Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa
File:                     UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa (raw, json)
Hash identifier:          P1Xe/cGY6hzSkPdsDoPmlGhfNhs6j7sOr5vnBuHK6c4=
Subject key identifier:   51:3A:9B:EA:C3:3B:FE:70:C6:5F:1B:72:04:DA:AD:38:D7:3E:2D:DD
Certificate issuer:       /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial:       01856E0AF7F9ED38866B7189FAC73D257D07
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa
Signing time:             Sun 01 Jan 2023 15:54:50 +0000
ROA not before:           Sun 01 Jan 2023 15:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203511
IP address blocks:        62.106.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:0a:f7:f9:ed:38:86:6b:71:89:fa:c7:3d:25:7d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
        Validity
            Not Before: Jan  1 15:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=513a9beac33bfe70c65f1b7204daad38d73e2ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:9e:0b:06:5d:5c:5b:df:80:ac:e5:69:95:
                    5a:98:7c:0e:f7:50:eb:2d:7c:3f:58:06:7a:2f:85:
                    04:7d:a2:4e:ec:d2:aa:92:b5:a4:b1:1f:6a:b6:40:
                    71:31:8d:6f:5e:78:13:b3:47:5d:75:84:21:60:4c:
                    b0:30:e5:71:16:fe:d3:a5:e0:4d:76:6e:5c:a1:c9:
                    d2:91:ea:92:ce:ae:cc:80:33:38:45:32:f7:45:3b:
                    eb:39:5c:b3:cd:64:ca:46:e3:1c:b1:bb:a5:71:af:
                    42:35:31:5a:7b:b0:84:e6:c1:2e:0c:14:da:68:04:
                    2e:e8:70:dd:f8:f0:2f:60:fe:5d:9c:14:91:04:fd:
                    bb:1a:01:12:a8:5a:e8:40:55:2e:8e:71:ed:4b:23:
                    ef:81:a5:56:9d:37:d1:ab:57:b4:d9:94:b5:ba:08:
                    e0:a0:c0:27:ad:41:52:69:a6:3c:39:ce:3e:05:4c:
                    82:7e:ff:b0:24:31:61:ab:1e:d1:6e:8a:ab:c7:f9:
                    a8:60:29:b8:ec:18:14:be:52:99:bd:6e:8b:37:a2:
                    ec:1a:34:df:23:ac:8b:ab:f0:50:a1:38:cc:64:9d:
                    da:31:31:77:44:74:b7:71:13:0d:e7:85:01:14:14:
                    c3:1e:95:28:96:64:2b:9d:09:37:7e:d0:cf:ce:3c:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3A:9B:EA:C3:3B:FE:70:C6:5F:1B:72:04:DA:AD:38:D7:3E:2D:DD
            X509v3 Authority Key Identifier:
                keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:48:28:ae:0e:65:3d:c4:f5:ab:08:ff:d5:a7:32:0c:c4:6d:
         12:2b:04:26:25:3a:3e:62:44:79:98:e5:b9:9f:b7:93:0a:90:
         06:40:3f:d3:a6:30:fc:30:05:1e:6a:95:db:c5:1c:6e:7e:9a:
         52:b7:84:d7:84:cf:27:20:d6:62:1e:0d:fe:b9:01:b3:39:34:
         a8:99:a0:18:74:8c:6a:f2:01:b9:b2:7d:58:a1:53:e8:7b:27:
         81:24:a9:b9:61:dc:ef:7b:f2:b8:b2:d9:d1:35:31:c1:dd:84:
         9e:70:2d:38:2f:b6:06:26:d8:5f:df:8d:26:11:62:89:29:36:
         f4:b3:a2:5d:7d:53:53:d2:ee:7c:a2:45:9b:5f:60:de:83:72:
         bb:55:d9:4a:42:5b:fc:0f:28:4d:c8:38:4a:bd:61:99:eb:9d:
         f1:d2:8c:18:02:a7:b6:f2:ad:ca:8b:24:90:93:2c:43:0e:2a:
         8b:46:3d:77:01:4b:55:cc:9f:b7:48:e8:2f:4b:57:0e:e8:80:
         87:12:db:19:83:3c:d1:bc:b6:e0:5f:d2:46:17:ec:50:06:2a:
         7e:4e:ee:8f:50:10:69:11:a1:75:c0:ae:c9:f0:f1:d2:70:fd:
         f4:2c:95:cf:88:03:12:63:be:2a:fe:ea:97:6e:86:6a:96:b0:
         2e:35:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:06 2024 by rpki-client on console-ams.rpki-client.org