Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/LSIeDE4VKiq_Smilv6euszg_kMg.roa
File:                     LSIeDE4VKiq_Smilv6euszg_kMg.roa (raw, json)
Hash identifier:          LENxvVRH9/qpH24woKXhHNk3ot4vHfJUCM5pxPHFmWo=
Subject key identifier:   2D:22:1E:0C:4E:15:2A:2A:BF:4A:68:A5:BF:A7:AE:B3:38:3F:90:C8
Certificate issuer:       /CN=c0a40ef08447b1e28445e4414523c51957298c2d
Certificate serial:       0183ACF94EF03B86C0C7E20C0F5C279022A3
Authority key identifier: C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/LSIeDE4VKiq_Smilv6euszg_kMg.roa
Signing time:             Thu 06 Oct 2022 11:06:03 +0000
ROA not before:           Thu 06 Oct 2022 11:06:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202413
IP address blocks:        2a07:cd40:1ab5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ac:f9:4e:f0:3b:86:c0:c7:e2:0c:0f:5c:27:90:22:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a40ef08447b1e28445e4414523c51957298c2d
        Validity
            Not Before: Oct  6 11:06:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d221e0c4e152a2abf4a68a5bfa7aeb3383f90c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:25:f7:d8:ff:de:b2:47:b9:ed:35:66:7d:
                    07:23:da:f3:a7:32:68:7d:ad:fa:19:3a:43:7c:64:
                    7b:4f:f3:9f:05:cf:55:d2:8b:b6:50:87:b4:8f:68:
                    77:01:6e:61:02:64:d5:d4:8a:1b:17:01:f6:ab:f2:
                    9a:1a:24:ca:56:d4:8b:76:c5:c2:d2:ee:ed:ee:bd:
                    8c:a7:90:de:af:66:6c:f6:1d:8e:ee:6e:dd:30:94:
                    5d:66:be:b3:b6:49:26:c4:e0:c0:96:95:a3:e6:12:
                    b1:b1:07:6b:50:4b:42:60:39:cf:0f:53:52:ac:ce:
                    c1:cc:ca:d9:54:dc:9b:f1:47:76:f8:0f:62:cc:66:
                    c6:7b:71:ad:b3:a3:96:44:6f:03:59:51:07:03:ed:
                    cc:4d:81:dc:87:15:52:02:97:6f:10:34:8c:3a:76:
                    d4:c8:de:8b:ca:db:8a:0e:23:6d:c6:3b:9d:bd:f6:
                    f0:19:1b:7f:b4:ac:08:59:94:43:aa:e6:88:83:99:
                    4b:86:a6:38:96:64:1f:46:d4:8d:82:64:d2:81:8e:
                    92:27:75:62:a7:63:59:45:4d:4c:b0:0f:c3:12:a5:
                    6a:8d:83:99:dc:b2:38:52:d0:6a:97:c6:46:e9:02:
                    a0:7d:f6:00:00:d7:97:54:e1:8d:47:97:ad:8a:3e:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:22:1E:0C:4E:15:2A:2A:BF:4A:68:A5:BF:A7:AE:B3:38:3F:90:C8
            X509v3 Authority Key Identifier:
                keyid:C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/LSIeDE4VKiq_Smilv6euszg_kMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/wKQO8IRHseKEReRBRSPFGVcpjC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:cd40:1ab5::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:f6:02:d3:56:a7:6b:73:cf:20:b1:bc:c3:85:6f:57:94:
         3b:7e:ee:33:6e:00:5d:de:16:c3:d0:ba:b7:1e:2e:57:d9:d2:
         35:e8:9d:59:b0:40:dc:cd:ef:6d:93:76:4f:f2:8c:28:5b:05:
         c9:92:c2:e6:cf:00:eb:af:48:38:fc:3f:aa:b3:d5:ac:52:f5:
         ad:e7:cb:b1:b8:b9:ae:27:a7:2c:54:73:88:42:ea:65:0c:15:
         88:42:18:08:de:fd:79:37:9a:86:4d:10:54:77:0e:35:8d:b3:
         35:ca:8e:d1:80:59:55:10:0a:f9:23:7f:8f:6e:32:75:5b:83:
         31:cb:75:f9:e2:f8:9d:54:fe:03:b3:f5:f4:8d:2f:dd:0b:70:
         44:76:2d:32:9f:c8:1c:47:96:03:27:a2:c5:43:ec:30:31:71:
         93:60:e0:b7:af:88:dd:22:88:ad:85:ac:0c:07:01:a5:fe:f6:
         0c:a8:8e:d4:56:48:aa:96:44:fc:58:9e:fe:83:ae:8f:11:de:
         6d:86:03:f3:9e:f4:c0:33:63:17:73:80:d8:04:86:8c:57:12:
         9d:e7:43:7e:fb:93:8a:dd:b2:51:14:8c:3e:19:b1:04:73:f6:
         c7:b0:19:d7:38:36:ed:1c:ea:28:dd:5e:75:d5:a5:c7:3e:aa:
         7a:ce:27:9e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYOs+U7wO4bAx+IMD1wnkCKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTQwZWYwODQ0N2IxZTI4NDQ1ZTQ0MTQ1MjNjNTE5NTcy
OThjMmQwHhcNMjIxMDA2MTEwNjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDIyMWUwYzRlMTUyYTJhYmY0YTY4YTViZmE3YWViMzM4M2Y5MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMQl99j/3rJHue01Zn0HI9rzpzJo
fa36GTpDfGR7T/OfBc9V0ou2UIe0j2h3AW5hAmTV1IobFwH2q/KaGiTKVtSLdsXC
0u7t7r2Mp5Der2Zs9h2O7m7dMJRdZr6ztkkmxODAlpWj5hKxsQdrUEtCYDnPD1NS
rM7BzMrZVNyb8Ud2+A9izGbGe3Gts6OWRG8DWVEHA+3MTYHchxVSApdvEDSMOnbU
yN6LytuKDiNtxjudvfbwGRt/tKwIWZRDquaIg5lLhqY4lmQfRtSNgmTSgY6SJ3Vi
p2NZRU1MsA/DEqVqjYOZ3LI4UtBql8ZG6QKgffYAANeXVOGNR5etij5RewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC0iHgxOFSoqv0popb+nrrM4P5DIMB8GA1UdIwQY
MBaAFMCkDvCER7HihEXkQUUjxRlXKYwtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tRTzhJUkhzZUtFUmVSQlJTUEZHVmNwakMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iYzQwMjctNmQ0Ny00Mjc1LTgxNmEt
NDc4NjQ4YmY3MDEwLzEvTFNJZURFNFZLaXFfU21pbHY2ZXVzemdfa01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iYzQwMjctNmQ0Ny00Mjc1LTgxNmEtNDc4NjQ4YmY3MDEw
LzEvd0tRTzhJUkhzZUtFUmVSQlJTUEZHVmNwakMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgfNQBq1
MA0GCSqGSIb3DQEBCwUAA4IBAQB04vYC01ana3PPILG8w4VvV5Q7fu4zbgBd3hbD
0Lq3Hi5X2dI16J1ZsEDcze9tk3ZP8owoWwXJksLmzwDrr0g4/D+qs9WsUvWt58ux
uLmuJ6csVHOIQuplDBWIQhgI3v15N5qGTRBUdw41jbM1yo7RgFlVEAr5I3+PbjJ1
W4Mxy3X54vidVP4Ds/X0jS/dC3BEdi0yn8gcR5YDJ6LFQ+wwMXGTYOC3r4jdIoit
hawMBwGl/vYMqI7UVkiqlkT8WJ7+g66PEd5thgPznvTAM2MXc4DYBIaMVxKd50N+
+5OK3bJRFIw+GbEEc/bHsBnXODbtHOoo3V511aXHPqp6ziee
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:51 2024 by rpki-client on console-ams.rpki-client.org