Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/oD7gH23J4FZOhl72dypn6WbKJOU.roa
File:                     oD7gH23J4FZOhl72dypn6WbKJOU.roa (raw, json)
Hash identifier:          SiayfXhgbOl90t/mtTvRWNdsIvCpiGEcMBLSlE7dlGY=
Subject key identifier:   A0:3E:E0:1F:6D:C9:E0:56:4E:86:5E:F6:77:2A:67:E9:66:CA:24:E5
Certificate issuer:       /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial:       2AB27CF1
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/oD7gH23J4FZOhl72dypn6WbKJOU.roa
Signing time:             Sat 01 Jan 2022 09:03:32 +0000
ROA not before:           Sat 01 Jan 2022 09:03:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212673
IP address blocks:        92.255.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716340465 (0x2ab27cf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8912e418225da95d6a21302407923ff94549572b
        Validity
            Not Before: Jan  1 09:03:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a03ee01f6dc9e0564e865ef6772a67e966ca24e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:3f:9e:cc:a1:6b:30:1d:63:08:0b:ad:7b:
                    e9:9e:2e:71:61:68:21:df:d0:28:f9:f9:1f:d5:d2:
                    f4:5e:66:22:1b:86:8d:f1:d8:a3:88:3e:2b:93:21:
                    29:f9:b5:8b:5e:3a:f5:c1:79:41:32:53:36:5f:a5:
                    8e:8b:6c:0a:7f:e3:87:87:a7:87:21:03:6f:1f:d6:
                    c8:35:95:0f:5e:7a:c2:ef:ca:c5:e9:c4:59:7c:2b:
                    4d:2f:49:17:eb:69:05:dd:d4:d6:84:b8:24:04:3c:
                    f8:54:77:33:a5:35:51:36:ee:12:6f:f8:41:f2:fc:
                    66:4a:9b:c7:18:88:f2:49:02:f7:b0:b3:54:04:2f:
                    35:18:3e:1d:34:4f:a5:fd:03:32:29:62:7d:3a:ce:
                    f1:ce:1e:29:41:c4:ba:a8:1a:8f:ab:21:36:d2:6a:
                    52:20:44:1d:de:8b:54:fb:77:fa:3c:a3:a5:d9:07:
                    33:70:40:6b:cf:d7:20:23:40:04:56:05:b6:93:e7:
                    e4:75:e7:fa:4f:09:d3:3c:b5:ec:84:17:23:85:1b:
                    92:4b:1e:25:64:ae:a8:ce:79:6d:b8:0d:8c:ac:ad:
                    c2:b5:75:ab:5f:15:24:d8:e5:c0:8f:02:8c:fa:ca:
                    0d:ae:65:d2:12:b3:7a:b0:af:5e:7a:96:f1:fe:eb:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3E:E0:1F:6D:C9:E0:56:4E:86:5E:F6:77:2A:67:E9:66:CA:24:E5
            X509v3 Authority Key Identifier:
                keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/oD7gH23J4FZOhl72dypn6WbKJOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.255.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:47:c4:57:30:15:2a:a9:8f:96:2f:77:0b:5a:6a:d2:36:1f:
         cb:30:04:1b:18:82:25:85:72:e4:0a:4a:a7:f6:3e:0e:62:4b:
         63:f2:24:b3:b0:5d:c6:97:48:72:5d:97:ab:09:da:bc:a4:8b:
         2d:d6:49:f1:24:1b:14:d9:17:b7:d9:ce:c6:47:f2:c7:f6:1c:
         11:c4:4a:b4:a7:c9:9e:0e:95:16:e3:32:7c:50:38:e4:d6:9b:
         56:23:b2:4d:fe:9b:ca:10:55:28:69:fb:32:ae:ff:bb:32:9b:
         ad:79:46:cc:b2:07:71:4e:6a:6c:ca:35:8a:33:af:c0:73:1f:
         df:07:35:30:2e:2d:d8:f4:1f:28:2b:81:38:8d:e3:05:c2:aa:
         2d:5e:e3:5d:00:1d:fb:eb:d5:b2:51:b2:e8:11:fb:57:e8:d0:
         dd:1d:13:8c:ad:28:13:01:a1:25:8d:08:45:f8:78:9c:06:fb:
         6e:6f:84:40:37:94:4a:a0:1e:7f:16:ce:e9:c7:f8:52:fd:d8:
         a0:3e:dd:f3:50:1b:82:45:d7:39:0b:78:e3:eb:5b:4e:90:a3:
         9a:7c:d9:bd:1b:23:84:64:b7:54:6c:83:29:4a:18:bc:a5:9a:
         a7:ba:28:5b:ff:56:a7:28:23:b0:f9:f0:02:35:1b:02:10:4b:
         7b:63:04:2f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKrJ88TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OTEyZTQxODIyNWRhOTVkNmEyMTMwMjQwNzkyM2ZmOTQ1NDk1NzJiMB4XDTIyMDEw
MTA5MDMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTAzZWUwMWY2ZGM5
ZTA1NjRlODY1ZWY2NzcyYTY3ZTk2NmNhMjRlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0oP57MoWswHWMIC6176Z4ucWFoId/QKPn5H9XS9F5mIhuG
jfHYo4g+K5MhKfm1i1469cF5QTJTNl+ljotsCn/jh4enhyEDbx/WyDWVD156wu/K
xenEWXwrTS9JF+tpBd3U1oS4JAQ8+FR3M6U1UTbuEm/4QfL8ZkqbxxiI8kkC97Cz
VAQvNRg+HTRPpf0DMilifTrO8c4eKUHEuqgaj6shNtJqUiBEHd6LVPt3+jyjpdkH
M3BAa8/XICNABFYFtpPn5HXn+k8J0zy17IQXI4UbkkseJWSuqM55bbgNjKytwrV1
q18VJNjlwI8CjPrKDa5l0hKzerCvXnqW8f7rw3kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSgPuAfbcngVk6GXvZ3KmfpZsok5TAfBgNVHSMEGDAWgBSJEuQYIl2pXWoh
MCQHkj/5RUlXKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lSTGtHQ0pkcVYxcUlUQWtCNUlfLVVWSlZ5cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvY2FjNTUzLWVlODAtNDY1OC1hYzA1LTkyODI0YzlkYTM3Yi8x
L29EN2dIMjNKNEZaT2hsNzJkeXBuNldiS0pPVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
Y2FjNTUzLWVlODAtNDY1OC1hYzA1LTkyODI0YzlkYTM3Yi8xL2lSTGtHQ0pkcVYx
cUlUQWtCNUlfLVVWSlZ5cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFz/MzANBgkqhkiG9w0BAQsFAAOC
AQEANUfEVzAVKqmPli93C1pq0jYfyzAEGxiCJYVy5ApKp/Y+DmJLY/Iks7BdxpdI
cl2XqwnavKSLLdZJ8SQbFNkXt9nOxkfyx/YcEcRKtKfJng6VFuMyfFA45NabViOy
Tf6byhBVKGn7Mq7/uzKbrXlGzLIHcU5qbMo1ijOvwHMf3wc1MC4t2PQfKCuBOI3j
BcKqLV7jXQAd++vVslGy6BH7V+jQ3R0TjK0oEwGhJY0IRfh4nAb7bm+EQDeUSqAe
fxbO6cf4Uv3YoD7d81AbgkXXOQt44+tbTpCjmnzZvRsjhGS3VGyDKUoYvKWap7oo
W/9WpygjsPnwAjUbAhBLe2MELw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-fra.rpki-client.org