Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa
File:                     1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa (raw, json)
Hash identifier:          WgFrMTjHiN63bm4c9TK3mG7BSYR8RBVHTzPAts+NQng=
Subject key identifier:   FB:07:32:8B:FB:39:15:C2:EB:62:65:01:17:9B:11:1A:98:5B:7E:70
Certificate issuer:       /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial:       011B9D
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa
Signing time:             Wed 20 Apr 2022 13:01:46 +0000
ROA not before:           Wed 20 Apr 2022 13:01:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        194.15.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72605 (0x11b9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
        Validity
            Not Before: Apr 20 13:01:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb07328bfb3915c2eb626501179b111a985b7e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:04:a0:bf:00:3d:50:5e:28:c0:eb:34:a5:
                    08:f9:d2:51:41:de:7a:61:8f:83:74:6e:c4:74:60:
                    a8:91:e1:1c:b7:5e:ea:7c:ec:fa:e0:23:fa:60:c6:
                    73:7a:f2:3f:82:fe:fa:79:4a:41:36:f2:29:4a:34:
                    ff:4d:f3:2e:d1:89:7a:06:ab:5d:47:ea:2a:09:66:
                    ca:8f:d5:f6:0d:c0:86:44:4b:d7:91:78:aa:db:69:
                    28:fb:84:d9:6c:52:d6:35:c1:48:03:9e:5d:db:67:
                    90:d5:e3:d5:6d:96:71:6d:b1:7e:7b:13:24:99:23:
                    80:e6:3b:0c:72:70:d5:9d:ed:7c:b0:54:74:3f:83:
                    53:e0:30:96:43:b9:7f:ed:97:53:d4:a6:27:dd:47:
                    7d:85:e7:e2:fe:ec:b9:3d:b0:88:61:28:0d:c7:4c:
                    d4:99:70:79:33:34:75:7c:33:5f:c2:ff:8f:cb:66:
                    ca:84:a4:39:4c:6e:ef:ec:5f:bb:3b:17:c9:f8:b8:
                    8d:98:3e:94:8a:95:a7:f0:65:3f:54:e4:ee:20:e9:
                    cb:63:c5:e1:98:36:c2:7f:4e:42:66:9b:36:ef:8a:
                    ad:64:6c:ca:6a:61:e5:53:3f:23:d1:1e:0c:6c:b9:
                    12:75:fa:b8:6f:1d:f4:40:d1:92:c1:cc:e4:86:5f:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:32:8B:FB:39:15:C2:EB:62:65:01:17:9B:11:1A:98:5B:7E:70
            X509v3 Authority Key Identifier:
                keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:82:de:78:6f:f5:b2:fe:10:36:a1:43:7d:a7:1b:fd:e4:
         7e:81:ce:10:81:49:66:51:23:92:42:2c:0f:14:d9:aa:df:a1:
         49:b2:24:0e:2d:c8:ce:c6:c6:0b:5a:1b:24:58:bf:b8:8d:0b:
         00:04:fc:aa:dd:72:9f:c1:e7:02:6a:2f:22:59:41:09:90:6e:
         a2:2c:5c:3e:1e:c2:18:3f:0c:56:58:c3:89:fb:7e:9f:2d:a6:
         4f:d6:3c:f5:b3:ec:e1:84:29:72:4a:33:54:ca:58:b5:14:62:
         52:c0:5d:41:29:4c:a0:ab:ed:76:e5:fe:6a:69:2c:a7:41:59:
         16:6b:83:16:7e:50:b8:9b:ba:b2:fe:d8:ef:fa:57:85:0f:93:
         53:19:62:16:d9:44:a6:46:79:9e:c2:71:b9:4e:b0:16:fa:be:
         13:0e:8c:44:ec:00:42:d6:e4:c8:7c:9c:74:89:af:6e:90:38:
         f0:a8:46:44:10:88:02:47:07:91:5a:9a:89:54:16:68:45:14:
         14:f3:8a:99:d5:e1:aa:8c:61:4b:ca:b1:55:50:2c:4e:24:db:
         0c:e9:93:7c:21:88:97:38:4a:f6:90:42:6b:a7:2c:60:9a:3e:
         46:b8:ef:7c:1b:c8:e2:dd:0a:a5:c3:a5:c5:7b:f5:fa:1e:6a:
         a8:82:4b:aa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDARudMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY2
NDUwZDJkMDIxM2VlNGM5ZjMxODFlZmVlYjJkNjYzZmUwZDM2NWIwHhcNMjIwNDIw
MTMwMTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmYjA3MzI4YmZiMzkx
NWMyZWI2MjY1MDExNzliMTExYTk4NWI3ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArqMEoL8APVBeKMDrNKUI+dJRQd56YY+DdG7EdGCokeEct17q
fOz64CP6YMZzevI/gv76eUpBNvIpSjT/TfMu0Yl6BqtdR+oqCWbKj9X2DcCGREvX
kXiq22ko+4TZbFLWNcFIA55d22eQ1ePVbZZxbbF+exMkmSOA5jsMcnDVne18sFR0
P4NT4DCWQ7l/7ZdT1KYn3Ud9hefi/uy5PbCIYSgNx0zUmXB5MzR1fDNfwv+Py2bK
hKQ5TG7v7F+7OxfJ+LiNmD6UipWn8GU/VOTuIOnLY8XhmDbCf05CZps274qtZGzK
amHlUz8j0R4MbLkSdfq4bx30QNGSwczkhl8b/wIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFPsHMov7ORXC62JlARebERqYW35wMB8GA1UdIwQYMBaAFPZFDS0CE+5MnzGB
7+6y1mP+DTZbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OWtVTkxRSVQ3a3lmTVlIdjdyTFdZXzROTmxzLmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85MS82Mzc4YmItNTJjZS00NmFmLTk1OWMtYTkwNTQ5MjhiNTQ0LzEv
MS13Y3lpX3M1RmNMclltVUJGNXNSR3BoYmZuQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEv
NjM3OGJiLTUyY2UtNDZhZi05NTljLWE5MDU0OTI4YjU0NC8xLzlrVU5MUUlUN2t5
Zk1ZSHY3ckxXWV80Tk5scy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIPlzANBgkqhkiG9w0BAQsFAAOC
AQEAvKCC3nhv9bL+EDahQ32nG/3kfoHOEIFJZlEjkkIsDxTZqt+hSbIkDi3IzsbG
C1obJFi/uI0LAAT8qt1yn8HnAmovIllBCZBuoixcPh7CGD8MVljDift+ny2mT9Y8
9bPs4YQpckozVMpYtRRiUsBdQSlMoKvtduX+amksp0FZFmuDFn5QuJu6sv7Y7/pX
hQ+TUxliFtlEpkZ5nsJxuU6wFvq+Ew6MROwAQtbkyHycdImvbpA48KhGRBCIAkcH
kVqaiVQWaEUUFPOKmdXhqoxhS8qxVVAsTiTbDOmTfCGIlzhK9pBCa6csYJo+Rrjv
fBvI4t0KpcOlxXv1+h5qqIJLqg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-fra.rpki-client.org