Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/rFoQgCz0f1Wx-b0bBMalodqG_jg.roa
File:                     rFoQgCz0f1Wx-b0bBMalodqG_jg.roa (raw, json)
Hash identifier:          B/og2CsgqAki14pWEh2mpF63xXZ7A25YALT1wk6/f9g=
Subject key identifier:   AC:5A:10:80:2C:F4:7F:55:B1:F9:BD:1B:04:C6:A5:A1:DA:86:FE:38
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       0186E4595E380B965BA3E43485223C9DA732
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/rFoQgCz0f1Wx-b0bBMalodqG_jg.roa
Signing time:             Wed 15 Mar 2023 08:18:27 +0000
ROA not before:           Wed 15 Mar 2023 08:18:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        194.59.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:59:5e:38:0b:96:5b:a3:e4:34:85:22:3c:9d:a7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: Mar 15 08:18:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac5a10802cf47f55b1f9bd1b04c6a5a1da86fe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:56:4d:7e:d4:0a:1d:34:3f:0b:c0:5a:6d:
                    7f:58:3d:59:fd:29:01:95:75:7f:10:47:79:6f:12:
                    28:c7:cd:1e:9b:50:3a:df:68:0c:ca:1b:60:bc:b8:
                    ad:bb:a9:6c:e8:a7:07:17:56:a3:b2:f6:83:1f:c8:
                    63:1b:9b:de:f0:40:ce:25:1e:7d:da:c4:f4:13:ca:
                    10:0e:48:2f:25:b2:d2:96:be:d2:c4:a8:3c:1d:32:
                    5e:da:a8:d1:17:f7:0a:b1:5e:b7:f9:3a:8b:c8:01:
                    96:06:58:05:01:3e:93:83:8b:ab:04:e5:74:8d:fb:
                    84:57:57:60:29:b4:0c:a8:18:f5:49:37:05:50:db:
                    7f:16:c8:a6:6f:c1:9e:67:91:c8:ee:c3:60:7e:02:
                    8b:75:55:f0:e2:6f:6a:e9:cd:c4:c9:e4:ba:d5:ed:
                    5e:15:68:18:84:3e:37:8c:39:7f:e4:76:99:0f:15:
                    f9:53:8f:da:d3:1d:31:0b:b4:f3:b2:b4:73:3b:0b:
                    d3:0a:98:bc:b3:d2:63:53:b8:af:20:d5:25:ef:7c:
                    18:9e:6b:90:63:fc:00:9d:9e:44:82:08:55:b2:96:
                    ca:7a:c8:59:f1:c5:71:21:9a:e8:4f:46:e4:78:43:
                    70:eb:59:58:91:65:96:69:e0:53:d9:12:54:2f:3f:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:10:80:2C:F4:7F:55:B1:F9:BD:1B:04:C6:A5:A1:DA:86:FE:38
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/rFoQgCz0f1Wx-b0bBMalodqG_jg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:7e:ca:5f:e1:99:cc:f5:15:64:69:53:46:7c:99:33:7a:ce:
         16:51:56:3f:7b:09:d4:fa:df:e6:ed:00:6d:6e:d5:e0:7e:10:
         aa:bc:ae:ba:ab:48:09:32:6b:4a:a6:8f:ac:88:fc:6a:dd:2f:
         cf:e1:81:d0:8a:77:17:59:4f:1e:e2:2c:b6:0b:26:22:e8:9e:
         8c:44:d1:8a:06:dc:64:21:93:1c:a8:62:a8:e0:2b:c8:20:13:
         b4:c0:b5:7e:a6:22:5b:63:6d:bb:e9:de:52:d5:cc:a3:53:37:
         dc:02:1a:68:6c:e4:62:14:d6:0b:72:2c:ab:88:c1:95:96:b1:
         d0:24:68:ed:53:f2:0c:2f:25:29:0b:57:18:46:ef:60:fe:97:
         6b:7f:cb:49:dc:53:26:52:7f:8b:5b:3f:1b:b3:57:33:fb:27:
         f1:cc:0f:df:a3:24:3e:f9:f9:3a:c4:85:4c:e4:71:1c:a9:42:
         2b:bb:72:6c:62:63:27:9a:c4:ce:70:93:b9:72:b6:49:23:0b:
         80:5c:d3:84:e5:90:6c:bf:d0:4f:3d:06:94:24:6d:59:32:24:
         da:d3:f8:70:9b:61:a7:e2:cd:4b:3f:cd:ad:b7:46:3a:42:4c:
         81:e2:06:f8:96:9a:06:ba:8c:39:5d:3a:4f:fd:01:fb:2a:7d:
         85:c1:a2:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbkWV44C5Zbo+Q0hSI8nacyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDY1Y2NmMWViZTU1NWIzNzUyNzE3ZTU5NWMyNzViY2Fk
MDBiNGUwHhcNMjMwMzE1MDgxODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzVhMTA4MDJjZjQ3ZjU1YjFmOWJkMWIwNGM2YTVhMWRhODZmZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L5WTX7UCh00PwvAWm1/WD1Z/SkB
lXV/EEd5bxIox80em1A632gMyhtgvLitu6ls6KcHF1ajsvaDH8hjG5ve8EDOJR59
2sT0E8oQDkgvJbLSlr7SxKg8HTJe2qjRF/cKsV63+TqLyAGWBlgFAT6Tg4urBOV0
jfuEV1dgKbQMqBj1STcFUNt/Fsimb8GeZ5HI7sNgfgKLdVXw4m9q6c3EyeS61e1e
FWgYhD43jDl/5HaZDxX5U4/a0x0xC7TzsrRzOwvTCpi8s9JjU7ivINUl73wYnmuQ
Y/wAnZ5EgghVspbKeshZ8cVxIZroT0bkeENw61lYkWWWaeBT2RJULz+/3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxaEIAs9H9Vsfm9GwTGpaHahv44MB8GA1UdIwQY
MBaAFHkGXM8evlVbN1JxfllcJ1vK0AtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTIt
MDE3ZWI1NzM1YjEzLzEvckZvUWdDejBmMVd4LWIwYkJNYWxvZHFHX2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTItMDE3ZWI1NzM1YjEz
LzEvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsGMA0G
CSqGSIb3DQEBCwUAA4IBAQC5fspf4ZnM9RVkaVNGfJkzes4WUVY/ewnU+t/m7QBt
btXgfhCqvK66q0gJMmtKpo+siPxq3S/P4YHQincXWU8e4iy2CyYi6J6MRNGKBtxk
IZMcqGKo4CvIIBO0wLV+piJbY2276d5S1cyjUzfcAhpobORiFNYLciyriMGVlrHQ
JGjtU/IMLyUpC1cYRu9g/pdrf8tJ3FMmUn+LWz8bs1cz+yfxzA/foyQ++fk6xIVM
5HEcqUIru3JsYmMnmsTOcJO5crZJIwuAXNOE5ZBsv9BPPQaUJG1ZMiTa0/hwm2Gn
4s1LP82tt0Y6QkyB4gb4lpoGuow5XTpP/QH7Kn2FwaK+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-fra.rpki-client.org