Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/zGilvVfCdUG_CSt86IS-g8BqW1Y.roa
File:                     zGilvVfCdUG_CSt86IS-g8BqW1Y.roa (raw, json)
Hash identifier:          vp9aQoNKMVWdxhXJFQRJeyXneMYe/nJ1lk9tyPdT6Wo=
Subject key identifier:   CC:68:A5:BD:57:C2:75:41:BF:09:2B:7C:E8:84:BE:83:C0:6A:5B:56
Certificate issuer:       /CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Certificate serial:       015B9B42
Authority key identifier: 79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/zGilvVfCdUG_CSt86IS-g8BqW1Y.roa
Signing time:             Tue 17 May 2022 16:07:46 +0000
ROA not before:           Tue 17 May 2022 16:07:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        45.158.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22780738 (0x15b9b42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b0a17a0e8749a4fbefc356744de3ab04080934
        Validity
            Not Before: May 17 16:07:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc68a5bd57c27541bf092b7ce884be83c06a5b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:1c:84:fa:4a:cb:91:ef:5d:c0:33:c8:d1:
                    e4:9c:b4:8c:0a:96:13:88:c3:00:a4:e2:9a:37:6c:
                    f8:22:3c:8f:56:bf:90:74:60:bb:53:94:98:2b:98:
                    15:50:83:71:11:3b:b6:75:38:de:b8:a0:27:04:48:
                    dc:4c:3c:dd:4b:27:49:df:d1:50:73:ce:f4:54:c9:
                    d6:d0:40:df:36:a0:02:ff:38:df:c4:49:a9:5f:81:
                    ee:0b:44:30:bc:90:3c:60:6a:d4:9b:3d:1b:5e:a4:
                    7f:cd:49:17:d7:8c:55:2a:0e:47:f2:59:ab:c9:9b:
                    77:70:21:9c:ef:cb:f1:71:1c:ed:12:c8:a9:aa:7c:
                    2a:85:62:f0:d9:16:ed:c9:6b:ba:d0:b3:53:5d:9d:
                    95:33:d4:20:7f:36:6d:9a:0d:b8:10:88:9c:24:43:
                    64:0b:0e:fa:db:5d:85:60:06:0a:75:d3:d9:9a:28:
                    6c:61:b2:b3:ce:e6:63:6a:ba:e1:73:aa:6f:dc:3a:
                    12:7a:0b:12:83:d6:80:05:d7:ab:2c:98:90:5d:1d:
                    d6:53:aa:15:cc:d6:1d:4c:9e:1f:bb:ef:3c:b6:66:
                    2a:2d:42:62:47:e2:7d:c9:7f:0c:f8:52:42:0b:85:
                    af:12:28:11:ae:65:a2:5e:57:44:e7:62:82:cb:b6:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:A5:BD:57:C2:75:41:BF:09:2B:7C:E8:84:BE:83:C0:6A:5B:56
            X509v3 Authority Key Identifier:
                keyid:79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/zGilvVfCdUG_CSt86IS-g8BqW1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:2a:2a:24:be:8b:e7:e9:e6:df:94:d4:91:ba:0b:fc:27:
         fa:a3:91:16:6a:50:17:05:93:16:5a:6c:13:3c:46:eb:d9:8b:
         7b:f5:17:d3:33:f6:44:a6:43:81:d6:ce:34:14:3f:07:14:25:
         c4:b6:d4:9e:13:e3:64:6a:c4:89:1f:dc:ea:8c:23:53:c2:79:
         80:53:61:88:98:e2:7d:84:19:82:25:d1:82:ea:c1:f6:8b:70:
         15:9b:5f:fb:7f:69:fb:26:27:3a:7e:53:2f:4e:e1:83:48:b7:
         ad:a6:27:d3:b7:fc:8b:bc:92:dc:5e:9e:39:60:f8:d6:5a:fd:
         8f:fc:18:92:2d:ae:60:5b:9e:f1:84:03:30:9c:df:16:d6:21:
         25:41:36:d6:4c:27:30:9a:bf:46:70:f3:21:95:20:64:72:f5:
         09:bd:de:dd:fb:24:04:79:4d:4f:ee:36:fe:ca:98:71:c5:e2:
         49:30:8b:02:74:2a:86:09:b2:b3:6f:08:c4:e9:aa:c0:88:81:
         8d:3e:da:c5:c7:5f:b8:d7:4f:47:05:92:7e:40:d1:26:cf:06:
         14:87:ce:7e:5b:43:93:da:1b:ed:a1:74:a9:75:67:14:50:8d:
         f1:74:55:22:55:08:f8:65:0a:a8:81:8f:2a:85:ed:ee:de:f9:
         30:6e:01:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAVubQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OWIwYTE3YTBlODc0OWE0ZmJlZmMzNTY3NDRkZTNhYjA0MDgwOTM0MB4XDTIyMDUx
NzE2MDc0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M2OGE1YmQ1N2My
NzU0MWJmMDkyYjdjZTg4NGJlODNjMDZhNWI1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0RHIT6SsuR713AM8jR5Jy0jAqWE4jDAKTimjds+CI8j1a/
kHRgu1OUmCuYFVCDcRE7tnU43rigJwRI3Ew83UsnSd/RUHPO9FTJ1tBA3zagAv84
38RJqV+B7gtEMLyQPGBq1Js9G16kf81JF9eMVSoOR/JZq8mbd3AhnO/L8XEc7RLI
qap8KoVi8NkW7clrutCzU12dlTPUIH82bZoNuBCInCRDZAsO+ttdhWAGCnXT2Zoo
bGGys87mY2q64XOqb9w6EnoLEoPWgAXXqyyYkF0d1lOqFczWHUyeH7vvPLZmKi1C
Ykfifcl/DPhSQguFrxIoEa5lol5XROdigsu2LhkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMaKW9V8J1Qb8JK3zohL6DwGpbVjAfBgNVHSMEGDAWgBR5sKF6DodJpPvv
w1Z0TeOrBAgJNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ViQ2hlZzZIU2FUNzc4TldkRTNqcXdRSUNUUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvYWVjZTIxLTk5ZTMtNDlhZi1iOTU4LTYzNmE2NzkxN2YwMC8x
L3pHaWx2VmZDZFVHX0NTdDg2SVMtZzhCcVcxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
YWVjZTIxLTk5ZTMtNDlhZi1iOTU4LTYzNmE2NzkxN2YwMC8xL2ViQ2hlZzZIU2FU
Nzc4TldkRTNqcXdRSUNUUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2eVDANBgkqhkiG9w0BAQsFAAOC
AQEANHsqKiS+i+fp5t+U1JG6C/wn+qORFmpQFwWTFlpsEzxG69mLe/UX0zP2RKZD
gdbONBQ/BxQlxLbUnhPjZGrEiR/c6owjU8J5gFNhiJjifYQZgiXRgurB9otwFZtf
+39p+yYnOn5TL07hg0i3raYn07f8i7yS3F6eOWD41lr9j/wYki2uYFue8YQDMJzf
FtYhJUE21kwnMJq/RnDzIZUgZHL1Cb3e3fskBHlNT+42/sqYccXiSTCLAnQqhgmy
s28IxOmqwIiBjT7axcdfuNdPRwWSfkDRJs8GFIfOfltDk9ob7aF0qXVnFFCN8XRV
IlUI+GUKqIGPKoXt7t75MG4Bgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org