Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/ltWeEwAVc_y7e-KVUQuDDIsu2gA.roa
File:                     ltWeEwAVc_y7e-KVUQuDDIsu2gA.roa (raw, json)
Hash identifier:          pEY39qa8hDWKLh5y7kiwDIalfsnJ0VkaLkxwSVjKBQI=
Subject key identifier:   96:D5:9E:13:00:15:73:FC:BB:7B:E2:95:51:0B:83:0C:8B:2E:DA:00
Certificate issuer:       /CN=846a1ba02e439066ef579010ea308054ac8bf9df
Certificate serial:       018409006A7C09541EE5E8960BAF5517128B
Authority key identifier: 84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/ltWeEwAVc_y7e-KVUQuDDIsu2gA.roa
Signing time:             Mon 24 Oct 2022 07:58:52 +0000
ROA not before:           Mon 24 Oct 2022 07:58:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212669
IP address blocks:        146.19.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:09:00:6a:7c:09:54:1e:e5:e8:96:0b:af:55:17:12:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846a1ba02e439066ef579010ea308054ac8bf9df
        Validity
            Not Before: Oct 24 07:58:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96d59e13001573fcbb7be295510b830c8b2eda00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a6:c8:22:e5:eb:d7:d5:d4:74:64:5d:78:ce:
                    7a:c3:a8:ff:0e:e2:4a:b5:41:cc:cb:0b:d6:d3:7d:
                    91:8b:5c:74:bc:85:93:07:b9:d9:49:57:e7:95:e5:
                    74:38:e8:6e:63:4b:4a:03:3d:cd:98:92:a9:ab:45:
                    1e:af:9a:35:61:85:a4:f4:cd:39:3f:94:d9:03:36:
                    85:da:86:96:87:dc:f2:49:ec:7a:85:a5:9a:54:a8:
                    7c:ec:36:9b:63:f3:1b:c0:92:b3:e3:64:05:70:f5:
                    dc:41:5b:2f:1d:3b:11:77:55:8a:72:bd:47:45:e8:
                    fd:2a:59:72:43:64:a2:65:0f:7c:a4:30:f0:09:5c:
                    3a:62:47:d7:58:aa:79:e7:1e:c0:d5:cf:03:c6:d8:
                    24:d1:95:a7:d3:fc:a4:c7:b2:d0:87:ce:03:b2:90:
                    d7:0d:a5:fc:99:cd:33:18:d7:aa:d9:52:83:70:32:
                    8a:e9:23:ac:9f:c9:4a:67:fb:25:ba:1b:f7:a5:63:
                    6d:01:f8:20:8a:78:73:c6:4b:55:37:58:e9:46:5e:
                    83:67:c2:00:a5:27:25:1b:12:ea:20:95:36:e8:f9:
                    4d:d7:69:05:29:98:cc:cb:c3:28:23:7e:66:b4:7a:
                    1a:cd:eb:66:20:29:d5:06:bf:d8:16:c8:3c:3c:74:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D5:9E:13:00:15:73:FC:BB:7B:E2:95:51:0B:83:0C:8B:2E:DA:00
            X509v3 Authority Key Identifier:
                keyid:84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/ltWeEwAVc_y7e-KVUQuDDIsu2gA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:24:0b:3d:1f:2f:50:14:08:ac:6b:37:3b:01:db:ea:93:
         b2:a5:65:0d:2b:7e:22:9f:7b:ca:14:52:ef:cc:1a:30:fb:88:
         91:82:b8:d0:3a:f1:1f:de:79:39:a8:22:34:bd:78:79:9a:4b:
         c0:62:6d:ce:db:c3:f1:7f:81:16:40:55:23:ff:59:ec:29:3e:
         b1:21:23:a9:71:18:17:f1:0f:68:59:08:72:25:d2:d6:5d:b6:
         05:99:3e:15:db:0d:ae:e3:81:b7:3d:08:26:11:52:d3:79:19:
         f5:e5:08:76:eb:ac:46:e1:76:7a:62:08:2b:d9:08:b4:d7:99:
         64:37:fe:34:2c:19:87:6f:a8:14:9f:e8:84:38:87:cd:21:5b:
         44:c7:1a:77:2b:de:12:4e:1f:a4:8f:b5:18:ff:18:89:d3:92:
         66:0f:10:ec:22:46:58:01:54:da:6e:03:b6:aa:83:58:ac:94:
         3e:e2:ad:58:75:26:25:40:eb:86:db:5f:e8:26:4f:45:15:b7:
         09:3a:1d:a6:79:4d:8a:bb:3a:a2:e3:83:2f:19:f9:f8:e7:2e:
         06:a4:68:4f:64:78:ae:6b:f9:bd:47:84:28:b1:06:fa:fa:a1:
         f1:8f:88:27:41:23:b0:84:ab:92:61:ab:9e:43:2d:85:b2:18:
         ad:96:07:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQJAGp8CVQe5eiWC69VFxKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmExYmEwMmU0MzkwNjZlZjU3OTAxMGVhMzA4MDU0YWM4
YmY5ZGYwHhcNMjIxMDI0MDc1ODUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmQ1OWUxMzAwMTU3M2ZjYmI3YmUyOTU1MTBiODMwYzhiMmVkYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKbIIuXr19XUdGRdeM56w6j/DuJK
tUHMywvW032Ri1x0vIWTB7nZSVfnleV0OOhuY0tKAz3NmJKpq0Uer5o1YYWk9M05
P5TZAzaF2oaWh9zySex6haWaVKh87DabY/MbwJKz42QFcPXcQVsvHTsRd1WKcr1H
Rej9KllyQ2SiZQ98pDDwCVw6YkfXWKp55x7A1c8Dxtgk0ZWn0/ykx7LQh84DspDX
DaX8mc0zGNeq2VKDcDKK6SOsn8lKZ/sluhv3pWNtAfgginhzxktVN1jpRl6DZ8IA
pSclGxLqIJU26PlN12kFKZjMy8MoI35mtHoazetmICnVBr/YFsg8PHSyJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbVnhMAFXP8u3vilVELgwyLLtoAMB8GA1UdIwQY
MBaAFIRqG6AuQ5Bm71eQEOowgFSsi/nfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdvYm9DNURrR2J2VjVBUTZqQ0FWS3lMLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iNGEwODAtNTA4MC00NDdlLWE1NGQt
ZTkwYmVhNWZmZDQwLzEvbHRXZUV3QVZjX3k3ZS1LVlVRdURESXN1MmdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iNGEwODAtNTA4MC00NDdlLWE1NGQtZTkwYmVhNWZmZDQw
LzEvaEdvYm9DNURrR2J2VjVBUTZqQ0FWS3lMLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMcMA0G
CSqGSIb3DQEBCwUAA4IBAQB8UCQLPR8vUBQIrGs3OwHb6pOypWUNK34in3vKFFLv
zBow+4iRgrjQOvEf3nk5qCI0vXh5mkvAYm3O28Pxf4EWQFUj/1nsKT6xISOpcRgX
8Q9oWQhyJdLWXbYFmT4V2w2u44G3PQgmEVLTeRn15Qh266xG4XZ6Yggr2Qi015lk
N/40LBmHb6gUn+iEOIfNIVtExxp3K94STh+kj7UY/xiJ05JmDxDsIkZYAVTabgO2
qoNYrJQ+4q1YdSYlQOuG21/oJk9FFbcJOh2meU2Kuzqi44MvGfn45y4GpGhPZHiu
a/m9R4QosQb6+qHxj4gnQSOwhKuSYaueQy2Fshitlgd3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:32 2024 by rpki-client on console-ams.rpki-client.org