Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/oE-UI4nwSPi_hf8kLb7icGzPt7w.roa
File:                     oE-UI4nwSPi_hf8kLb7icGzPt7w.roa (raw, json)
Hash identifier:          B62xeYgyZQvJ0e94x+SClkpVJkL/5Un0gK4wzN3qMTE=
Subject key identifier:   A0:4F:94:23:89:F0:48:F8:BF:85:FF:24:2D:BE:E2:70:6C:CF:B7:BC
Certificate issuer:       /CN=76d85543445ec6d670cba7cb1ba981f09f588b83
Certificate serial:       018A292400C01FAC73E59899687A26AEAD86
Authority key identifier: 76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/oE-UI4nwSPi_hf8kLb7icGzPt7w.roa
Signing time:             Thu 24 Aug 2023 20:02:19 +0000
ROA not before:           Thu 24 Aug 2023 20:02:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        37.140.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:29:24:00:c0:1f:ac:73:e5:98:99:68:7a:26:ae:ad:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d85543445ec6d670cba7cb1ba981f09f588b83
        Validity
            Not Before: Aug 24 20:02:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a04f942389f048f8bf85ff242dbee2706ccfb7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:54:86:80:a8:20:1b:73:80:66:7f:6e:cd:
                    29:90:15:27:71:32:b9:df:5e:e0:f9:1c:0b:75:1c:
                    eb:7d:ba:2b:42:95:f3:9a:58:b7:09:22:cf:78:e0:
                    fb:95:27:95:7c:49:13:b9:73:89:80:30:61:58:49:
                    4d:e9:fe:0e:a5:97:0c:30:45:f2:cb:98:f5:8e:6a:
                    db:6d:40:88:f9:e7:19:e1:97:6d:1a:21:eb:3b:ad:
                    58:3f:0a:a8:2e:29:d2:66:4c:35:7b:e2:70:8e:27:
                    d1:53:24:ce:25:04:36:d9:2b:93:54:9a:36:fa:2a:
                    60:0d:59:40:fa:89:27:17:f7:98:79:1f:b8:d3:34:
                    80:00:66:11:2b:67:1d:12:ff:5e:c9:60:7f:15:c3:
                    c5:e1:fd:94:19:75:06:cb:ef:0d:20:8a:5b:4f:5e:
                    a9:f3:42:ee:03:da:32:30:b4:6c:ef:f8:f2:5f:ab:
                    a1:c3:2b:6e:cf:b5:6e:be:e9:e8:e1:dc:4a:94:13:
                    f3:4b:24:b8:88:fa:64:74:25:62:47:65:e7:19:41:
                    74:93:90:68:2b:9b:d5:bc:31:25:f7:08:ab:ef:46:
                    e0:09:77:72:c9:8a:95:d1:4d:1f:d6:62:30:39:82:
                    b2:99:de:0a:8b:c4:7c:14:a8:69:60:dc:13:39:8a:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4F:94:23:89:F0:48:F8:BF:85:FF:24:2D:BE:E2:70:6C:CF:B7:BC
            X509v3 Authority Key Identifier:
                keyid:76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/oE-UI4nwSPi_hf8kLb7icGzPt7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/dthVQ0RextZwy6fLG6mB8J9Yi4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:6a:4f:e5:eb:87:e8:71:9e:59:19:7f:58:67:75:9c:62:
         e1:b6:de:be:78:05:5e:7d:7e:dc:cd:71:07:ef:49:a3:b1:cc:
         9e:85:24:86:b1:b2:5f:55:cc:5c:52:06:c3:37:13:cd:45:15:
         bb:b8:18:48:0d:8c:7b:c3:ed:bd:75:98:b3:13:86:9b:97:8e:
         7e:94:08:b1:e0:26:bd:3c:23:91:33:0b:25:d3:7c:a1:ad:46:
         2c:88:51:7f:79:83:52:ef:43:34:10:73:7f:07:ea:c4:79:06:
         0f:3c:83:b9:81:38:7a:99:c5:39:69:04:0e:2b:57:ba:10:34:
         a9:86:44:f4:c0:24:a2:c8:65:27:e4:8d:89:15:ff:34:e8:3c:
         7f:d3:c0:ef:af:ae:a9:6f:aa:ea:57:78:7d:14:4a:28:02:20:
         25:b1:5a:a4:9a:78:77:84:60:4e:55:9c:5f:53:c9:5a:8a:79:
         d6:8a:1e:16:e3:74:47:a5:39:9b:4b:14:9f:2a:d5:27:8b:5d:
         d1:67:c4:c2:17:75:0c:c8:d3:e5:1b:cc:f8:de:65:8f:a0:4c:
         90:b1:c9:a7:fa:53:1c:05:4a:e9:99:55:71:bb:4b:ad:83:da:
         15:f2:9a:ba:36:a0:1b:24:79:2a:a4:24:7e:03:98:ac:4a:d7:
         a8:bf:41:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYopJADAH6xz5ZiZaHomrq2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZDg1NTQzNDQ1ZWM2ZDY3MGNiYTdjYjFiYTk4MWYwOWY1
ODhiODMwHhcNMjMwODI0MjAwMjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDRmOTQyMzg5ZjA0OGY4YmY4NWZmMjQyZGJlZTI3MDZjY2ZiN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFxUhoCoIBtzgGZ/bs0pkBUncTK5
317g+RwLdRzrfborQpXzmli3CSLPeOD7lSeVfEkTuXOJgDBhWElN6f4OpZcMMEXy
y5j1jmrbbUCI+ecZ4ZdtGiHrO61YPwqoLinSZkw1e+JwjifRUyTOJQQ22SuTVJo2
+ipgDVlA+oknF/eYeR+40zSAAGYRK2cdEv9eyWB/FcPF4f2UGXUGy+8NIIpbT16p
80LuA9oyMLRs7/jyX6uhwytuz7Vuvuno4dxKlBPzSyS4iPpkdCViR2XnGUF0k5Bo
K5vVvDEl9wir70bgCXdyyYqV0U0f1mIwOYKymd4Ki8R8FKhpYNwTOYq3VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKBPlCOJ8Ej4v4X/JC2+4nBsz7e8MB8GA1UdIwQY
MBaAFHbYVUNEXsbWcMunyxupgfCfWIuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHRoVlEwUmV4dFp3eTZmTEc2bUI4SjlZaTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83ODVmNGMtMjZhNi00YzgyLTg1Zjgt
ZjZiMGVhYWM0NzU4LzEvb0UtVUk0bndTUGlfaGY4a0xiN2ljR3pQdDd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83ODVmNGMtMjZhNi00YzgyLTg1ZjgtZjZiMGVhYWM0NzU4
LzEvZHRoVlEwUmV4dFp3eTZmTEc2bUI4SjlZaTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYzyMA0G
CSqGSIb3DQEBCwUAA4IBAQBprmpP5euH6HGeWRl/WGd1nGLhtt6+eAVefX7czXEH
70mjscyehSSGsbJfVcxcUgbDNxPNRRW7uBhIDYx7w+29dZizE4abl45+lAix4Ca9
PCORMwsl03yhrUYsiFF/eYNS70M0EHN/B+rEeQYPPIO5gTh6mcU5aQQOK1e6EDSp
hkT0wCSiyGUn5I2JFf806Dx/08Dvr66pb6rqV3h9FEooAiAlsVqkmnh3hGBOVZxf
U8lainnWih4W43RHpTmbSxSfKtUni13RZ8TCF3UMyNPlG8z43mWPoEyQscmn+lMc
BUrpmVVxu0utg9oV8pq6NqAbJHkqpCR+A5isSteov0HO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:57 2024 by rpki-client on console-fra.rpki-client.org