Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/RsrW6ETxBxyn5SMxdCVLl7i65xM.roa
File:                     RsrW6ETxBxyn5SMxdCVLl7i65xM.roa (raw, json)
Hash identifier:          tpjQ1BgSr9iPmCGT/0W1H4f61iSxmm516yE95IevSuk=
Subject key identifier:   46:CA:D6:E8:44:F1:07:1C:A7:E5:23:31:74:25:4B:97:B8:BA:E7:13
Certificate issuer:       /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial:       70688E
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/RsrW6ETxBxyn5SMxdCVLl7i65xM.roa
Signing time:             Tue 24 May 2022 09:50:13 +0000
ROA not before:           Tue 24 May 2022 09:50:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        176.116.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7366798 (0x70688e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
        Validity
            Not Before: May 24 09:50:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46cad6e844f1071ca7e5233174254b97b8bae713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:1c:54:d9:14:27:71:41:1d:c9:45:9d:0b:
                    57:5c:7f:38:a1:e9:53:98:9a:32:88:39:3e:91:c1:
                    b7:4f:a2:20:03:bc:30:62:77:65:5d:01:23:0e:46:
                    a5:7d:73:67:5d:49:8f:25:46:20:2d:95:ee:89:94:
                    9f:0f:69:8c:05:15:a0:08:e8:8d:fd:22:f5:29:18:
                    23:ee:eb:30:39:df:00:40:a8:26:1d:02:15:5d:ac:
                    9b:2d:d7:08:e9:c6:3f:44:8a:88:87:28:77:e8:61:
                    51:f7:91:7d:f1:e1:0e:7d:e7:6a:91:8a:3c:8b:3d:
                    c0:30:15:74:1a:ac:ff:a5:eb:41:52:75:92:9b:12:
                    09:34:4c:89:e2:eb:76:79:4d:4e:9e:bd:54:3c:cf:
                    f2:75:bd:d5:56:9a:20:d8:c0:50:b8:24:58:eb:74:
                    19:1d:4e:1d:e4:3d:f5:4a:ba:23:50:79:cd:9e:7c:
                    f8:ed:ab:d0:de:56:03:e8:71:30:f2:68:e9:ab:1d:
                    bb:97:7e:92:32:2f:fa:1c:7f:89:32:3c:f8:ec:83:
                    58:f5:90:a8:3c:86:c4:2f:d7:6b:da:27:db:a2:53:
                    d0:a6:cb:5b:53:a6:19:9e:a5:09:6e:8f:96:89:31:
                    b6:aa:0e:8d:86:2a:e2:33:db:e5:e1:7e:c3:25:b8:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:D6:E8:44:F1:07:1C:A7:E5:23:31:74:25:4B:97:B8:BA:E7:13
            X509v3 Authority Key Identifier:
                keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/RsrW6ETxBxyn5SMxdCVLl7i65xM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:f0:1d:33:dd:7d:d2:4f:4a:1d:c1:03:9a:1e:bf:42:bd:
         53:97:48:39:db:d0:f4:da:23:cb:62:be:b6:7e:f4:ed:49:47:
         2d:55:3c:ed:0f:29:0e:de:c2:73:c2:f4:05:29:c4:14:b9:6b:
         a8:fd:d9:a9:75:e2:04:61:ff:35:5e:2c:97:6c:64:09:12:46:
         be:b1:1d:cb:75:06:44:06:91:db:17:33:54:b2:c8:7f:a1:32:
         eb:f4:51:7d:5f:fa:31:9b:d9:9e:f7:ce:bb:b9:99:e6:c2:9f:
         cb:18:ec:08:81:77:c2:e8:32:25:4d:f6:67:3b:73:63:14:76:
         9d:bb:7d:47:a9:d3:16:19:46:07:dd:1b:75:7c:31:f7:77:45:
         43:b0:6c:29:7b:24:53:19:2d:12:25:a8:c1:51:83:b5:a5:53:
         64:a0:60:0b:e7:ad:99:25:8f:a4:9f:90:b6:94:67:c7:af:c5:
         28:0e:d1:ad:ae:30:e0:e7:8b:ce:24:6d:80:8f:fd:78:3c:71:
         74:83:59:a6:25:c3:28:fa:7a:54:cf:8e:39:bf:3f:6e:21:f9:
         66:09:db:50:0f:4e:0e:a2:99:75:11:6a:7d:6b:a5:ff:22:cf:
         a2:9a:e8:68:32:09:6d:ec:c0:25:69:aa:c8:c4:c0:57:f4:d8:
         c9:25:05:1c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDcGiOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
NGQ4MWQyMTVlZDUxZGZjYzNjM2JjMGU3ZTdiZjE1NDM3M2FkMDUwHhcNMjIwNTI0
MDk1MDEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0NmNhZDZlODQ0ZjEw
NzFjYTdlNTIzMzE3NDI1NGI5N2I4YmFlNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAslEcVNkUJ3FBHclFnQtXXH84oelTmJoyiDk+kcG3T6IgA7ww
YndlXQEjDkalfXNnXUmPJUYgLZXuiZSfD2mMBRWgCOiN/SL1KRgj7uswOd8AQKgm
HQIVXaybLdcI6cY/RIqIhyh36GFR95F98eEOfedqkYo8iz3AMBV0Gqz/petBUnWS
mxIJNEyJ4ut2eU1Onr1UPM/ydb3VVpog2MBQuCRY63QZHU4d5D31SrojUHnNnnz4
7avQ3lYD6HEw8mjpqx27l36SMi/6HH+JMjz47INY9ZCoPIbEL9dr2ifbolPQpstb
U6YZnqUJbo+WiTG2qg6NhiriM9vl4X7DJbjOGQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEbK1uhE8Qccp+UjMXQlS5e4uucTMB8GA1UdIwQYMBaAFEpNgdIV7VHfzDw7
wOfnvxVDc60FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
U2syQjBoWHRVZF9NUER2QTUtZV9GVU56clFVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83Ny85NzU5ZTMtNzI2MC00ZTBlLTk4MjYtNGE3MDhkMTI5NTJiLzEv
UnNyVzZFVHhCeHluNVNNeGRDVkxsN2k2NXhNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85
NzU5ZTMtNzI2MC00ZTBlLTk4MjYtNGE3MDhkMTI5NTJiLzEvU2syQjBoWHRVZF9N
UER2QTUtZV9GVU56clFVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQGMA0GCSqGSIb3DQEBCwUAA4IB
AQB+fPAdM9190k9KHcEDmh6/Qr1Tl0g529D02iPLYr62fvTtSUctVTztDykO3sJz
wvQFKcQUuWuo/dmpdeIEYf81XiyXbGQJEka+sR3LdQZEBpHbFzNUssh/oTLr9FF9
X/oxm9me9867uZnmwp/LGOwIgXfC6DIlTfZnO3NjFHadu31HqdMWGUYH3Rt1fDH3
d0VDsGwpeyRTGS0SJajBUYO1pVNkoGAL562ZJY+kn5C2lGfHr8UoDtGtrjDg54vO
JG2Aj/14PHF0g1mmJcMo+npUz445vz9uIflmCdtQD04Oopl1EWp9a6X/Is+imuho
Mglt7MAlaarIxMBX9NjJJQUc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:28 2024 by rpki-client on console-fra.rpki-client.org