Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/j6LGhpEThZuYOPQ7gH-AEpRDuyw.roa
File:                     j6LGhpEThZuYOPQ7gH-AEpRDuyw.roa (raw, json)
Hash identifier:          eDjmo8lW2XzpqOw0HB7kNGHr8j5/3fGkC6Pt/LoM/Ys=
Subject key identifier:   8F:A2:C6:86:91:13:85:9B:98:38:F4:3B:80:7F:80:12:94:43:BB:2C
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       0168F79F
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/j6LGhpEThZuYOPQ7gH-AEpRDuyw.roa
Signing time:             Sat 01 Jan 2022 04:57:58 +0000
ROA not before:           Sat 01 Jan 2022 04:57:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        46.254.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23656351 (0x168f79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Jan  1 04:57:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fa2c6869113859b9838f43b807f80129443bb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:78:c4:57:7d:24:c3:41:98:9a:06:65:80:
                    e7:16:9c:c1:72:ea:59:87:a3:32:81:4d:2d:3b:34:
                    83:aa:f0:8b:3c:cc:19:59:d8:56:bd:ed:37:d8:5e:
                    81:88:15:c2:b9:2a:79:06:f3:59:9e:5f:ed:50:8b:
                    a0:1b:54:1c:b2:dc:46:77:df:ff:92:e9:2b:0e:a3:
                    a9:0c:48:70:50:8c:92:aa:7b:fd:be:6d:38:ed:a2:
                    32:8c:6b:4c:c7:6a:9e:30:3a:94:d1:6e:75:b9:c0:
                    59:02:fe:87:dc:89:14:b3:40:b9:89:a7:9c:0f:59:
                    85:9c:16:b0:0b:ac:31:a0:e4:c6:32:2e:00:0d:3f:
                    5d:50:b8:4e:e4:11:20:59:bb:bb:9e:b3:8b:73:be:
                    ae:d1:9c:f5:58:5c:1b:f1:4a:ab:38:64:ba:7f:72:
                    d5:27:c5:09:91:9b:77:83:14:52:74:47:fe:a4:9e:
                    72:79:04:47:27:a1:00:62:b3:9a:ed:2e:97:c2:69:
                    f0:3e:ca:b8:04:31:db:db:ee:e3:d9:f7:1d:59:a2:
                    33:92:fe:07:92:3b:a3:bf:f8:88:ef:07:ec:6a:67:
                    51:12:97:83:49:5b:48:7c:e9:ef:59:82:d8:e8:29:
                    a6:d7:b7:8c:af:98:07:45:23:18:16:31:5a:d7:2f:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:C6:86:91:13:85:9B:98:38:F4:3B:80:7F:80:12:94:43:BB:2C
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/j6LGhpEThZuYOPQ7gH-AEpRDuyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:c6:22:79:26:bc:e5:c5:fb:8e:78:44:9a:95:5f:71:7a:
         64:f8:52:19:45:e4:62:06:50:1f:a8:1e:55:d8:ba:45:e9:50:
         78:51:f0:87:e8:7a:d9:9a:1a:b0:4f:2d:2e:b1:89:90:60:1f:
         59:56:92:d2:8a:25:bd:e3:1a:7f:12:f6:46:d6:c7:9a:36:1b:
         09:90:2a:32:15:1d:f4:8b:09:a6:bb:84:5f:0e:4f:a5:56:a1:
         82:d2:cd:28:24:61:60:48:c2:10:52:d1:7f:60:8b:ab:e7:69:
         75:67:72:c0:e3:9e:df:dc:73:05:2e:f1:a5:28:83:cf:b9:65:
         f0:67:f4:f9:4b:3d:da:da:25:3a:2c:04:54:38:b7:0d:fe:b3:
         fd:6e:bb:24:73:9a:22:5e:0e:f5:5f:4c:92:65:65:7f:ec:28:
         20:6c:bf:4a:c9:4f:ba:6e:65:22:b0:4c:20:5f:55:1b:2a:0a:
         5c:bb:df:ea:1e:e3:33:f7:9d:3d:9e:08:35:ae:5f:e6:d0:b0:
         57:0d:6d:46:90:32:f1:c6:5a:70:34:16:75:07:da:54:fd:11:
         ea:50:8a:b5:1b:20:da:e9:fb:76:e9:43:62:b2:21:07:0a:c9:
         1a:68:b6:d0:3b:b1:bc:07:21:63:37:65:df:5d:ad:e7:07:10:
         af:c3:29:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWj3nzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGU0ODQ4NWNlOWIwZTQyNTY0MDgwNGVkYzBlZDJiYTZiOGY0YjhmMB4XDTIyMDEw
MTA0NTc1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZhMmM2ODY5MTEz
ODU5Yjk4MzhmNDNiODA3ZjgwMTI5NDQzYmIyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM1reMRXfSTDQZiaBmWA5xacwXLqWYejMoFNLTs0g6rwizzM
GVnYVr3tN9hegYgVwrkqeQbzWZ5f7VCLoBtUHLLcRnff/5LpKw6jqQxIcFCMkqp7
/b5tOO2iMoxrTMdqnjA6lNFudbnAWQL+h9yJFLNAuYmnnA9ZhZwWsAusMaDkxjIu
AA0/XVC4TuQRIFm7u56zi3O+rtGc9VhcG/FKqzhkun9y1SfFCZGbd4MUUnRH/qSe
cnkERyehAGKzmu0ul8Jp8D7KuAQx29vu49n3HVmiM5L+B5I7o7/4iO8H7GpnURKX
g0lbSHzp71mC2Ogppte3jK+YB0UjGBYxWtcvq5kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSPosaGkROFm5g49DuAf4ASlEO7LDAfBgNVHSMEGDAWgBSA5ISFzpsOQlZA
gE7cDtK6a49LjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPU0VoYzZiRGtKV1FJQk8zQTdTdW11UFM0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvNmRjOTc4LWJmZDYtNDFlYy04YTNhLWMwMzAxN2U5OGM1My8x
L2o2TEdocEVUaFp1WU9QUTdnSC1BRXBSRHV5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
NmRjOTc4LWJmZDYtNDFlYy04YTNhLWMwMzAxN2U5OGM1My8xL2dPU0VoYzZiRGtK
V1FJQk8zQTdTdW11UFM0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC7+ajANBgkqhkiG9w0BAQsFAAOC
AQEAd37GInkmvOXF+454RJqVX3F6ZPhSGUXkYgZQH6geVdi6RelQeFHwh+h62Zoa
sE8tLrGJkGAfWVaS0oolveMafxL2RtbHmjYbCZAqMhUd9IsJpruEXw5PpVahgtLN
KCRhYEjCEFLRf2CLq+dpdWdywOOe39xzBS7xpSiDz7ll8Gf0+Us92tolOiwEVDi3
Df6z/W67JHOaIl4O9V9MkmVlf+woIGy/SslPum5lIrBMIF9VGyoKXLvf6h7jM/ed
PZ4INa5f5tCwVw1tRpAy8cZacDQWdQfaVP0R6lCKtRsg2un7dulDYrIhBwrJGmi2
0DuxvAchYzdl312t5wcQr8MpNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org