Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/AweI-0lPdWKz6DMbxrkaG20bbwc.roa
File:                     AweI-0lPdWKz6DMbxrkaG20bbwc.roa (raw, json)
Hash identifier:          fUgZIE7L6vSU0V9lkku8RmUCdt0sUNLQHj8FVAllzbw=
Subject key identifier:   03:07:88:FB:49:4F:75:62:B3:E8:33:1B:C6:B9:1A:1B:6D:1B:6F:07
Certificate issuer:       /CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Certificate serial:       0188A3BCB006025C343213E72C0BDAD48714
Authority key identifier: 02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/AweI-0lPdWKz6DMbxrkaG20bbwc.roa
Signing time:             Sat 10 Jun 2023 05:17:12 +0000
ROA not before:           Sat 10 Jun 2023 05:17:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        146.19.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a3:bc:b0:06:02:5c:34:32:13:e7:2c:0b:da:d4:87:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
        Validity
            Not Before: Jun 10 05:17:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=030788fb494f7562b3e8331bc6b91a1b6d1b6f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:a6:82:e5:2d:01:55:fc:eb:60:dd:4d:d9:
                    48:e8:5a:61:56:b6:e2:c2:9f:02:1d:5a:c6:ca:bb:
                    a6:d4:eb:24:f0:39:b1:d3:2a:61:d8:38:ea:17:7d:
                    8a:6a:61:3e:4b:71:c8:d7:9c:44:71:4e:29:59:8a:
                    9d:b9:e3:14:13:d6:e4:ef:b0:63:2b:69:4c:48:47:
                    5e:f3:e3:3d:c5:f1:c8:8d:1e:d7:77:b7:67:a1:ef:
                    45:7c:ee:87:fb:fa:c2:bb:5c:3b:ec:1d:62:f5:90:
                    1f:9f:17:dd:b7:b4:b6:78:b3:94:3b:6d:ea:a3:e8:
                    69:eb:78:02:70:3c:b3:f6:7c:0f:a3:10:77:7d:fb:
                    b4:83:7f:5b:ad:61:25:6a:37:70:e5:c8:6e:6d:43:
                    8e:76:94:32:f5:b0:68:61:d1:24:68:db:6a:e7:cc:
                    7a:28:0e:7d:2d:e8:b4:f6:1c:77:a1:15:37:05:a6:
                    8d:33:66:5d:26:cd:b0:64:f2:d7:36:58:87:0d:fc:
                    c9:d8:14:32:70:54:8d:5d:5b:1b:cc:44:1f:17:23:
                    a6:d5:75:54:b2:35:c5:81:b7:5e:65:12:55:cd:d1:
                    ae:2d:b1:03:76:a1:12:12:3d:ea:93:3f:7e:9d:1c:
                    3f:f9:3e:6c:a3:29:f1:11:10:68:72:11:04:40:5f:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:88:FB:49:4F:75:62:B3:E8:33:1B:C6:B9:1A:1B:6D:1B:6F:07
            X509v3 Authority Key Identifier:
                keyid:02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/AweI-0lPdWKz6DMbxrkaG20bbwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:ed:05:fb:0c:ac:36:ec:17:a1:cb:6e:c7:3b:94:8d:63:
         43:d7:82:8c:ea:90:06:87:74:2c:7c:7a:6a:73:90:d5:d6:73:
         ff:2c:04:e3:3f:cc:01:73:e6:2c:71:35:4e:cb:23:4c:3e:07:
         79:58:7f:15:d7:a8:8a:75:cf:b2:13:94:f3:71:d1:e1:0a:a3:
         11:46:eb:6c:e0:0e:08:db:10:1c:3e:e3:b5:07:45:fc:b0:bc:
         e7:8d:5e:96:2a:45:f2:00:37:53:11:6a:f0:17:f1:f3:83:5c:
         df:ac:59:23:ba:76:1f:50:d5:af:6d:20:8c:27:4a:b7:8e:90:
         a0:5e:44:c0:d3:c0:e1:c0:42:3a:a2:bd:a2:a3:5a:9a:69:c7:
         16:f8:d8:e9:97:64:90:87:97:70:19:d4:43:6b:8e:0b:24:af:
         47:80:74:86:57:41:85:89:4e:f7:56:57:44:01:c2:e3:ac:b5:
         91:9b:4d:2f:1c:2b:9f:04:28:2c:02:a6:0c:84:11:1c:ce:ad:
         54:19:a5:13:53:76:b9:ab:16:0b:5b:77:8b:fa:67:fc:fa:62:
         ac:27:39:72:51:d8:4c:57:2e:3d:4a:1a:98:0e:b3:ad:0e:8e:
         49:7b:49:63:8b:e4:20:8f:ca:0e:37:bc:70:36:a2:8b:81:33:
         3d:a1:c5:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYijvLAGAlw0MhPnLAva1IcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZWRmY2ZiMzM1YzlkNzY4ODhkODFiNzNlY2Q4YTQwYmFm
ZWNmZmMwHhcNMjMwNjEwMDUxNzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzA3ODhmYjQ5NGY3NTYyYjNlODMzMWJjNmI5MWExYjZkMWI2ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlWmguUtAVX862DdTdlI6FphVrbi
wp8CHVrGyrum1Osk8Dmx0yph2DjqF32KamE+S3HI15xEcU4pWYqdueMUE9bk77Bj
K2lMSEde8+M9xfHIjR7Xd7dnoe9FfO6H+/rCu1w77B1i9ZAfnxfdt7S2eLOUO23q
o+hp63gCcDyz9nwPoxB3ffu0g39brWElajdw5chubUOOdpQy9bBoYdEkaNtq58x6
KA59Lei09hx3oRU3BaaNM2ZdJs2wZPLXNliHDfzJ2BQycFSNXVsbzEQfFyOm1XVU
sjXFgbdeZRJVzdGuLbEDdqESEj3qkz9+nRw/+T5soynxERBochEEQF8AYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAMHiPtJT3Vis+gzG8a5GhttG28HMB8GA1UdIwQY
MBaAFALt/PszXJ12iI2Btz7NikC6/s/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXUzOC16TmNuWGFJallHM1BzMktRTHItel93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83ZGUyMjEtZTNiZS00NTZkLTkxZjQt
YjE0YjdjZjcwZDJmLzEvQXdlSS0wbFBkV0t6NkRNYnhya2FHMjBiYndjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83ZGUyMjEtZTNiZS00NTZkLTkxZjQtYjE0YjdjZjcwZDJm
LzEvQXUzOC16TmNuWGFJallHM1BzMktRTHItel93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPMMA0G
CSqGSIb3DQEBCwUAA4IBAQCTou0F+wysNuwXoctuxzuUjWND14KM6pAGh3QsfHpq
c5DV1nP/LATjP8wBc+YscTVOyyNMPgd5WH8V16iKdc+yE5TzcdHhCqMRRuts4A4I
2xAcPuO1B0X8sLznjV6WKkXyADdTEWrwF/Hzg1zfrFkjunYfUNWvbSCMJ0q3jpCg
XkTA08DhwEI6or2io1qaaccW+Njpl2SQh5dwGdRDa44LJK9HgHSGV0GFiU73VldE
AcLjrLWRm00vHCufBCgsAqYMhBEczq1UGaUTU3a5qxYLW3eL+mf8+mKsJzlyUdhM
Vy49ShqYDrOtDo5Je0lji+Qgj8oON7xwNqKLgTM9ocVL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:41 2024 by rpki-client on console-fra.rpki-client.org