Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/Bz1HGUP5v7muVCag1cGmsRUHGrk.roa
File:                     Bz1HGUP5v7muVCag1cGmsRUHGrk.roa (raw, json)
Hash identifier:          ryDm/fyXSFAF27SuCiDpnxgSpN9BiCQUvhE4/K6+gbY=
Subject key identifier:   07:3D:47:19:43:F9:BF:B9:AE:54:26:A0:D5:C1:A6:B1:15:07:1A:B9
Certificate issuer:       /CN=80963ae60ebf1e9ba0a35f118bfaebd924cd7b99
Certificate serial:       0CCC4357
Authority key identifier: 80:96:3A:E6:0E:BF:1E:9B:A0:A3:5F:11:8B:FA:EB:D9:24:CD:7B:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJY65g6_Hpugo18Ri_rr2STNe5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/Bz1HGUP5v7muVCag1cGmsRUHGrk.roa
Signing time:             Sat 01 Jan 2022 07:54:15 +0000
ROA not before:           Sat 01 Jan 2022 07:54:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57554
IP address blocks:        91.232.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214713175 (0xccc4357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80963ae60ebf1e9ba0a35f118bfaebd924cd7b99
        Validity
            Not Before: Jan  1 07:54:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=073d471943f9bfb9ae5426a0d5c1a6b115071ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:8e:7e:47:2e:69:10:87:c3:d7:36:08:f8:
                    c4:67:1a:59:2b:97:83:f8:1c:c9:23:00:15:a6:99:
                    54:09:64:f3:61:eb:df:f5:5a:24:0b:8b:54:f7:34:
                    51:9c:9e:8e:c4:1a:f0:ca:c5:14:43:e4:3d:d2:4e:
                    50:c1:a5:b0:11:c4:b1:d7:fa:b7:d7:39:9b:13:2b:
                    6b:b7:49:b8:6a:dc:77:e6:9b:92:16:17:00:a4:c7:
                    57:ae:61:98:e8:ef:5c:14:e3:c0:33:b1:f2:f5:d3:
                    01:a7:f4:ad:a4:77:5a:6c:d6:9f:ab:12:fc:54:f8:
                    39:26:c8:54:d2:99:fb:9f:ab:04:f3:de:dd:12:d0:
                    ed:9e:21:e9:b8:3e:2c:7c:83:ee:8a:dc:d7:f3:14:
                    ba:8a:32:b2:de:10:82:1a:0c:07:14:d8:09:40:2e:
                    96:f7:81:fb:2b:a3:fc:c7:ac:54:82:5c:ee:b7:e3:
                    fc:c6:00:9c:8f:45:b1:96:82:f1:18:04:ca:63:b1:
                    80:cb:66:4a:f7:83:1e:02:71:4b:54:c8:5e:e8:c2:
                    7d:a3:f1:fb:3e:c1:89:ac:c7:de:60:f6:56:4b:3b:
                    86:48:c4:8e:73:0e:66:9e:be:09:bd:f1:68:0d:12:
                    5d:bd:d6:6a:3e:1b:3f:ca:a6:a8:f7:2a:da:b8:82:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3D:47:19:43:F9:BF:B9:AE:54:26:A0:D5:C1:A6:B1:15:07:1A:B9
            X509v3 Authority Key Identifier:
                keyid:80:96:3A:E6:0E:BF:1E:9B:A0:A3:5F:11:8B:FA:EB:D9:24:CD:7B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJY65g6_Hpugo18Ri_rr2STNe5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/Bz1HGUP5v7muVCag1cGmsRUHGrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/gJY65g6_Hpugo18Ri_rr2STNe5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:a9:bf:ca:3d:39:4d:86:3c:e7:cc:5f:11:97:ab:99:92:
         28:03:2a:ab:ff:4d:77:a7:f9:be:f1:c5:be:f9:8d:dd:5a:53:
         57:8e:1c:2d:67:93:1e:44:eb:87:32:2a:55:5b:ba:be:a0:7d:
         76:34:e8:c9:a1:ac:e8:2c:f3:a3:2e:e9:16:43:88:a9:3f:d6:
         94:c6:8f:e4:be:d6:50:c9:8b:c8:d5:61:6d:93:54:ed:73:50:
         e1:bb:10:9e:ee:cb:09:76:78:82:c8:5e:da:99:e0:e1:40:01:
         96:12:a0:24:22:35:0d:4e:31:21:bf:f3:81:dc:57:de:10:ec:
         77:14:ca:84:66:a9:e7:f2:74:67:73:e5:93:47:8b:05:c6:e7:
         f9:0c:87:0f:ab:78:a0:bd:82:ed:84:73:58:1c:1b:a0:b8:f7:
         27:e0:fa:f7:9d:8b:c0:30:1e:1f:2d:3a:b0:f6:7e:8e:38:fb:
         9e:6e:46:5a:63:de:7d:5d:07:d6:62:c8:ee:6e:f7:07:f8:75:
         60:ee:58:13:a5:83:b8:4b:1c:d0:3e:26:26:83:8d:60:cb:4d:
         9a:fd:97:4d:fe:6e:1a:c3:17:10:02:91:07:98:02:70:c0:64:
         4c:95:53:0d:4e:97:3b:ab:2c:df:55:aa:8c:ed:cc:ee:ef:dd:
         3a:8a:30:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:46 2024 by rpki-client on console-fra.rpki-client.org