Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/BH1q_VEXufD0LGr3WJh8Xjg7Hts.roa
File:                     BH1q_VEXufD0LGr3WJh8Xjg7Hts.roa (raw, json)
Hash identifier:          /M1b239gF8nZ/QzkRWrwRam90kedg46EEYmO5A8t48U=
Subject key identifier:   04:7D:6A:FD:51:17:B9:F0:F4:2C:6A:F7:58:98:7C:5E:38:3B:1E:DB
Certificate issuer:       /CN=6ae6e8f83a51fbf4b6f53f269e9127f41c1f0af9
Certificate serial:       0185708CB6A0314A2281E6E71793AF4815B0
Authority key identifier: 6A:E6:E8:F8:3A:51:FB:F4:B6:F5:3F:26:9E:91:27:F4:1C:1F:0A:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aubo-DpR-_S29T8mnpEn9BwfCvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/BH1q_VEXufD0LGr3WJh8Xjg7Hts.roa
Signing time:             Mon 02 Jan 2023 03:35:47 +0000
ROA not before:           Mon 02 Jan 2023 03:35:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207782
IP address blocks:        193.162.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:b6:a0:31:4a:22:81:e6:e7:17:93:af:48:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae6e8f83a51fbf4b6f53f269e9127f41c1f0af9
        Validity
            Not Before: Jan  2 03:35:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=047d6afd5117b9f0f42c6af758987c5e383b1edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:c9:fa:23:89:5b:cc:70:c4:5d:65:22:f6:
                    73:a7:b9:d6:40:ae:5d:81:6a:0a:76:9c:a9:ad:75:
                    14:33:02:6a:4e:69:e3:1f:df:8b:d3:8e:15:2c:dc:
                    c7:25:04:0b:3b:5c:36:2e:fa:09:ec:52:28:3e:a5:
                    27:1b:bf:a2:74:b2:7c:af:55:83:78:b9:c7:19:66:
                    7c:9b:f7:01:0d:be:e7:03:4f:cf:29:cd:a5:17:da:
                    c4:bf:6f:94:b7:9a:e5:dc:c1:10:22:fd:56:a5:78:
                    be:b2:0d:b8:97:d0:b7:08:0f:64:09:9e:e3:1e:eb:
                    1a:1f:76:92:96:18:29:b9:63:7f:eb:91:05:ee:9b:
                    00:9a:ca:6a:6c:46:e7:a0:a1:f7:dc:da:99:e4:23:
                    26:fe:54:02:33:db:61:87:fa:4c:3b:b8:0b:bc:d7:
                    ec:1b:7d:d9:d5:3e:d9:2c:ae:f5:92:72:9e:7a:15:
                    27:a8:10:2c:71:84:73:50:2a:ec:a5:bb:45:99:d7:
                    9d:34:47:b9:01:27:7d:41:1f:cb:4a:5e:6e:88:2c:
                    df:0d:ea:59:51:50:2c:43:21:96:4c:20:53:30:d8:
                    1a:1c:60:ce:ec:80:96:b5:f8:21:a9:2c:ee:a7:31:
                    e8:d6:36:5a:5f:a6:4a:d5:8a:47:24:4c:86:0c:cb:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:6A:FD:51:17:B9:F0:F4:2C:6A:F7:58:98:7C:5E:38:3B:1E:DB
            X509v3 Authority Key Identifier:
                keyid:6A:E6:E8:F8:3A:51:FB:F4:B6:F5:3F:26:9E:91:27:F4:1C:1F:0A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aubo-DpR-_S29T8mnpEn9BwfCvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/BH1q_VEXufD0LGr3WJh8Xjg7Hts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/31cc04-c856-4453-b2e0-5f8ff6cb8341/1/aubo-DpR-_S29T8mnpEn9BwfCvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:19:19:5e:d4:b1:b9:9b:78:e2:b7:c7:8a:04:20:d3:85:
         de:4e:4f:08:9f:dd:7a:71:f2:45:c1:15:1a:b4:1a:dc:6d:79:
         97:18:bf:dd:d9:de:c5:78:02:14:24:16:e0:74:92:58:6a:f2:
         70:2a:25:35:77:7d:0f:83:de:62:d4:ba:5b:48:3a:ba:f5:8d:
         11:0e:32:55:dc:e7:d6:51:5e:61:40:3a:23:a8:d7:ee:07:37:
         07:e7:99:9e:78:ce:82:46:a8:82:9d:f6:c8:a3:d2:33:26:b2:
         47:9f:78:5a:28:f7:e8:7b:b3:fb:c1:52:21:45:55:97:20:b1:
         b0:0a:bb:a1:19:e6:7e:9e:50:f5:ff:64:f5:ae:95:80:59:04:
         10:10:93:8a:81:8b:e2:ea:6b:f8:2a:ad:b4:9f:e2:39:37:25:
         4d:38:4a:6c:ac:d1:7a:f6:fb:35:ed:41:f3:6e:e4:10:3e:05:
         3b:9d:4f:88:e2:78:f5:3c:78:46:9b:75:33:7d:1a:c4:56:b8:
         91:a0:ad:f1:25:46:11:4f:7d:3a:64:55:ab:b7:58:33:a6:63:
         d0:96:e8:d3:0e:01:65:f9:1d:15:ea:02:cb:5e:ff:b6:78:2b:
         5a:fc:8b:b0:13:3a:c8:f4:47:18:eb:f1:aa:0c:4f:88:f4:07:
         37:3c:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org