:c2:b1:9c:cf:fd:43:ae:59:49:7f:34:ad:
         ce:22:6c:b6:77:05:b3:2c:0d:5e:f7:05:05:cb:31:69:c1:75:
         03:53:4e:fe:89:ea:b3:ee:00:0e:28:2f:c7:f2:ed:ed:a2:d7:
         9d:0f:83:cf:e3:de:0b:45:38:18:29:65:38:15:be:41:a4:2b:
         94:6f:a7:2a:82:e8:35:80:cd:6f:29:40:f9:4c:d4:4b:16:04:
         9f:05:d0:ea:c8:8e:20:b2:52:f8:41:1b:86:60:7c:fd:63:e3:
         57:38:7d:b3:8d:4f:d7:78:34:70:6e:e9:31:d6:9c:ea:a4:7b:
         48:42:63:de:bb:dd:b4:eb:b2:dc:fa:ae:ef:be:db:b1:2a:8f:
         80:f9:a3:bf:20:54:28:20:47:b7:44:45:47:e2:0a:cc:1e:1d:
         60:3d:3b:9b:3d:2e:0d:ac:22:d3:ba:49:aa:49:b4:65:95:05:
         38:2e:c5:99:2f:16:2d:22:40:eb:cf:f6:a2:42:f5:f8:52:a4:
         1a:78:6c:85:57:d3:3e:45:cd:70:40:af:8b:a2:a4:94:6b:5f:
         dd:e4:61:06
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDey5MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM1
MDRhNGYyYmQ0M2UwZjRhMDY3M2I4NzQzZjE1ZmJkNTE0NTk5ZmUwHhcNMjIwMTAx
MDI1MTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlNmVhNjMxMWY5MDMw
ZGM5ZWEyNGExOWM3N2IzNjg3NDkwMjUyZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuygb5w3Zk+7SGKUNxxfAH3BvQ3CDU/eZkjonW0cFDYJDL5pd
IpQI7D3TQNgZiV8HEy8qxsfgRMC02ppXv3EMXNmnLKtsvdmXiuoxJD9KgBOgckIh
owB8EdtCM0seMxLDG+c1DIZRVQGc9J+vNCkmlqWVMry/pJ6cFQT6559Li5Oo2a2D
Ar2RAU1iOC0ssmd7bDUuaUCILWqZ0w0p7do1HBeFPEFkFd4qWwXvCJAV4x5Vgrvw
L6XS6Cq2UnXS9UfQw2js4rgAjZU57T3JAEAiJmwZcJooMcnHMmwDAzZcDQiO46tZ
3S/R1KPkeQLOVYxf3+QpeOIVSGG8bo1AAY1gPQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFObqYxH5Aw3J6iShnHezaHSQJS7HMB8GA1UdIwQYMBaAFDUEpPK9Q+D0oGc7
h0PxX71RRZn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TlFTazhyMUQ0UFNnWnp1SFFfRmZ2VkZGbWY0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82ZS9iYTk4ODQtODE4Yy00YmZjLWI3N2QtMWZjZGE0OGFiZTUzLzEv
NXVwakVma0REY25xSktHY2Q3Tm9kSkFsTHNjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9i
YTk4ODQtODE4Yy00YmZjLWI3N2QtMWZjZGE0OGFiZTUzLzEvTlFTazhyMUQ0UFNn
Wnp1SFFfRmZ2VkZGbWY0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMSMA0GCSqGSIb3DQEBCwUAA4IB
AQAD6hXzsc9qApfvJlkDvwF7NY6gkiUPrR1oWD3hD+8bqteAk5ksewHHlW/CsZzP
/UOuWUl/NK3OImy2dwWzLA1e9wUFyzFpwXUDU07+ieqz7gAOKC/H8u3totedD4PP
494LRTgYKWU4Fb5BpCuUb6cqgug1gM1vKUD5TNRLFgSfBdDqyI4gslL4QRuGYHz9
Y+NXOH2zjU/XeDRwbukx1pzqpHtIQmPeu92067Lc+q7vvtuxKo+A+aO/IFQoIEe3
REVH4grMHh1gPTubPS4NrCLTukmqSbRllQU4LsWZLxYtIkDrz/aiQvX4UqQaeGyF
V9M+Rc1wQK+LoqSUa1/d5GEG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org