Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/wU7CST1bN9B1yl3d_lm5ak9Brhw.roa
File:                     wU7CST1bN9B1yl3d_lm5ak9Brhw.roa (raw, json)
Hash identifier:          QO0qD/HYJK8v88Bd0okLUle+Evs723fgozjCNQ1gBNU=
Subject key identifier:   C1:4E:C2:49:3D:5B:37:D0:75:CA:5D:DD:FE:59:B9:6A:4F:41:AE:1C
Certificate issuer:       /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial:       018475E4E9522851624C91AD026982BE7A00
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/wU7CST1bN9B1yl3d_lm5ak9Brhw.roa
Signing time:             Mon 14 Nov 2022 11:27:27 +0000
ROA not before:           Mon 14 Nov 2022 11:27:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210439
IP address blocks:        176.116.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:75:e4:e9:52:28:51:62:4c:91:ad:02:69:82:be:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
        Validity
            Not Before: Nov 14 11:27:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c14ec2493d5b37d075ca5dddfe59b96a4f41ae1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:f4:3a:b1:1c:9f:a5:07:a7:b1:26:6d:3e:
                    ee:fd:cd:c3:c7:e8:58:21:ca:ee:c5:91:e4:be:1e:
                    71:dd:94:d3:eb:9e:1d:65:df:c7:b7:63:4c:d6:e0:
                    fc:d7:da:22:30:f1:75:d5:78:99:1a:06:17:82:f3:
                    1f:87:83:b8:53:ce:76:0a:68:07:80:9d:39:6a:ba:
                    7a:13:fb:07:c6:c6:6c:5b:a2:4e:3c:27:f6:ab:3b:
                    a8:33:52:a8:95:1b:d2:03:46:db:9a:28:4f:81:88:
                    31:8d:d0:05:9e:25:ca:38:ae:da:04:ff:38:93:c5:
                    c5:a6:45:02:d3:f8:dc:21:66:9c:2a:d6:58:28:04:
                    58:91:fe:15:56:6d:b8:8c:59:f8:2f:12:6d:f0:85:
                    f6:6f:12:d4:9d:6f:1c:3e:9b:5a:65:cf:dc:5f:60:
                    ef:62:ed:7e:86:b9:b9:be:3d:8e:e1:7a:7f:a8:58:
                    1e:da:c4:dd:c6:6e:7b:64:75:9a:db:73:f1:e5:cf:
                    f1:0a:40:1c:d0:8a:eb:8d:a9:32:ab:57:2f:43:68:
                    61:65:27:34:16:90:96:65:ac:55:dc:7b:61:bf:9f:
                    56:92:04:86:e5:bb:2c:48:e7:26:06:aa:d5:e1:58:
                    b8:ff:8e:ba:45:fb:15:5c:79:54:4d:cb:cf:82:7b:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4E:C2:49:3D:5B:37:D0:75:CA:5D:DD:FE:59:B9:6A:4F:41:AE:1C
            X509v3 Authority Key Identifier:
                keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/wU7CST1bN9B1yl3d_lm5ak9Brhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:65:cc:4e:e1:bf:5b:12:36:45:34:9f:ea:c4:31:98:50:75:
         90:bf:1f:c5:a3:b1:e1:a7:d7:8a:31:6f:45:b6:ef:0a:c7:77:
         62:c7:dd:0f:cd:a0:e1:d3:f1:6c:1c:2f:e0:67:b7:59:ed:a2:
         87:f3:ec:4a:36:56:a3:b7:ac:92:a1:8c:58:d7:aa:0b:6f:65:
         7e:e1:15:7e:c9:f9:ec:a1:00:22:08:e5:af:ad:ac:2b:7b:56:
         b5:95:34:85:7f:5f:ac:2c:d9:bc:e4:3f:e0:86:9f:93:0a:63:
         cf:0a:3b:57:80:0a:bd:92:28:52:a9:a5:b0:28:40:bb:82:d7:
         06:15:85:11:0d:68:28:30:70:77:45:4c:4d:8e:47:b1:65:a8:
         c5:64:4b:13:6c:e3:7e:ad:bb:67:f1:0b:9f:70:fb:bd:39:28:
         9a:a1:22:5b:a0:eb:64:42:13:e8:0b:1b:26:60:9b:9c:cb:5b:
         8c:c6:31:14:5c:96:d9:70:4d:1d:98:54:ed:7a:d3:86:d4:39:
         31:72:ff:af:03:fd:8a:f7:15:e9:47:36:56:7b:ad:30:12:f2:
         5f:00:b9:2d:20:77:8e:28:22:43:45:c4:b2:1e:74:98:72:45:
         64:97:ae:18:b4:f8:b1:19:74:6d:e5:be:dd:93:07:1b:dc:a0:
         b4:df:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:28 2024 by rpki-client on console-fra.rpki-client.org