Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/INHCAawvVSRUYnP9DOLJ6kWSESw.roa
File:                     INHCAawvVSRUYnP9DOLJ6kWSESw.roa (raw, json)
Hash identifier:          Wr1C3HAjHJ1EiUoI9uwx62FbXTM9O92xHyPQDd1oHeY=
Subject key identifier:   20:D1:C2:01:AC:2F:55:24:54:62:73:FD:0C:E2:C9:EA:45:92:11:2C
Certificate issuer:       /CN=57ec2d5e7769897a1d1b8051a336a562d7ae899b
Certificate serial:       6D06C9
Authority key identifier: 57:EC:2D:5E:77:69:89:7A:1D:1B:80:51:A3:36:A5:62:D7:AE:89:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-wtXndpiXodG4BRozalYteuiZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/INHCAawvVSRUYnP9DOLJ6kWSESw.roa
Signing time:             Sat 01 Jan 2022 01:59:14 +0000
ROA not before:           Sat 01 Jan 2022 01:59:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50612
IP address blocks:        146.19.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7145161 (0x6d06c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ec2d5e7769897a1d1b8051a336a562d7ae899b
        Validity
            Not Before: Jan  1 01:59:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20d1c201ac2f5524546273fd0ce2c9ea4592112c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:d7:55:bc:cb:d4:b3:a6:68:fd:d7:3d:28:
                    b7:d3:c5:9b:3a:c7:cf:ce:af:73:a6:01:d0:7d:7d:
                    8f:f8:9a:48:d8:16:9c:22:c6:4e:69:9d:97:8f:b4:
                    df:da:ce:b1:03:d0:af:3f:d7:74:bf:49:fc:96:4c:
                    51:39:d3:3b:49:4f:73:0a:4c:3c:21:ff:4b:30:15:
                    b2:26:7f:44:21:89:bc:28:9a:b2:b3:44:78:f8:3f:
                    1e:36:33:de:54:73:1f:4b:82:1a:ab:16:54:e8:6e:
                    fa:8f:5a:6f:a9:06:cb:53:af:3b:b2:b3:14:52:b9:
                    08:9e:9b:1e:52:97:f3:73:98:53:e5:8b:dd:69:40:
                    bf:d5:b2:12:b4:d8:5f:ca:64:8d:24:f8:24:f6:17:
                    36:fb:ff:4c:b3:69:8e:88:18:b4:eb:92:86:69:4a:
                    de:63:89:e9:25:53:72:a0:b0:67:04:5a:84:e1:4b:
                    4f:7a:ec:42:13:aa:21:08:ab:87:55:d5:8d:4f:d6:
                    d7:3c:85:e8:1f:40:6b:b5:5a:87:64:c0:1b:ce:82:
                    4e:65:6e:8f:30:32:56:8d:87:78:c4:55:69:d7:c2:
                    c3:c1:03:89:85:56:a0:0b:f7:55:be:c6:0e:be:b5:
                    d3:da:0a:40:c9:da:29:b1:7a:df:04:71:ae:74:d2:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D1:C2:01:AC:2F:55:24:54:62:73:FD:0C:E2:C9:EA:45:92:11:2C
            X509v3 Authority Key Identifier:
                keyid:57:EC:2D:5E:77:69:89:7A:1D:1B:80:51:A3:36:A5:62:D7:AE:89:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-wtXndpiXodG4BRozalYteuiZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/INHCAawvVSRUYnP9DOLJ6kWSESw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/V-wtXndpiXodG4BRozalYteuiZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:63:4e:99:92:60:bd:09:9c:03:53:d5:be:56:5d:54:e7:
         2b:e6:8d:b0:9e:a8:2d:81:a0:8b:1c:69:e7:2f:0c:69:16:2b:
         86:2e:45:72:0c:7c:35:44:8a:96:51:af:c9:5d:d1:19:30:af:
         cc:66:3a:cc:bf:b3:58:33:1b:7b:1f:12:c9:03:cf:e3:73:ac:
         62:24:ed:20:e8:06:53:45:92:77:a9:98:b8:db:14:cf:05:6a:
         21:42:71:9a:ea:c9:5a:c9:c9:f6:eb:b4:2a:9f:dd:73:f2:25:
         1e:77:fc:16:ba:18:18:82:9d:85:29:85:9a:28:84:d8:2a:49:
         7f:9f:5b:93:75:2d:96:a9:63:c0:74:a8:8f:7f:6e:8a:54:60:
         a9:3c:b5:8c:30:b4:09:fe:b9:76:a4:6d:89:db:ee:6c:30:03:
         2b:eb:c8:9e:9c:25:71:49:25:82:c4:3d:08:19:6b:7e:b0:d9:
         e0:11:16:f6:b7:53:c5:b5:bc:9b:7e:6f:c6:25:5f:0a:eb:99:
         09:fd:07:20:eb:f2:c9:d1:56:34:ff:21:ee:e9:89:38:85:4c:
         42:c0:30:1d:e5:4d:a7:d7:73:48:58:e4:54:3b:c8:ab:fb:cb:
         e6:d8:00:53:dc:b3:52:ba:ab:2c:4d:ea:b7:eb:f6:45:54:c3:
         11:0f:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:13 2024 by rpki-client on console-ams.rpki-client.org