Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/FbrW8KOKxQpKZNzkF4z-dRK5Gg8.roa
File:                     FbrW8KOKxQpKZNzkF4z-dRK5Gg8.roa (raw, json)
Hash identifier:          nhvJ4bo19mK2aVrAFD2MZND9hrziIm56kkRKx2fTRr4=
Subject key identifier:   15:BA:D6:F0:A3:8A:C5:0A:4A:64:DC:E4:17:8C:FE:75:12:B9:1A:0F
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       016C1665
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/FbrW8KOKxQpKZNzkF4z-dRK5Gg8.roa
Signing time:             Sat 01 Jan 2022 04:58:01 +0000
ROA not before:           Sat 01 Jan 2022 04:58:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209742
IP address blocks:        193.151.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23860837 (0x16c1665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Jan  1 04:58:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15bad6f0a38ac50a4a64dce4178cfe7512b91a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:28:62:6c:74:f4:60:90:6d:10:df:02:4b:
                    be:76:2e:b6:03:58:3f:f3:19:23:27:52:20:28:1c:
                    b1:0d:ed:eb:ba:c8:d4:c5:36:24:ff:1b:33:7b:98:
                    55:29:cc:79:09:8d:bd:44:76:d5:6a:54:29:9a:92:
                    2d:cd:66:b4:e0:4a:7e:31:3f:de:85:de:f3:42:43:
                    55:96:ad:c6:f0:5c:e0:f0:3d:d4:b0:2d:e5:7f:f9:
                    ce:6e:0d:f3:50:07:3f:30:8e:5e:32:e6:69:6d:b0:
                    01:32:42:5b:8a:e8:b5:ab:d2:8a:a5:cf:b0:1a:23:
                    f1:78:00:49:79:fe:24:d7:cf:00:1a:d7:06:03:2d:
                    2b:d8:1f:3b:23:3b:e6:50:28:b5:f7:22:37:87:bf:
                    af:97:6e:f3:93:01:3f:61:48:14:67:66:ed:c5:fd:
                    26:22:79:0d:f2:94:81:e1:e9:6d:2d:3c:43:77:3a:
                    79:38:d3:b9:da:0e:1b:be:ac:32:72:f6:0c:e5:6f:
                    c2:ed:de:43:93:c4:73:61:f8:50:ad:09:ad:80:cf:
                    65:68:93:92:03:e5:33:1d:f9:85:13:07:4b:f8:07:
                    22:64:32:e9:a0:6b:3f:cd:03:d5:ac:6e:56:be:3f:
                    04:33:b7:8d:f8:91:82:d2:54:94:35:65:69:e2:fe:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BA:D6:F0:A3:8A:C5:0A:4A:64:DC:E4:17:8C:FE:75:12:B9:1A:0F
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/FbrW8KOKxQpKZNzkF4z-dRK5Gg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:48:46:24:8b:c1:da:9e:e1:a9:45:b3:47:5c:d1:2f:65:03:
         cf:4d:b6:52:ca:4f:79:8f:89:38:5f:69:08:89:20:9d:e7:74:
         42:11:15:61:5e:13:5f:3e:0c:cf:81:69:5e:36:ec:5f:b7:cf:
         3f:70:8b:e5:7c:15:6e:f5:07:fc:ca:7c:c8:d7:0b:e1:12:ad:
         f1:28:68:1d:82:fb:7f:87:21:47:2b:57:28:20:25:62:cd:29:
         94:80:24:0c:81:c2:72:28:2c:e5:3c:2f:63:27:65:01:2b:b3:
         65:66:7a:06:1c:28:1f:da:5c:45:24:af:96:80:25:e4:2a:a8:
         e4:07:be:67:b8:85:bc:18:cc:d9:0e:9a:8c:4e:a9:51:53:04:
         71:fc:21:71:f2:8d:8f:85:44:58:fd:54:10:b7:82:28:3c:73:
         fe:06:15:18:b4:c0:66:b8:5d:2b:d1:e5:55:92:a2:95:f8:a2:
         df:9d:ad:72:9a:8b:d9:81:75:b4:65:2a:e2:01:e1:2f:07:87:
         e7:f5:e5:3a:e3:bf:90:83:3a:a3:41:1a:6e:a4:31:4d:91:37:
         fb:87:85:83:69:51:81:3d:14:d7:87:1c:8e:dd:10:24:0d:9c:
         be:f3:b4:0f:4f:3b:6e:ad:7e:31:6c:0d:27:e4:b5:f4:ad:f4:
         36:4e:25:98
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWwWZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGU0ODQ4NWNlOWIwZTQyNTY0MDgwNGVkYzBlZDJiYTZiOGY0YjhmMB4XDTIyMDEw
MTA0NTgwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTViYWQ2ZjBhMzhh
YzUwYTRhNjRkY2U0MTc4Y2ZlNzUxMmI5MWEwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTlKGJsdPRgkG0Q3wJLvnYutgNYP/MZIydSICgcsQ3t67rI
1MU2JP8bM3uYVSnMeQmNvUR21WpUKZqSLc1mtOBKfjE/3oXe80JDVZatxvBc4PA9
1LAt5X/5zm4N81AHPzCOXjLmaW2wATJCW4rotavSiqXPsBoj8XgASXn+JNfPABrX
BgMtK9gfOyM75lAotfciN4e/r5du85MBP2FIFGdm7cX9JiJ5DfKUgeHpbS08Q3c6
eTjTudoOG76sMnL2DOVvwu3eQ5PEc2H4UK0JrYDPZWiTkgPlMx35hRMHS/gHImQy
6aBrP80D1axuVr4/BDO3jfiRgtJUlDVlaeL+/FkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQVutbwo4rFCkpk3OQXjP51ErkaDzAfBgNVHSMEGDAWgBSA5ISFzpsOQlZA
gE7cDtK6a49LjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPU0VoYzZiRGtKV1FJQk8zQTdTdW11UFM0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvNmRjOTc4LWJmZDYtNDFlYy04YTNhLWMwMzAxN2U5OGM1My8x
L0Ziclc4S09LeFFwS1pOemtGNHotZFJLNUdnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
NmRjOTc4LWJmZDYtNDFlYy04YTNhLWMwMzAxN2U5OGM1My8xL2dPU0VoYzZiRGtK
V1FJQk8zQTdTdW11UFM0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGXpjANBgkqhkiG9w0BAQsFAAOC
AQEAs0hGJIvB2p7hqUWzR1zRL2UDz022UspPeY+JOF9pCIkgned0QhEVYV4TXz4M
z4FpXjbsX7fPP3CL5XwVbvUH/Mp8yNcL4RKt8ShoHYL7f4chRytXKCAlYs0plIAk
DIHCcigs5TwvYydlASuzZWZ6BhwoH9pcRSSvloAl5Cqo5Ae+Z7iFvBjM2Q6ajE6p
UVMEcfwhcfKNj4VEWP1UELeCKDxz/gYVGLTAZrhdK9HlVZKilfii352tcpqL2YF1
tGUq4gHhLweH5/XlOuO/kIM6o0EabqQxTZE3+4eFg2lRgT0U14ccjt0QJA2cvvO0
D087bq1+MWwNJ+S19K30Nk4lmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org