Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/tLdRu3FNR0wsVlQXleZ-7zEwkB8.roa
File:                     tLdRu3FNR0wsVlQXleZ-7zEwkB8.roa (raw, json)
Hash identifier:          +dxIYDVIlVq4x/edh5ngHNONapfZ4OXgxDSfEYk3FbM=
Subject key identifier:   B4:B7:51:BB:71:4D:47:4C:2C:56:54:17:95:E6:7E:EF:31:30:90:1F
Certificate issuer:       /CN=916098b0295d617488d3d9e7d23b59a331c15e60
Certificate serial:       36BB
Authority key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/tLdRu3FNR0wsVlQXleZ-7zEwkB8.roa
Signing time:             Thu 24 Mar 2022 19:46:35 +0000
ROA not before:           Thu 24 Mar 2022 19:46:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        147.78.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14011 (0x36bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916098b0295d617488d3d9e7d23b59a331c15e60
        Validity
            Not Before: Mar 24 19:46:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4b751bb714d474c2c56541795e67eef3130901f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:0d:8b:13:cd:95:ce:6d:ca:d3:1f:f8:43:
                    b9:b4:0e:a7:0d:46:e4:16:b5:af:a9:32:7c:7a:c6:
                    05:9e:01:f2:e6:50:98:e8:01:17:92:05:13:bb:76:
                    de:72:48:56:f3:b1:77:5a:7c:aa:04:67:0e:4a:c1:
                    65:3c:07:78:6a:36:e2:ae:ae:61:34:1d:3e:f8:a5:
                    2e:60:af:7e:ae:34:dc:8b:26:ed:e5:a6:7a:b0:3b:
                    9a:58:db:3e:cf:3a:70:45:61:b4:4f:f5:ca:be:08:
                    4c:94:f5:a6:90:e3:6b:6b:ef:27:39:0b:27:54:2f:
                    36:c7:70:97:af:ea:34:91:16:41:79:56:7d:7d:32:
                    ea:3e:5b:b6:2f:c2:3b:1f:3e:c4:aa:52:bf:de:3d:
                    b5:e1:1b:d6:ab:c1:5e:e3:3d:48:12:99:05:8d:e7:
                    70:7d:e9:7a:fa:6f:9f:25:9c:7f:43:fe:52:77:cc:
                    18:7c:d6:c0:aa:a1:c2:85:5f:ff:fa:d4:bd:72:83:
                    d7:76:93:c7:fe:44:cb:ff:87:da:60:46:4c:02:66:
                    28:2c:0f:82:15:83:e6:94:4b:50:1a:d2:04:26:44:
                    09:ae:8f:a2:23:df:88:c7:55:e1:d4:5f:5f:6e:41:
                    55:86:57:64:d5:20:75:6c:ac:0c:20:d8:8f:c6:96:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:51:BB:71:4D:47:4C:2C:56:54:17:95:E6:7E:EF:31:30:90:1F
            X509v3 Authority Key Identifier:
                keyid:91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/tLdRu3FNR0wsVlQXleZ-7zEwkB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:dc:a4:97:18:2c:95:ec:6a:00:a1:33:f3:d7:11:29:f3:97:
         e9:a6:e5:a6:bd:91:ea:ab:97:3f:f6:ef:4d:4c:f0:0e:9c:1b:
         b4:e3:9c:58:98:5b:32:0f:3d:38:8e:5a:2a:f3:a9:9c:7a:5c:
         ed:25:85:6d:1d:45:b7:b9:0b:12:6b:06:01:7b:ba:ea:7d:ad:
         5f:c1:cd:31:1f:e8:47:a1:c8:7c:35:95:28:25:21:0e:2c:b0:
         c0:b4:96:88:4b:7f:44:59:9f:41:46:d4:76:6b:57:82:73:b7:
         ab:5e:1b:25:48:38:bb:11:6a:da:ee:79:a3:fd:24:bb:51:c7:
         f7:9c:c6:3b:71:7f:03:1a:62:e2:f7:98:c3:b0:9d:34:54:ab:
         81:c9:21:8f:63:8a:c2:a5:e5:9f:3a:af:17:9b:71:57:69:4d:
         bf:fd:28:9e:40:f9:7e:02:06:09:bf:3b:3c:e0:1c:97:fe:76:
         a9:e3:11:77:b8:21:40:a3:32:b5:71:e1:96:70:0b:25:d7:03:
         2f:69:4a:64:a9:13:38:a0:1a:ee:e7:a6:5b:e4:bc:89:f9:5c:
         19:35:fa:fe:e8:60:e5:36:eb:eb:14:c8:25:ff:a1:a1:78:74:
         9b:34:ed:a1:6e:73:eb:33:0a:48:68:91:4f:d8:cf:aa:7d:f6:
         19:e0:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org