Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/woemMUgRQj4qSaSv7W43hGJJzHc.roa
File:                     woemMUgRQj4qSaSv7W43hGJJzHc.roa (raw, json)
Hash identifier:          uU4W8B47u46ARv8RxEUp6mBiAXaz3ErV1i653Mu90ng=
Subject key identifier:   C2:87:A6:31:48:11:42:3E:2A:49:A4:AF:ED:6E:37:84:62:49:CC:77
Certificate issuer:       /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial:       01AA311C
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/woemMUgRQj4qSaSv7W43hGJJzHc.roa
Signing time:             Thu 23 Jun 2022 05:52:32 +0000
ROA not before:           Thu 23 Jun 2022 05:52:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140947
IP address blocks:        45.156.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27930908 (0x1aa311c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
        Validity
            Not Before: Jun 23 05:52:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c287a6314811423e2a49a4afed6e37846249cc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:75:78:c5:49:d2:fb:89:89:70:50:68:1e:
                    8a:12:0a:d6:87:b8:ad:50:92:b3:08:e5:18:39:3a:
                    ce:26:21:db:7c:fa:ca:81:12:97:04:e1:ca:e1:85:
                    f1:24:25:73:ed:63:2f:cf:a0:e5:2a:5b:d6:e7:fb:
                    e3:87:82:06:7c:05:68:ca:65:ee:8f:70:ea:01:9d:
                    c5:cc:5a:20:83:0e:98:94:2b:41:6f:51:14:27:71:
                    26:8b:8e:1d:ca:c0:74:bd:c0:64:f0:fe:63:73:4c:
                    2c:62:2c:ab:df:36:1d:99:a5:b3:27:7e:1c:65:6e:
                    72:2a:fd:39:11:41:f9:a8:1a:81:7c:da:5e:69:75:
                    0c:6c:1a:1d:75:2d:9a:ec:00:6a:63:2b:d8:3a:95:
                    b7:df:64:af:d1:9a:5e:44:fe:5f:57:78:80:b8:02:
                    31:f7:86:46:54:39:06:96:84:9d:b1:55:ce:ca:1e:
                    9b:a7:72:d0:bd:df:56:6a:f3:9e:e1:33:83:44:0f:
                    62:fc:71:00:79:8d:f5:5e:6d:d9:7b:a2:ad:de:53:
                    81:a5:ae:be:c4:91:87:d4:be:6f:5f:4e:f8:14:66:
                    b4:80:e7:a8:5a:55:17:ff:41:02:6e:3e:8c:c0:8b:
                    4e:f9:96:52:2a:99:7b:13:57:f5:3e:6e:c3:b3:44:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:A6:31:48:11:42:3E:2A:49:A4:AF:ED:6E:37:84:62:49:CC:77
            X509v3 Authority Key Identifier:
                keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/woemMUgRQj4qSaSv7W43hGJJzHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:aa:fa:2d:ab:09:78:48:67:0c:c5:35:4b:58:3f:c3:c2:64:
         9d:d2:1a:45:b4:93:0e:c0:0c:86:b1:ff:76:51:6d:1c:f2:1f:
         3c:ee:bc:92:a6:a5:72:88:dd:cd:f9:ac:0b:67:94:eb:3f:75:
         42:56:61:7a:f7:55:2c:88:cb:3f:e9:f4:df:ac:8b:db:86:5b:
         19:ad:5a:f8:d3:39:50:03:42:55:60:33:81:2b:db:59:ed:3b:
         f3:18:c1:8f:79:2f:19:7b:9d:e4:5a:7a:c7:61:56:ea:d1:49:
         1f:53:18:cd:6e:b4:ab:52:a2:74:5a:0a:4b:9d:e4:54:12:5c:
         4a:35:e1:fd:20:b0:53:74:ac:7d:18:13:78:f7:ae:5f:a6:1a:
         ae:10:2a:9a:8b:c7:19:12:cd:94:da:68:37:7c:27:2f:dc:6c:
         1b:fc:13:6c:72:f3:a7:05:6c:c6:10:d2:53:23:0e:59:90:33:
         1b:79:94:5a:44:46:0b:9b:b2:f2:a9:e6:b4:73:55:7b:05:31:
         51:f1:1b:17:af:fa:9b:66:70:00:05:78:65:c6:d0:b9:75:21:
         9c:5e:87:19:e0:6b:9f:c0:ac:c3:92:28:76:f2:9a:d1:94:ad:
         6d:e3:b2:b0:6f:9a:55:ac:60:92:d4:55:28:40:d1:77:8d:f4:
         37:e6:20:04
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAaoxHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MDZjNDMwYjYxYmU3YTM4MDE5MWNkNWRmZDEwNWMzYWYyMTQ4MmZjMB4XDTIyMDYy
MzA1NTIzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI4N2E2MzE0ODEx
NDIzZTJhNDlhNGFmZWQ2ZTM3ODQ2MjQ5Y2M3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtTdXjFSdL7iYlwUGgeihIK1oe4rVCSswjlGDk6ziYh23z6
yoESlwThyuGF8SQlc+1jL8+g5Spb1uf744eCBnwFaMpl7o9w6gGdxcxaIIMOmJQr
QW9RFCdxJouOHcrAdL3AZPD+Y3NMLGIsq982HZmlsyd+HGVucir9ORFB+agagXza
Xml1DGwaHXUtmuwAamMr2DqVt99kr9GaXkT+X1d4gLgCMfeGRlQ5BpaEnbFVzsoe
m6dy0L3fVmrznuEzg0QPYvxxAHmN9V5t2Xuird5TgaWuvsSRh9S+b19O+BRmtIDn
qFpVF/9BAm4+jMCLTvmWUiqZexNX9T5uw7NEprkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCh6YxSBFCPipJpK/tbjeEYknMdzAfBgNVHSMEGDAWgBSwbEMLYb56OAGR
zV39EFw68hSC/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NHeERDMkctZWpnQmtjMWRfUkJjT3ZJVWd2dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvNGRhNWZjLTMxNzQtNGYxNy1hOWQ1LWY1ODMxMDdjODk4Zi8x
L3dvZW1NVWdSUWo0cVNhU3Y3VzQzaEdKSnpIYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
NGRhNWZjLTMxNzQtNGYxNy1hOWQ1LWY1ODMxMDdjODk4Zi8xL3NHeERDMkctZWpn
QmtjMWRfUkJjT3ZJVWd2dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2cdTANBgkqhkiG9w0BAQsFAAOC
AQEAfKr6LasJeEhnDMU1S1g/w8JkndIaRbSTDsAMhrH/dlFtHPIfPO68kqalcojd
zfmsC2eU6z91QlZhevdVLIjLP+n036yL24ZbGa1a+NM5UANCVWAzgSvbWe078xjB
j3kvGXud5Fp6x2FW6tFJH1MYzW60q1KidFoKS53kVBJcSjXh/SCwU3SsfRgTePeu
X6YarhAqmovHGRLNlNpoN3wnL9xsG/wTbHLzpwVsxhDSUyMOWZAzG3mUWkRGC5uy
8qnmtHNVewUxUfEbF6/6m2ZwAAV4ZcbQuXUhnF6HGeBrn8Csw5IodvKa0ZStbeOy
sG+aVaxgktRVKEDRd430N+YgBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org