Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/4J2Z1ZiRjdZ-HVXvqT5Z50-es-Y.roa
File:                     4J2Z1ZiRjdZ-HVXvqT5Z50-es-Y.roa (raw, json)
Hash identifier:          ZviS7sw6AtyJkxFS7j/N5IJMvYlwU7+s2uMOuPG8hSg=
Subject key identifier:   E0:9D:99:D5:98:91:8D:D6:7E:1D:55:EF:A9:3E:59:E7:4F:9E:B3:E6
Certificate issuer:       /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial:       01857DDC64D643A4B0D3C4EDE78846476892
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/4J2Z1ZiRjdZ-HVXvqT5Z50-es-Y.roa
Signing time:             Wed 04 Jan 2023 17:37:53 +0000
ROA not before:           Wed 04 Jan 2023 17:37:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        146.19.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7d:dc:64:d6:43:a4:b0:d3:c4:ed:e7:88:46:47:68:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
        Validity
            Not Before: Jan  4 17:37:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e09d99d598918dd67e1d55efa93e59e74f9eb3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:e7:5d:1b:5c:ea:b2:c8:f7:07:28:dc:b7:
                    7b:db:55:99:21:20:64:fb:c0:2c:62:cd:19:c9:65:
                    3e:55:9f:90:98:72:96:d8:fc:32:4c:95:f2:94:a1:
                    5c:1e:98:db:4c:61:7e:d1:05:3f:f3:d1:2f:ed:98:
                    40:f6:9e:d3:31:fc:0f:1f:d9:d0:7d:b2:6d:3f:fe:
                    2d:c2:bc:f4:3c:1a:4b:54:b2:68:3c:cd:62:d2:7a:
                    bd:c0:cc:44:53:4c:fa:46:c3:1b:8c:79:81:0a:49:
                    38:68:62:2b:b4:2d:ee:7e:38:2e:7a:d8:9b:c8:c4:
                    dd:13:2d:77:63:99:e6:8f:ab:25:a5:31:21:a4:72:
                    e8:3f:ba:c4:06:d3:61:df:7b:da:28:8e:16:bd:bc:
                    a8:26:8f:3f:44:a9:f6:54:a2:83:84:c5:a0:22:ec:
                    08:d7:26:43:e8:e3:9f:96:95:70:50:4a:9e:e3:91:
                    bd:cc:b9:fc:21:d4:c3:be:a2:4c:d9:bd:98:e8:07:
                    08:1f:80:39:6e:03:0b:8f:2f:4c:66:da:94:85:43:
                    90:5c:61:d6:6b:8a:66:d7:a0:c2:7d:8f:8d:76:17:
                    ad:26:ad:b4:a5:26:b7:15:4c:3b:b3:55:e1:e6:a6:
                    c1:50:9f:09:40:f8:c5:22:46:1e:27:0a:d6:31:6a:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:99:D5:98:91:8D:D6:7E:1D:55:EF:A9:3E:59:E7:4F:9E:B3:E6
            X509v3 Authority Key Identifier:
                keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/4J2Z1ZiRjdZ-HVXvqT5Z50-es-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:57:1d:a6:26:e8:bd:7f:b8:5f:09:2a:7f:69:4d:c9:94:d6:
         0d:bf:c8:30:4e:28:79:fc:49:93:4b:76:ea:a9:f7:bd:44:3c:
         3c:6a:da:8c:14:63:2b:a0:45:87:53:bc:30:5c:6f:69:fa:da:
         3d:9f:f3:ae:25:e7:ee:52:7c:57:09:d2:1e:e4:8c:53:a1:7e:
         5d:a0:c5:1b:29:4d:55:11:85:93:93:3f:1b:93:f7:26:36:3d:
         2b:26:c1:9e:95:f1:56:9a:24:ee:54:53:8a:1f:76:87:9f:f4:
         cf:26:7d:6a:85:7e:a8:89:0d:45:8e:16:57:13:75:a7:9a:35:
         9f:d0:62:cf:36:ee:08:65:b7:9f:e7:ea:87:73:c9:47:6f:65:
         65:44:c3:2d:8a:a7:85:05:6f:a8:1c:bc:0f:9f:ed:d1:d9:9c:
         ec:ee:eb:3a:36:fa:18:df:8c:56:c5:d8:01:b3:46:0d:64:0c:
         d8:c4:3c:72:66:46:78:03:5f:f9:7b:b0:85:2f:3b:97:de:0d:
         09:e1:19:bc:24:75:53:e7:f0:79:8e:3a:80:ab:fa:e6:01:5d:
         d0:c4:c9:d9:93:fc:55:9a:f4:24:2e:f2:c3:cb:a1:1c:6b:32:
         28:a5:03:f7:43:d3:2c:21:83:52:51:2c:df:4f:bc:e2:b7:2b:
         c4:c8:d6:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV93GTWQ6Sw08Tt54hGR2iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzUxOWZjODY4NGQzYTk0NDJkZjY5NjE5MTQyMjI4Mjc5
YTRmNTcwHhcNMjMwMTA0MTczNzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDlkOTlkNTk4OTE4ZGQ2N2UxZDU1ZWZhOTNlNTllNzRmOWViM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFTnXRtc6rLI9wco3Ld721WZISBk
+8AsYs0ZyWU+VZ+QmHKW2PwyTJXylKFcHpjbTGF+0QU/89Ev7ZhA9p7TMfwPH9nQ
fbJtP/4twrz0PBpLVLJoPM1i0nq9wMxEU0z6RsMbjHmBCkk4aGIrtC3ufjguetib
yMTdEy13Y5nmj6slpTEhpHLoP7rEBtNh33vaKI4WvbyoJo8/RKn2VKKDhMWgIuwI
1yZD6OOflpVwUEqe45G9zLn8IdTDvqJM2b2Y6AcIH4A5bgMLjy9MZtqUhUOQXGHW
a4pm16DCfY+NdhetJq20pSa3FUw7s1Xh5qbBUJ8JQPjFIkYeJwrWMWqlFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOCdmdWYkY3Wfh1V76k+WedPnrPmMB8GA1UdIwQY
MBaAFDJ1GfyGhNOpRC32lhkUIignmk9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5VWl9JYUUwNmxFTGZhV0dSUWlLQ2VhVDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kM2E2ZDMtMzBjYy00YzIxLTk3ODkt
OTY3MWY4OGE3N2UyLzEvNEoyWjFaaVJqZFotSFZYdnFUNVo1MC1lcy1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kM2E2ZDMtMzBjYy00YzIxLTk3ODktOTY3MWY4OGE3N2Uy
LzEvTW5VWl9JYUUwNmxFTGZhV0dSUWlLQ2VhVDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNdMA0G
CSqGSIb3DQEBCwUAA4IBAQC3Vx2mJui9f7hfCSp/aU3JlNYNv8gwTih5/EmTS3bq
qfe9RDw8atqMFGMroEWHU7wwXG9p+to9n/OuJefuUnxXCdIe5IxToX5doMUbKU1V
EYWTkz8bk/cmNj0rJsGelfFWmiTuVFOKH3aHn/TPJn1qhX6oiQ1FjhZXE3WnmjWf
0GLPNu4IZbef5+qHc8lHb2VlRMMtiqeFBW+oHLwPn+3R2Zzs7us6NvoY34xWxdgB
s0YNZAzYxDxyZkZ4A1/5e7CFLzuX3g0J4Rm8JHVT5/B5jjqAq/rmAV3QxMnZk/xV
mvQkLvLDy6EcazIopQP3Q9MsIYNSUSzfT7zityvEyNZf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-fra.rpki-client.org