Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/46O4DcGD44YQ_evRYZLMK0WnI7Q.roa
File:                     46O4DcGD44YQ_evRYZLMK0WnI7Q.roa (raw, json)
Hash identifier:          iva0cdXKO8qdD8yg8C3WumYrSjjdgTcNuiov7b/VWUk=
Subject key identifier:   E3:A3:B8:0D:C1:83:E3:86:10:FD:EB:D1:61:92:CC:2B:45:A7:23:B4
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       018570304A270B0160D1722827C09EC4152B
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/46O4DcGD44YQ_evRYZLMK0WnI7Q.roa
Signing time:             Mon 02 Jan 2023 01:54:50 +0000
ROA not before:           Mon 02 Jan 2023 01:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142111
IP address blocks:        194.50.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:4a:27:0b:01:60:d1:72:28:27:c0:9e:c4:15:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Jan  2 01:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3a3b80dc183e38610fdebd16192cc2b45a723b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:c3:c0:c6:cf:09:91:6c:9f:78:39:25:5d:
                    0c:63:6e:d2:cb:7f:b2:7e:cc:3b:6f:f5:72:ba:1a:
                    ed:fb:c3:ce:40:2f:86:58:40:4a:f1:86:e4:de:75:
                    6c:6d:70:5d:85:5f:40:e0:cc:a7:e8:bc:e7:9e:a7:
                    95:86:91:94:0e:41:82:a0:5f:4c:7e:d6:0c:ca:e1:
                    4b:4a:36:f9:79:c9:2a:a9:33:ed:59:36:37:50:11:
                    33:06:62:2e:87:c4:fa:da:4e:00:91:64:77:c5:6b:
                    cf:1f:67:dd:14:f1:b2:9a:de:51:62:7c:04:79:80:
                    d3:6f:f6:74:5f:36:3e:9c:01:8a:e6:d6:e2:39:c8:
                    2e:ca:ae:9a:44:9a:05:14:9f:9b:36:21:25:16:cb:
                    f1:4d:2d:e7:10:af:32:ca:21:2c:80:e4:8f:72:d8:
                    0f:ef:2f:61:05:cd:9d:24:91:87:f6:0a:82:af:52:
                    31:dc:79:64:5e:eb:89:d9:58:43:4d:42:b0:20:4c:
                    24:47:3d:10:f9:31:8e:84:ae:d1:67:83:05:56:e1:
                    83:d4:35:cd:c0:ac:d7:8c:92:3e:43:72:3f:73:e5:
                    3f:f1:a9:69:5e:90:21:9e:22:e0:f2:1d:d6:22:80:
                    3a:7f:19:25:34:11:39:8d:e9:d5:fb:e5:23:b5:88:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A3:B8:0D:C1:83:E3:86:10:FD:EB:D1:61:92:CC:2B:45:A7:23:B4
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/46O4DcGD44YQ_evRYZLMK0WnI7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:c0:c5:07:3c:8c:14:25:ce:f7:f4:2e:4e:39:9d:5d:1f:
         9c:c5:f7:6f:9a:5c:03:22:4a:7d:00:82:9c:cc:03:2c:61:98:
         f8:35:42:2c:28:fa:ee:0b:f4:5e:9f:fb:fd:13:0a:a2:3d:6f:
         02:ac:3d:48:ae:df:fe:f0:f0:92:bb:2b:76:f1:d6:a9:c3:02:
         c6:5e:a1:ea:b3:a4:7b:fa:b3:3b:31:c4:dc:58:47:ec:12:ff:
         7c:9e:93:2c:9e:39:71:d9:68:0a:7e:a1:18:6f:d7:87:5b:da:
         4b:62:f1:b8:fb:02:20:9b:a8:71:4a:95:22:ba:ac:36:89:01:
         65:e1:cd:af:af:47:7a:23:1d:8d:d7:a2:29:ef:c8:ff:2c:d3:
         41:d9:e0:84:df:94:da:09:70:d3:c0:49:73:d6:44:f3:df:00:
         cb:ff:34:a8:e1:8a:e3:1f:73:ab:be:00:2c:f7:33:9b:36:c2:
         2e:d3:d7:99:33:cf:3a:67:ff:58:e0:17:f5:ac:38:1c:cd:eb:
         91:11:1b:26:6e:ba:d2:3e:7b:66:0d:b4:81:a2:6d:40:bf:28:
         48:d3:98:6c:db:f5:c0:50:83:a4:fb:3c:61:3a:c5:6f:25:63:
         6a:d4:60:13:77:09:c5:92:78:f3:26:d7:b3:6f:2e:b3:25:75:
         56:ac:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org