Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/MVWQb8cKNC9in6BOfvli1BtboU4.roa
File:                     MVWQb8cKNC9in6BOfvli1BtboU4.roa (raw, json)
Hash identifier:          D8jzdVzLm9wRcBWAvtR/oQq6mm3qOlTyNyRakunjIac=
Subject key identifier:   31:55:90:6F:C7:0A:34:2F:62:9F:A0:4E:7E:F9:62:D4:1B:5B:A1:4E
Certificate issuer:       /CN=6cbf88a9c36cf62bdd3303ef1d4d75113c66a55b
Certificate serial:       019BBAA0
Authority key identifier: 6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bL-IqcNs9ivdMwPvHU11ETxmpVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/MVWQb8cKNC9in6BOfvli1BtboU4.roa
Signing time:             Sat 01 Jan 2022 12:05:23 +0000
ROA not before:           Sat 01 Jan 2022 12:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203061
IP address blocks:        193.104.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26983072 (0x19bbaa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cbf88a9c36cf62bdd3303ef1d4d75113c66a55b
        Validity
            Not Before: Jan  1 12:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3155906fc70a342f629fa04e7ef962d41b5ba14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:0f:6a:90:49:c9:9a:ef:b7:90:6b:39:6e:
                    2a:3d:aa:53:32:66:a4:ed:80:5f:63:fd:49:76:25:
                    72:e8:f3:f7:e4:a2:e1:b4:55:47:4f:14:7e:91:00:
                    df:54:e1:17:6f:9e:c3:43:ec:fb:27:81:a7:73:27:
                    94:4e:ce:46:f9:1a:04:8e:50:0b:43:43:7e:4c:58:
                    c8:5b:9b:3e:f3:68:73:35:e4:c0:77:98:1f:f7:b1:
                    6a:6d:33:a2:7a:5b:8d:ef:a5:fe:24:31:ba:b3:9f:
                    6a:21:dc:31:9f:0a:e1:20:19:30:3d:25:ca:58:c5:
                    49:73:ea:08:fd:d1:0c:40:99:e7:f6:1b:0a:b5:4e:
                    26:67:c5:05:8e:f3:d6:ed:2e:aa:72:cc:a6:48:18:
                    d1:9b:89:9a:80:eb:0f:a1:4f:fd:71:06:bd:be:9e:
                    b2:41:2a:83:33:5d:2e:05:69:90:d5:1e:c3:35:9b:
                    42:dc:0e:d3:20:2f:4a:11:1f:8a:6c:73:52:c3:4e:
                    19:0d:e1:09:a0:e2:57:80:52:15:19:4c:69:8f:ea:
                    d6:90:db:3a:cf:8e:09:9d:d6:f7:b8:b7:07:24:f3:
                    67:90:15:32:2e:e5:e1:23:46:2d:ec:6e:f6:b5:1e:
                    ca:ae:94:81:b4:74:93:68:29:a2:59:c8:2f:d2:33:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:90:6F:C7:0A:34:2F:62:9F:A0:4E:7E:F9:62:D4:1B:5B:A1:4E
            X509v3 Authority Key Identifier:
                keyid:6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bL-IqcNs9ivdMwPvHU11ETxmpVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/MVWQb8cKNC9in6BOfvli1BtboU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:24:f4:1b:eb:1a:5a:2d:e1:5f:8c:4f:53:e0:d8:ec:0d:71:
         3f:b6:c6:da:c1:58:90:06:99:8f:72:92:f9:c6:15:00:81:b2:
         18:34:0c:04:f1:cb:21:07:93:f4:dd:d8:2f:b6:d7:e6:9e:17:
         a2:88:93:a4:5c:e1:45:e6:20:34:eb:ae:53:a2:9d:c1:b8:d6:
         db:cf:52:42:9a:0b:57:ff:9b:a4:15:e3:05:88:4e:f9:6f:49:
         b2:7d:0c:39:9f:2f:5b:08:69:68:83:ea:0b:e1:d0:52:ab:d1:
         f1:09:cf:98:34:2e:2c:dc:c5:75:6b:5e:b8:47:e3:06:13:54:
         64:07:3b:0a:b8:9b:fd:e1:fd:e1:ea:f8:46:0b:36:2e:d4:24:
         b0:f7:f9:d5:5a:99:25:22:13:16:e1:e3:56:d1:c4:54:9a:05:
         27:83:5c:21:fb:23:c7:de:be:57:6e:60:02:99:8a:fc:66:e7:
         61:ba:ed:36:c5:d7:5d:63:d3:47:53:ac:b6:e9:e8:3f:72:dc:
         74:b3:f1:be:84:7a:6b:2c:ee:40:ed:13:44:a8:39:83:e3:43:
         84:50:f6:de:47:b9:d4:58:d4:f7:d1:2d:0f:71:37:7d:34:47:
         b4:8e:fe:fd:bf:73:bb:bd:e2:3a:09:c5:82:d5:8c:41:9c:76:
         f5:26:26:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAZu6oDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Y2JmODhhOWMzNmNmNjJiZGQzMzAzZWYxZDRkNzUxMTNjNjZhNTViMB4XDTIyMDEw
MTEyMDUyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzE1NTkwNmZjNzBh
MzQyZjYyOWZhMDRlN2VmOTYyZDQxYjViYTE0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKkD2qQScma77eQazluKj2qUzJmpO2AX2P9SXYlcujz9+Si
4bRVR08UfpEA31ThF2+ew0Ps+yeBp3MnlE7ORvkaBI5QC0NDfkxYyFubPvNoczXk
wHeYH/exam0zonpbje+l/iQxurOfaiHcMZ8K4SAZMD0lyljFSXPqCP3RDECZ5/Yb
CrVOJmfFBY7z1u0uqnLMpkgY0ZuJmoDrD6FP/XEGvb6eskEqgzNdLgVpkNUewzWb
QtwO0yAvShEfimxzUsNOGQ3hCaDiV4BSFRlMaY/q1pDbOs+OCZ3W97i3ByTzZ5AV
Mi7l4SNGLexu9rUeyq6UgbR0k2gpolnIL9IzMmECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQxVZBvxwo0L2KfoE5++WLUG1uhTjAfBgNVHSMEGDAWgBRsv4ipw2z2K90z
A+8dTXURPGalWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JMLUlxY05zOWl2ZE13UHZIVTExRVR4bXBWcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvZWNkY2EzLTVmMWMtNDY0Ny1iY2RjLTMxNGYzODQxMzJkMi8x
L01WV1FiOGNLTkM5aW42Qk9mdmxpMUJ0Ym9VNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
ZWNkY2EzLTVmMWMtNDY0Ny1iY2RjLTMxNGYzODQxMzJkMi8xL2JMLUlxY05zOWl2
ZE13UHZIVTExRVR4bXBWcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFoYDANBgkqhkiG9w0BAQsFAAOC
AQEApiT0G+saWi3hX4xPU+DY7A1xP7bG2sFYkAaZj3KS+cYVAIGyGDQMBPHLIQeT
9N3YL7bX5p4XooiTpFzhReYgNOuuU6KdwbjW289SQpoLV/+bpBXjBYhO+W9Jsn0M
OZ8vWwhpaIPqC+HQUqvR8QnPmDQuLNzFdWteuEfjBhNUZAc7Crib/eH94er4Rgs2
LtQksPf51VqZJSITFuHjVtHEVJoFJ4NcIfsjx96+V25gApmK/GbnYbrtNsXXXWPT
R1OstunoP3LcdLPxvoR6ayzuQO0TRKg5g+NDhFD23ke51FjU99EtD3E3fTRHtI7+
/b9zu73iOgnFgtWMQZx29SYmrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:38 2024 by rpki-client on console-fra.rpki-client.org