Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/WC-H6wL0jd1LwYOI-h17DQPa4ug.roa
File:                     WC-H6wL0jd1LwYOI-h17DQPa4ug.roa (raw, json)
Hash identifier:          9bwDmtTXT9+oVR1PeoRvf7R/JtOUMdy29U4fnKB/qzQ=
Subject key identifier:   58:2F:87:EB:02:F4:8D:DD:4B:C1:83:88:FA:1D:7B:0D:03:DA:E2:E8
Certificate issuer:       /CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
Certificate serial:       018675381E1D258FB33E4FC7282E24A26BA8
Authority key identifier: 3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/WC-H6wL0jd1LwYOI-h17DQPa4ug.roa
Signing time:             Tue 21 Feb 2023 18:24:17 +0000
ROA not before:           Tue 21 Feb 2023 18:24:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201138
IP address blocks:        185.145.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:75:38:1e:1d:25:8f:b3:3e:4f:c7:28:2e:24:a2:6b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
        Validity
            Not Before: Feb 21 18:24:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=582f87eb02f48ddd4bc18388fa1d7b0d03dae2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:d7:3f:7c:81:06:90:dc:8c:7c:7d:7a:88:
                    bb:50:cf:08:e4:44:77:31:8c:5d:28:7e:5d:ef:a7:
                    55:c8:50:85:6f:e0:5d:e2:a8:21:75:ae:93:b7:3e:
                    e4:46:a4:c6:d9:84:d6:4a:6f:ab:df:fa:72:df:87:
                    f4:7d:87:ee:f5:81:f8:5a:25:e2:31:e0:61:c7:f3:
                    76:a5:0b:80:b5:de:ad:96:25:34:ea:3f:f7:1f:fe:
                    49:56:65:83:46:0e:d4:cc:29:be:c0:ac:67:db:46:
                    d3:fe:39:63:cf:c7:06:51:56:1b:9b:2d:4d:90:4b:
                    a0:4e:17:9a:93:f7:15:f4:08:c3:4c:84:66:fa:d2:
                    e9:3c:d2:f4:ed:ee:d4:23:7d:00:ef:05:74:92:c6:
                    84:88:76:f6:b3:d6:85:53:67:04:08:5b:6a:0b:24:
                    81:3c:ce:e9:53:34:46:20:32:9a:55:41:8a:a3:38:
                    4a:a2:6a:ca:1c:91:9e:5f:4f:83:88:f7:39:c5:55:
                    45:78:8d:42:08:29:a8:8f:0b:aa:82:95:b1:09:9d:
                    0f:9a:e0:d0:86:9d:30:2a:2b:5d:13:c3:6b:54:ac:
                    ab:e9:90:4d:76:31:0c:f1:00:dc:45:1d:4d:fc:9e:
                    60:49:f1:03:fa:6c:f0:49:d4:43:b4:ec:b3:75:25:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:87:EB:02:F4:8D:DD:4B:C1:83:88:FA:1D:7B:0D:03:DA:E2:E8
            X509v3 Authority Key Identifier:
                keyid:3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/WC-H6wL0jd1LwYOI-h17DQPa4ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f5:0b:98:6f:fd:b2:3a:cb:1e:89:7e:5a:7e:0a:fb:8c:71:
         4c:c9:f8:24:e5:49:c7:4b:a9:68:8b:f6:cd:9a:4d:37:1b:c5:
         f4:b5:85:75:ab:61:37:25:df:48:a3:6d:79:98:c4:82:9a:74:
         6a:7a:38:9b:cc:8c:4d:93:8b:3d:7b:31:98:28:27:dd:1d:41:
         7e:7b:a6:23:ed:05:ab:89:2a:4c:d5:12:8c:a0:3e:c1:db:a2:
         3b:bb:a5:ef:75:0f:10:de:34:ae:46:7e:3e:32:8b:46:1c:5e:
         82:4d:cd:f0:ae:0e:90:7e:da:b6:2c:ec:ed:a4:c5:14:4a:95:
         66:bb:5b:05:74:22:59:76:e5:9f:20:b6:01:4b:03:2a:1f:d1:
         b4:be:cd:1a:20:04:69:95:8a:00:18:09:6d:c7:e6:39:a7:50:
         ce:6a:80:97:7b:db:42:87:6f:76:dd:db:37:e1:79:3f:8f:fd:
         8d:e8:22:65:52:b4:b0:2f:9e:44:ca:b2:2a:af:7e:1e:98:cc:
         7c:f0:3a:f0:a8:b0:ae:d0:22:30:d7:3a:02:b7:10:22:0f:ee:
         d6:db:dc:fb:83:ab:61:95:42:1a:60:50:fe:d7:1d:e0:cd:1a:
         e5:b2:2f:18:9d:63:e4:78:96:fd:f2:e0:4d:f4:53:9e:f1:1d:
         c5:72:8f:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ1OB4dJY+zPk/HKC4komuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWRmMDJhYWFiODNhNDE4ODYxZmQ0NTlkOGY1ZTgxNTNh
MzI5NmYwHhcNMjMwMjIxMTgyNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODJmODdlYjAyZjQ4ZGRkNGJjMTgzODhmYTFkN2IwZDAzZGFlMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBfXP3yBBpDcjHx9eoi7UM8I5ER3
MYxdKH5d76dVyFCFb+Bd4qghda6Ttz7kRqTG2YTWSm+r3/py34f0fYfu9YH4WiXi
MeBhx/N2pQuAtd6tliU06j/3H/5JVmWDRg7UzCm+wKxn20bT/jljz8cGUVYbmy1N
kEugTheak/cV9AjDTIRm+tLpPNL07e7UI30A7wV0ksaEiHb2s9aFU2cECFtqCySB
PM7pUzRGIDKaVUGKozhKomrKHJGeX0+DiPc5xVVFeI1CCCmojwuqgpWxCZ0PmuDQ
hp0wKitdE8NrVKyr6ZBNdjEM8QDcRR1N/J5gSfED+mzwSdRDtOyzdSXIGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgvh+sC9I3dS8GDiPodew0D2uLoMB8GA1UdIwQY
MBaAFD+d8CqquDpBiGH9RZ2PXoFToylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDUzd0txcTRPa0dJWWYxRm5ZOWVnVk9qS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zNGRhYjAtOTg1Zi00Mzc2LTk5Y2Ut
MjYxNmNlNTlmMDIxLzEvV0MtSDZ3TDBqZDFMd1lPSS1oMTdEUVBhNHVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zNGRhYjAtOTg1Zi00Mzc2LTk5Y2UtMjYxNmNlNTlmMDIx
LzEvUDUzd0txcTRPa0dJWWYxRm5ZOWVnVk9qS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZE3MA0G
CSqGSIb3DQEBCwUAA4IBAQBV9QuYb/2yOsseiX5afgr7jHFMyfgk5UnHS6loi/bN
mk03G8X0tYV1q2E3Jd9Io215mMSCmnRqejibzIxNk4s9ezGYKCfdHUF+e6Yj7QWr
iSpM1RKMoD7B26I7u6XvdQ8Q3jSuRn4+MotGHF6CTc3wrg6Qftq2LOztpMUUSpVm
u1sFdCJZduWfILYBSwMqH9G0vs0aIARplYoAGAltx+Y5p1DOaoCXe9tCh2923ds3
4Xk/j/2N6CJlUrSwL55EyrIqr34emMx88DrwqLCu0CIw1zoCtxAiD+7W29z7g6th
lUIaYFD+1x3gzRrlsi8YnWPkeJb98uBN9FOe8R3Fco8R
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:39 2024 by rpki-client on console-ams.rpki-client.org