Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/xqTBGQDDgixLPkmxek9yCIaJ3_k.roa
File:                     xqTBGQDDgixLPkmxek9yCIaJ3_k.roa (raw, json)
Hash identifier:          SE6NsGfExM+Z/OSwlXoA/McTxglBjtUl48AyCGtEalg=
Subject key identifier:   C6:A4:C1:19:00:C3:82:2C:4B:3E:49:B1:7A:4F:72:08:86:89:DF:F9
Certificate issuer:       /CN=4737263af544e1bba5dec5e988896b69884e08b4
Certificate serial:       018239CBF1CCE9525B11FF9EF19F36B48824
Authority key identifier: 47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzcmOvVE4bul3sXpiIlraYhOCLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/xqTBGQDDgixLPkmxek9yCIaJ3_k.roa
Signing time:             Tue 26 Jul 2022 09:17:23 +0000
ROA not before:           Tue 26 Jul 2022 09:17:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44477
IP address blocks:        146.19.230.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:39:cb:f1:cc:e9:52:5b:11:ff:9e:f1:9f:36:b4:88:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4737263af544e1bba5dec5e988896b69884e08b4
        Validity
            Not Before: Jul 26 09:17:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6a4c11900c3822c4b3e49b17a4f72088689dff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:b4:d3:fd:77:09:8b:30:c9:7c:bb:b5:76:
                    09:29:88:a7:ec:08:77:0c:b9:31:c8:2f:1d:ea:1a:
                    b5:22:cb:f0:71:d3:08:47:ba:28:78:a6:44:8e:c2:
                    a1:0a:70:f9:91:08:7d:5f:eb:ac:e1:b7:76:d9:02:
                    2c:13:b5:8c:58:f2:05:ee:0a:16:49:c9:f7:c6:e9:
                    20:4d:28:1f:bb:68:9e:4b:51:4b:8e:08:aa:9f:d6:
                    2b:a9:a7:ca:e0:82:67:e8:11:ba:c5:e4:fa:d1:16:
                    1e:b8:15:1f:f6:ba:44:93:3c:0e:8d:5f:46:57:a4:
                    01:ac:0f:1c:7a:d3:da:6b:da:7c:63:29:74:2d:85:
                    1f:b3:31:be:d8:12:8c:2c:99:ed:8a:3d:dd:4a:94:
                    3e:49:d4:d0:78:71:7f:9e:c1:48:a4:8a:2b:2f:ca:
                    26:b9:a6:e1:b6:17:e6:c2:25:37:d9:6f:f7:e5:68:
                    7d:bb:92:ce:f7:f1:dd:b6:2d:f5:55:02:b1:92:6c:
                    17:05:9a:7d:1d:61:f4:67:cf:fb:27:d3:ab:6a:80:
                    82:cf:6d:b4:d4:f9:de:e1:13:83:8c:4f:ad:41:c7:
                    55:f3:33:bf:84:32:4d:de:9f:d2:2f:9e:ce:cd:be:
                    a5:d3:1b:ee:0d:b0:b9:05:b8:d9:ae:d3:c9:29:07:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A4:C1:19:00:C3:82:2C:4B:3E:49:B1:7A:4F:72:08:86:89:DF:F9
            X509v3 Authority Key Identifier:
                keyid:47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzcmOvVE4bul3sXpiIlraYhOCLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/xqTBGQDDgixLPkmxek9yCIaJ3_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/RzcmOvVE4bul3sXpiIlraYhOCLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:3b:5e:53:27:2e:2f:ae:9c:5c:01:ac:44:d8:89:df:48:
         51:94:5a:80:e7:00:34:c6:d1:94:e3:93:b9:21:fb:71:7a:76:
         6b:f7:6e:70:78:ad:c4:d4:67:34:0b:ae:64:96:de:37:2b:a1:
         25:0a:a3:9c:58:9e:0e:a5:d3:c6:9d:c9:24:bd:5e:54:f4:bc:
         6b:21:8c:1e:2c:75:1e:a6:71:74:6a:28:27:d4:19:1e:ff:58:
         29:87:86:bb:d4:2a:cb:ea:ce:71:1c:33:7e:e6:6d:2c:31:88:
         b8:af:d5:ea:24:86:8b:76:66:23:37:5e:ca:16:31:a2:79:16:
         86:89:b8:ea:7f:ea:a7:0c:62:ce:07:eb:b1:db:65:f6:3d:3c:
         20:89:34:e8:79:d8:4d:16:ec:18:f5:af:82:d9:01:0d:fa:72:
         9c:c7:b5:c5:e0:3d:90:31:57:16:1e:d6:4c:51:91:59:0b:19:
         03:ff:08:4e:df:d0:a5:03:08:fc:4f:51:53:59:e6:91:09:f8:
         24:09:fc:23:f1:dc:25:24:3e:26:d0:c8:02:44:42:b5:d0:65:
         34:03:48:0f:18:05:7f:b3:91:e7:b2:27:4c:77:bd:f5:6d:3a:
         19:65:1a:4a:3a:69:89:9f:58:e7:05:36:c4:63:16:a5:87:42:
         ee:6f:a7:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYI5y/HM6VJbEf+e8Z82tIgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzcyNjNhZjU0NGUxYmJhNWRlYzVlOTg4ODk2YjY5ODg0
ZTA4YjQwHhcNMjIwNzI2MDkxNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmE0YzExOTAwYzM4MjJjNGIzZTQ5YjE3YTRmNzIwODg2ODlkZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2K00/13CYswyXy7tXYJKYin7Ah3
DLkxyC8d6hq1IsvwcdMIR7ooeKZEjsKhCnD5kQh9X+us4bd22QIsE7WMWPIF7goW
Scn3xukgTSgfu2ieS1FLjgiqn9YrqafK4IJn6BG6xeT60RYeuBUf9rpEkzwOjV9G
V6QBrA8cetPaa9p8Yyl0LYUfszG+2BKMLJntij3dSpQ+SdTQeHF/nsFIpIorL8om
uabhthfmwiU32W/35Wh9u5LO9/Hdti31VQKxkmwXBZp9HWH0Z8/7J9OraoCCz220
1Pne4RODjE+tQcdV8zO/hDJN3p/SL57Ozb6l0xvuDbC5BbjZrtPJKQdXRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMakwRkAw4IsSz5JsXpPcgiGid/5MB8GA1UdIwQY
MBaAFEc3Jjr1ROG7pd7F6YiJa2mITgi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpjbU92VkU0YnVsM3NYcGlJbHJhWWhPQ0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZTFmOGItMGViOC00NjllLTk3YjEt
YThjNmY5MGE3MDEzLzEveHFUQkdRRERnaXhMUGtteGVrOXlDSWFKM19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zZTFmOGItMGViOC00NjllLTk3YjEtYThjNmY5MGE3MDEz
LzEvUnpjbU92VkU0YnVsM3NYcGlJbHJhWWhPQ0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPmMA0G
CSqGSIb3DQEBCwUAA4IBAQBCpDteUycuL66cXAGsRNiJ30hRlFqA5wA0xtGU45O5
IftxenZr925weK3E1Gc0C65klt43K6ElCqOcWJ4OpdPGnckkvV5U9LxrIYweLHUe
pnF0aign1Bke/1gph4a71CrL6s5xHDN+5m0sMYi4r9XqJIaLdmYjN17KFjGieRaG
ibjqf+qnDGLOB+ux22X2PTwgiTToedhNFuwY9a+C2QEN+nKcx7XF4D2QMVcWHtZM
UZFZCxkD/whO39ClAwj8T1FTWeaRCfgkCfwj8dwlJD4m0MgCREK10GU0A0gPGAV/
s5HnsidMd731bToZZRpKOmmJn1jnBTbEYxalh0Lub6eA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:00 2024 by rpki-client on console-fra.rpki-client.org