Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa
File:                     kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa (raw, json)
Hash identifier:          qt44cIXj3KE3v8GZKNLLY0rSG3p4PK/wxACNS7Yv+Q4=
Subject key identifier:   92:9D:7D:43:A4:67:D9:91:E2:92:08:CC:BA:F6:79:DA:59:A9:B9:6D
Certificate issuer:       /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial:       0184858EA213560F3B015D765685947BAC92
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa
Signing time:             Thu 17 Nov 2022 12:27:07 +0000
ROA not before:           Thu 17 Nov 2022 12:27:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.19.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:85:8e:a2:13:56:0f:3b:01:5d:76:56:85:94:7b:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
        Validity
            Not Before: Nov 17 12:27:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=929d7d43a467d991e29208ccbaf679da59a9b96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:75:b1:f2:71:26:69:e2:c3:cc:8b:b2:e7:
                    0a:f1:0b:ce:4e:2e:7c:7d:a7:95:44:89:ff:23:04:
                    90:bd:ea:93:7b:d4:5a:3b:06:2e:3a:8f:7d:f3:b4:
                    e5:8d:0a:da:63:69:ec:36:d3:4e:12:7d:1d:ea:0f:
                    f3:cf:a2:9f:d1:75:dd:90:6a:43:12:22:08:24:8f:
                    38:a4:60:63:49:e8:d0:1c:9d:3b:4b:65:66:07:ef:
                    11:dd:a8:47:9a:a3:62:c8:a7:0c:37:70:e2:05:5b:
                    0a:4a:0e:6e:d1:6f:0c:04:9b:25:7b:b0:1c:90:75:
                    0b:be:dd:96:5d:24:be:7f:dd:9d:4a:f2:60:f4:0f:
                    a4:b4:aa:f7:85:31:b8:65:1e:2c:24:71:37:e7:48:
                    96:00:c0:fa:51:75:02:45:98:4a:8c:9f:09:6f:5a:
                    f0:a6:4d:52:25:c3:0f:98:d8:a5:c4:c4:a4:dd:27:
                    1d:28:eb:ec:75:7a:63:a0:87:da:9b:1f:f3:a5:2a:
                    38:08:b5:16:a0:7b:9e:5a:e5:5b:e9:58:30:aa:97:
                    ef:44:f6:47:89:f0:f4:fc:99:b5:b6:47:13:82:37:
                    5a:11:e1:df:12:31:44:0e:35:23:36:9d:45:9a:59:
                    b5:d2:01:19:61:03:96:fe:62:4a:e1:23:87:e1:bd:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:7D:43:A4:67:D9:91:E2:92:08:CC:BA:F6:79:DA:59:A9:B9:6D
            X509v3 Authority Key Identifier:
                keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/kp19Q6Rn2ZHikgjMuvZ52lmpuW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:40:4e:38:62:ea:f6:42:36:5a:3a:a3:88:c8:8c:a0:91:
         79:35:2d:c9:21:d8:46:be:ae:22:68:32:9e:a7:9b:4f:7f:d6:
         c3:c7:0a:b2:86:7c:e0:91:d5:1e:c2:ac:20:6f:dd:49:50:27:
         ef:2d:cc:fb:9a:9d:8f:32:41:05:6d:66:21:05:8f:0f:cd:dd:
         8e:18:c7:cc:f6:dc:e5:9a:11:33:94:ff:f2:77:2b:d7:d6:cb:
         65:dd:1b:8d:5f:16:b1:fc:40:40:f1:29:1e:89:77:a5:7c:4e:
         4a:5e:ce:7b:43:5f:50:a5:ed:1b:b6:11:38:2e:42:3a:c8:2b:
         bd:ee:d8:d4:b6:b7:2d:47:25:bc:9c:70:f7:21:79:29:97:bc:
         62:1e:ea:b1:58:d3:d2:d5:0a:c9:8e:f7:45:4f:8d:25:83:fd:
         f7:bb:87:4f:50:74:ff:94:e6:de:26:c4:7c:df:25:c6:75:ae:
         7a:57:7f:9d:4f:74:48:35:7d:84:ea:7f:d0:d1:f4:b8:0e:49:
         7e:f1:a6:e1:d4:74:df:11:ef:0e:67:20:96:78:05:e6:d5:8b:
         7e:cd:e7:df:25:db:8e:51:f5:cb:b8:da:b1:7e:e6:ba:fd:c9:
         8e:bf:09:bb:4e:d8:21:f4:2d:d6:48:76:b0:93:e2:dc:be:12:
         ab:a9:9e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-fra.rpki-client.org