Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/SNQQNyJ4rBYYhm-65OH2n6EvL7U.roa
File:                     SNQQNyJ4rBYYhm-65OH2n6EvL7U.roa (raw, json)
Hash identifier:          plrMWsFUd40pV3eMG/MKEgr4juajKbbpVO3DH5zCU4U=
Subject key identifier:   48:D4:10:37:22:78:AC:16:18:86:6F:BA:E4:E1:F6:9F:A1:2F:2F:B5
Certificate issuer:       /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial:       0173E48E
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/SNQQNyJ4rBYYhm-65OH2n6EvL7U.roa
Signing time:             Thu 03 Feb 2022 15:51:27 +0000
ROA not before:           Thu 03 Feb 2022 15:51:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        45.88.91.0/24 maxlen: 24
                          45.88.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24372366 (0x173e48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
        Validity
            Not Before: Feb  3 15:51:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48d410372278ac1618866fbae4e1f69fa12f2fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ec:d9:59:29:6d:23:b3:7b:92:88:d2:1f:aa:
                    e6:a2:c6:4d:86:25:53:56:02:1f:30:44:bf:f6:52:
                    af:80:19:5b:42:51:86:a3:6e:34:c2:b1:69:72:51:
                    72:43:4c:8b:8e:c0:de:45:21:49:0b:b8:3e:bb:f4:
                    6b:e5:7a:8b:35:bb:f1:04:b9:cd:db:43:d7:ab:9b:
                    0c:bb:e5:53:fc:80:30:30:85:0e:e9:7c:2f:c5:e9:
                    94:ea:d3:1d:ec:d0:bd:f2:75:2b:b8:5f:1e:05:d7:
                    30:fd:32:08:96:17:6f:e2:31:5d:73:98:19:99:94:
                    71:9c:d1:3b:3e:4a:52:76:af:a5:f3:cc:c8:98:8d:
                    7a:26:63:46:bd:28:f5:fc:77:86:be:0b:eb:0a:d3:
                    79:17:c3:3a:4b:8e:0b:7c:0e:50:2a:e0:d6:e3:5f:
                    5d:14:0f:5e:55:b2:02:ea:95:89:d8:90:8a:6c:1a:
                    06:d6:0f:cd:09:0e:6a:5e:10:1b:d2:5c:0b:97:32:
                    18:e1:e8:9d:3b:22:4d:f0:2d:1e:4e:f3:4e:7a:10:
                    8d:44:4c:f3:16:dd:a4:6e:92:0f:39:e1:44:24:5b:
                    6f:50:68:c0:7d:49:72:18:12:75:67:55:ac:51:f9:
                    d5:aa:aa:99:3e:88:5a:d3:c5:1b:26:e6:64:5e:bc:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D4:10:37:22:78:AC:16:18:86:6F:BA:E4:E1:F6:9F:A1:2F:2F:B5
            X509v3 Authority Key Identifier:
                keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/SNQQNyJ4rBYYhm-65OH2n6EvL7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:27:da:b0:e9:6b:db:ab:5b:e0:61:a2:95:97:57:99:88:
         02:48:d4:4e:6f:4f:30:5e:dd:f8:45:83:83:ce:cc:3f:d5:23:
         58:3e:5d:c8:38:1b:ba:49:c6:4e:e5:68:e5:17:7b:f0:08:29:
         53:6e:3d:87:6a:41:b6:cd:d5:b0:fa:d1:3a:cd:65:67:40:a0:
         a8:38:c4:ee:7f:83:f6:ee:7d:c1:55:9f:53:83:68:15:0c:8d:
         c0:a2:95:1b:94:c6:a4:15:67:5f:36:f4:6f:39:33:c8:19:4c:
         aa:0c:93:57:db:3b:05:f0:67:9b:2c:1a:93:1b:ba:ca:c3:8e:
         ac:e8:62:e6:ff:b4:0a:af:3a:83:04:08:12:43:af:f0:16:ab:
         fb:68:c3:90:dd:07:0b:cd:fb:04:49:3d:8d:b3:bb:fb:6a:63:
         da:54:fd:ff:67:c0:0e:16:ef:86:7d:5d:35:f7:1d:de:28:e1:
         18:76:93:8d:87:a5:ec:90:90:08:e8:bd:fd:4d:ee:da:9e:7a:
         22:96:ad:d7:67:76:8f:47:42:64:f5:79:da:6b:37:11:9e:fe:
         20:1d:fd:40:ca:45:c3:71:c9:f9:73:45:65:ab:4d:dc:9b:c4:
         12:63:4b:00:fe:1a:e8:0e:61:07:0e:b9:2a:2f:85:46:4e:f9:
         62:48:27:67
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAXPkjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MzNlNGJiNjllZjkxODliOWU0YmJjYjVmZTg5NmM4NGJiZTAyZWQ0MB4XDTIyMDIw
MzE1NTEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhkNDEwMzcyMjc4
YWMxNjE4ODY2ZmJhZTRlMWY2OWZhMTJmMmZiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOzs2VkpbSOze5KI0h+q5qLGTYYlU1YCHzBEv/ZSr4AZW0JR
hqNuNMKxaXJRckNMi47A3kUhSQu4Prv0a+V6izW78QS5zdtD16ubDLvlU/yAMDCF
Dul8L8XplOrTHezQvfJ1K7hfHgXXMP0yCJYXb+IxXXOYGZmUcZzROz5KUnavpfPM
yJiNeiZjRr0o9fx3hr4L6wrTeRfDOkuOC3wOUCrg1uNfXRQPXlWyAuqVidiQimwa
BtYPzQkOal4QG9JcC5cyGOHonTsiTfAtHk7zTnoQjURM8xbdpG6SDznhRCRbb1Bo
wH1JchgSdWdVrFH51aqqmT6IWtPFGybmZF686LMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRI1BA3InisFhiGb7rk4fafoS8vtTAfBgNVHSMEGDAWgBTTPku2nvkYm55L
vLX+iWyEu+Au1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzB6NUx0cDc1R0p1ZVM3eTFfb2xzaEx2Z0x0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTIvZDQ4ODA4LTc0ZTgtNDQ5ZC04YTNkLWMxZjBmOWNiYjE2Ny8x
L1NOUVFOeUo0ckJZWWhtLTY1T0gybjZFdkw3VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIv
ZDQ4ODA4LTc0ZTgtNDQ5ZC04YTNkLWMxZjBmOWNiYjE2Ny8xLzB6NUx0cDc1R0p1
ZVM3eTFfb2xzaEx2Z0x0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1YWjANBgkqhkiG9w0BAQsFAAOC
AQEAkp8n2rDpa9urW+BhopWXV5mIAkjUTm9PMF7d+EWDg87MP9UjWD5dyDgbuknG
TuVo5Rd78AgpU249h2pBts3VsPrROs1lZ0CgqDjE7n+D9u59wVWfU4NoFQyNwKKV
G5TGpBVnXzb0bzkzyBlMqgyTV9s7BfBnmywakxu6ysOOrOhi5v+0Cq86gwQIEkOv
8Bar+2jDkN0HC837BEk9jbO7+2pj2lT9/2fADhbvhn1dNfcd3ijhGHaTjYel7JCQ
COi9/U3u2p56Ipat12d2j0dCZPV52ms3EZ7+IB39QMpFw3HJ+XNFZatN3JvEEmNL
AP4a6A5hBw65Ki+FRk75YkgnZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:11 2024 by rpki-client on console-ams.rpki-client.org