Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/1Lb19U5o3Efr0g-aib5PoZSt6go.roa
File:                     1Lb19U5o3Efr0g-aib5PoZSt6go.roa (raw, json)
Hash identifier:          Zr3brMPQHTZVZHpvpM8U6o3j2PDZ4Lwl5HPOHtjFKvY=
Subject key identifier:   D4:B6:F5:F5:4E:68:DC:47:EB:D2:0F:9A:89:BE:4F:A1:94:AD:EA:0A
Certificate issuer:       /CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Certificate serial:       A00BEC
Authority key identifier: 2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/1Lb19U5o3Efr0g-aib5PoZSt6go.roa
Signing time:             Sat 01 Jan 2022 02:56:19 +0000
ROA not before:           Sat 01 Jan 2022 02:56:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212850
IP address blocks:        109.107.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10488812 (0xa00bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
        Validity
            Not Before: Jan  1 02:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d4b6f5f54e68dc47ebd20f9a89be4fa194adea0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:53:8a:f3:8c:98:d7:52:3d:64:f7:99:73:
                    74:99:73:a3:95:52:aa:f4:95:42:9e:91:63:5c:8c:
                    6c:d7:82:45:64:7c:0d:f2:22:22:0b:f4:5d:3a:81:
                    9b:02:5a:5d:37:6e:83:59:2f:f9:8d:60:f5:b2:b7:
                    45:e0:a5:fc:c3:fd:6a:99:84:6a:18:28:e1:a7:7e:
                    ff:6d:5b:06:b9:a3:c7:71:ab:a6:c1:f8:88:0f:b4:
                    30:47:96:5a:3a:9e:9b:de:6f:5c:be:3c:b1:2e:55:
                    f4:71:7c:1b:30:0c:18:ef:37:c7:f2:e2:fe:d7:c2:
                    9d:8f:d8:32:52:e9:45:f4:e2:aa:03:29:24:0c:35:
                    c7:c8:9c:4a:cf:35:74:85:3d:1c:7b:ef:50:b0:eb:
                    7c:18:b0:9c:a2:51:c1:72:50:6f:60:7f:7d:17:7d:
                    89:2d:c6:8a:3a:b3:8f:6a:4a:d4:7b:b8:ec:e5:23:
                    ae:56:1d:90:7e:b6:08:62:ed:de:36:d0:1e:e9:b5:
                    1d:e3:4e:c4:b5:dc:3d:23:1e:81:b0:e5:29:fd:de:
                    a0:68:5a:82:a2:0f:04:59:55:1f:4a:7c:2f:48:12:
                    0c:07:0a:c3:8a:c7:8b:4d:fa:28:fe:77:37:36:3e:
                    5c:5e:6b:5d:89:68:f3:c5:b7:e4:35:aa:d7:87:10:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:F5:F5:4E:68:DC:47:EB:D2:0F:9A:89:BE:4F:A1:94:AD:EA:0A
            X509v3 Authority Key Identifier:
                keyid:2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/1Lb19U5o3Efr0g-aib5PoZSt6go.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d8:cc:19:0b:7e:07:69:7c:23:9a:4b:b6:1e:66:47:29:85:
         1d:65:09:42:8b:1c:5b:08:99:96:f5:43:b5:c7:48:b4:d6:94:
         45:3d:11:74:9a:a0:5e:fe:41:ea:e8:d2:a6:ed:3c:99:bd:60:
         f9:31:b7:46:ca:5a:7c:47:36:c4:51:48:22:91:f8:4f:f8:ec:
         6d:58:15:eb:4e:87:34:5a:ef:b9:c4:69:02:ac:59:de:b8:c0:
         71:28:36:07:89:3c:0b:3a:fa:b9:79:f0:da:d6:7a:21:98:58:
         fe:27:eb:a1:bf:ba:ef:b2:80:e9:79:39:4d:fb:e1:15:97:e2:
         38:f7:fb:94:fd:a3:45:96:1a:31:0a:0d:6b:b8:de:62:31:41:
         1e:53:d6:cb:39:30:bd:3a:0b:f9:ad:2f:b0:1d:27:a4:64:40:
         bd:d0:d1:58:7c:bd:ce:2a:a6:66:f8:cc:9b:62:4a:94:b3:11:
         06:ef:22:be:02:ab:b9:9e:d0:e7:c8:a5:1b:de:11:e2:d1:5d:
         50:3d:fd:8b:0b:35:94:25:d5:28:31:04:f8:e0:f2:6e:ca:f8:
         ef:fd:5d:63:7a:17:11:0b:01:44:b6:ca:33:b4:14:01:aa:96:
         c6:75:70:b2:8e:cf:bc:37:96:e3:28:7e:0b:b1:79:ed:70:16:
         b0:97:4a:bd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKAL7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Y2IyODhiODcyYmI4NDc0NTVkNzFlMWMwYjMxM2E2MzI2NWViZmQ0MB4XDTIyMDEw
MTAyNTYxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDRiNmY1ZjU0ZTY4
ZGM0N2ViZDIwZjlhODliZTRmYTE5NGFkZWEwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKsU4rzjJjXUj1k95lzdJlzo5VSqvSVQp6RY1yMbNeCRWR8
DfIiIgv0XTqBmwJaXTdug1kv+Y1g9bK3ReCl/MP9apmEahgo4ad+/21bBrmjx3Gr
psH4iA+0MEeWWjqem95vXL48sS5V9HF8GzAMGO83x/Li/tfCnY/YMlLpRfTiqgMp
JAw1x8icSs81dIU9HHvvULDrfBiwnKJRwXJQb2B/fRd9iS3Gijqzj2pK1Hu47OUj
rlYdkH62CGLt3jbQHum1HeNOxLXcPSMegbDlKf3eoGhagqIPBFlVH0p8L0gSDAcK
w4rHi036KP53NzY+XF5rXYlo88W35DWq14cQ5mcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTUtvX1TmjcR+vSD5qJvk+hlK3qCjAfBgNVHSMEGDAWgBQssoi4cruEdFXX
HhwLMTpjJl6/1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xMS0l1SEs3aEhSVjF4NGNDekU2WXlaZXY5US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvM2RhYTg3LWUwNDUtNDExZS1iNjE0LTk5NzM1NTQxOWIwYS8x
LzFMYjE5VTVvM0VmcjBnLWFpYjVQb1pTdDZnby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
M2RhYTg3LWUwNDUtNDExZS1iNjE0LTk5NzM1NTQxOWIwYS8xL0xMS0l1SEs3aEhS
VjF4NGNDekU2WXlaZXY5US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1rmzANBgkqhkiG9w0BAQsFAAOC
AQEAh9jMGQt+B2l8I5pLth5mRymFHWUJQoscWwiZlvVDtcdItNaURT0RdJqgXv5B
6ujSpu08mb1g+TG3RspafEc2xFFIIpH4T/jsbVgV606HNFrvucRpAqxZ3rjAcSg2
B4k8Czr6uXnw2tZ6IZhY/ifrob+677KA6Xk5TfvhFZfiOPf7lP2jRZYaMQoNa7je
YjFBHlPWyzkwvToL+a0vsB0npGRAvdDRWHy9ziqmZvjMm2JKlLMRBu8ivgKruZ7Q
58ilG94R4tFdUD39iws1lCXVKDEE+ODybsr47/1dY3oXEQsBRLbKM7QUAaqWxnVw
so7PvDeW4yh+C7F57XAWsJdKvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:37 2024 by rpki-client on console-ams.rpki-client.org