Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/Uyu-_nbPRLLgHO89kpwO70bmFzw.roa
File:                     Uyu-_nbPRLLgHO89kpwO70bmFzw.roa (raw, json)
Hash identifier:          L8Ik0CyOt9ihhcU5QLij2BEmoyIx7EkQBgt+Q2vgoO4=
Subject key identifier:   53:2B:BE:FE:76:CF:44:B2:E0:1C:EF:3D:92:9C:0E:EF:46:E6:17:3C
Certificate issuer:       /CN=276c1af119e3147af4d1b4e99924d9c6e4a09553
Certificate serial:       D336E2
Authority key identifier: 27:6C:1A:F1:19:E3:14:7A:F4:D1:B4:E9:99:24:D9:C6:E4:A0:95:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2wa8RnjFHr00bTpmSTZxuSglVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/Uyu-_nbPRLLgHO89kpwO70bmFzw.roa
Signing time:             Sat 01 Jan 2022 03:57:00 +0000
ROA not before:           Sat 01 Jan 2022 03:57:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        80.71.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13842146 (0xd336e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276c1af119e3147af4d1b4e99924d9c6e4a09553
        Validity
            Not Before: Jan  1 03:57:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=532bbefe76cf44b2e01cef3d929c0eef46e6173c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:05:ab:0c:37:d0:75:9b:f1:bc:9c:db:50:
                    b0:0f:6f:13:3d:0a:9d:b0:79:36:6d:c5:71:f5:89:
                    1e:d6:40:52:7f:3f:17:93:92:03:87:5f:ac:b4:27:
                    64:fc:e2:f2:91:63:f4:4f:57:bf:f2:b6:07:6f:9d:
                    d4:28:39:b6:cf:b1:df:03:65:5a:f5:37:57:fd:54:
                    52:2b:60:98:ef:e0:8f:08:1b:fe:9a:4f:91:c3:f5:
                    75:cb:41:58:8b:a3:4e:12:f9:e5:25:88:49:4c:2f:
                    ee:a5:e4:94:f7:5a:cd:44:27:66:31:bf:10:0b:59:
                    1d:fa:e0:f7:b1:8e:cd:6b:18:b7:0e:19:ed:20:29:
                    7b:b3:39:d0:cf:94:93:5a:b7:b4:7e:cd:77:79:71:
                    95:d5:d8:01:0b:2c:89:04:27:c4:cd:8f:4a:50:5d:
                    5e:40:49:0b:4d:45:25:51:73:3c:63:75:f5:25:60:
                    34:0f:4c:22:83:73:d5:a1:f2:07:fb:eb:80:5d:6f:
                    73:de:0d:22:93:21:f6:c1:8b:77:9c:0a:c6:2e:f5:
                    5f:41:c0:71:5b:f6:63:a3:8c:8c:8d:c7:ab:d6:09:
                    9c:2f:79:a6:9a:76:a2:d5:91:83:aa:25:6c:f6:e1:
                    2e:71:69:d2:66:79:c9:99:34:66:62:8d:41:1c:3c:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2B:BE:FE:76:CF:44:B2:E0:1C:EF:3D:92:9C:0E:EF:46:E6:17:3C
            X509v3 Authority Key Identifier:
                keyid:27:6C:1A:F1:19:E3:14:7A:F4:D1:B4:E9:99:24:D9:C6:E4:A0:95:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2wa8RnjFHr00bTpmSTZxuSglVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/Uyu-_nbPRLLgHO89kpwO70bmFzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/J2wa8RnjFHr00bTpmSTZxuSglVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:44:ee:72:60:c9:5f:fd:bc:34:3c:b3:9e:cb:79:37:e1:
         2a:f3:42:3f:cf:c0:0e:33:ba:43:c1:41:24:f6:7d:d6:a7:bb:
         5f:f9:f7:05:13:0a:19:29:be:d1:2e:ac:9a:91:bc:55:83:f7:
         ca:28:77:71:18:0f:cb:18:c7:1d:8e:41:b8:1d:0b:cf:e8:0b:
         70:13:f2:82:5e:1f:44:ae:7c:f5:fe:84:a8:ff:88:15:9a:9d:
         4f:0e:b2:2a:b6:c7:0b:e2:e4:50:dd:44:05:0b:02:1c:c2:5d:
         02:3a:cc:29:1c:2e:73:09:ca:b1:64:cb:c4:f2:f7:5a:c5:03:
         d3:4d:e5:53:38:9e:8b:38:75:03:d9:03:08:54:68:9b:19:6b:
         af:38:9d:9c:09:61:c9:d5:4b:b4:64:90:de:2e:d7:29:69:4f:
         a1:86:14:bb:fb:34:9d:1e:2d:f6:34:4e:db:78:fe:40:42:5d:
         a4:a6:01:23:96:c4:6e:ce:f4:2c:a1:93:73:3c:6a:a9:a0:45:
         79:40:49:67:b5:e1:f5:da:88:8e:fd:ff:05:5a:26:26:28:ca:
         1a:38:ae:61:f5:f5:c6:ef:87:a1:28:7a:5d:2c:19:36:f7:75:
         13:c3:d2:5c:5f:35:e8:4b:4d:d3:cf:30:be:78:e2:d9:da:e9:
         ae:08:eb:67
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANM24jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NzZjMWFmMTE5ZTMxNDdhZjRkMWI0ZTk5OTI0ZDljNmU0YTA5NTUzMB4XDTIyMDEw
MTAzNTcwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTMyYmJlZmU3NmNm
NDRiMmUwMWNlZjNkOTI5YzBlZWY0NmU2MTczYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALaSBasMN9B1m/G8nNtQsA9vEz0KnbB5Nm3FcfWJHtZAUn8/
F5OSA4dfrLQnZPzi8pFj9E9Xv/K2B2+d1Cg5ts+x3wNlWvU3V/1UUitgmO/gjwgb
/ppPkcP1dctBWIujThL55SWISUwv7qXklPdazUQnZjG/EAtZHfrg97GOzWsYtw4Z
7SApe7M50M+Uk1q3tH7Nd3lxldXYAQssiQQnxM2PSlBdXkBJC01FJVFzPGN19SVg
NA9MIoNz1aHyB/vrgF1vc94NIpMh9sGLd5wKxi71X0HAcVv2Y6OMjI3Hq9YJnC95
ppp2otWRg6olbPbhLnFp0mZ5yZk0ZmKNQRw8ABkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRTK77+ds9EsuAc7z2SnA7vRuYXPDAfBgNVHSMEGDAWgBQnbBrxGeMUevTR
tOmZJNnG5KCVUzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0oyd2E4Um5qRkhyMDBiVHBtU1RaeHVTZ2xWTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvYjk2Nzc2LWE3ZDYtNGRlMy1hNGUwLTIzNzY5YzMyY2NhZC8x
L1V5dS1fbmJQUkxMZ0hPODlrcHdPNzBibUZ6dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
Yjk2Nzc2LWE3ZDYtNGRlMy1hNGUwLTIzNzY5YzMyY2NhZC8xL0oyd2E4Um5qRkhy
MDBiVHBtU1RaeHVTZ2xWTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBHlzANBgkqhkiG9w0BAQsFAAOC
AQEAi3JE7nJgyV/9vDQ8s57LeTfhKvNCP8/ADjO6Q8FBJPZ91qe7X/n3BRMKGSm+
0S6smpG8VYP3yih3cRgPyxjHHY5BuB0Lz+gLcBPygl4fRK589f6EqP+IFZqdTw6y
KrbHC+LkUN1EBQsCHMJdAjrMKRwucwnKsWTLxPL3WsUD003lUzieizh1A9kDCFRo
mxlrrzidnAlhydVLtGSQ3i7XKWlPoYYUu/s0nR4t9jRO23j+QEJdpKYBI5bEbs70
LKGTczxqqaBFeUBJZ7Xh9dqIjv3/BVomJijKGjiuYfX1xu+HoSh6XSwZNvd1E8PS
XF816EtN088wvnji2drprgjrZw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:52 2025 by rpki-client