Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/LBiV656SJdduH8Xgu-lkgXA2NQo.roa
File:                     LBiV656SJdduH8Xgu-lkgXA2NQo.roa (raw, json)
Hash identifier:          aixEbv1sdVefx1VX9F+xBTA5PTtZKxRXlYu5A8C45wc=
Subject key identifier:   2C:18:95:EB:9E:92:25:D7:6E:1F:C5:E0:BB:E9:64:81:70:36:35:0A
Certificate issuer:       /CN=74d2b8b5ba9b62856ce441a846eacf4114506048
Certificate serial:       018964753E9A2055287167A20AAF95A1160C
Authority key identifier: 74:D2:B8:B5:BA:9B:62:85:6C:E4:41:A8:46:EA:CF:41:14:50:60:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNK4tbqbYoVs5EGoRurPQRRQYEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/LBiV656SJdduH8Xgu-lkgXA2NQo.roa
Signing time:             Mon 17 Jul 2023 15:25:52 +0000
ROA not before:           Mon 17 Jul 2023 15:25:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48031
IP address blocks:        93.157.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:75:3e:9a:20:55:28:71:67:a2:0a:af:95:a1:16:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d2b8b5ba9b62856ce441a846eacf4114506048
        Validity
            Not Before: Jul 17 15:25:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c1895eb9e9225d76e1fc5e0bbe964817036350a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:a9:dd:03:a6:cd:e2:19:2b:19:0a:bb:5c:
                    84:ac:82:d1:20:fe:53:f2:27:0e:57:af:2e:a0:6a:
                    3a:f0:89:66:f9:4a:cd:b3:95:50:d3:58:6c:e4:00:
                    0f:a2:22:a2:32:de:25:18:9e:0b:7e:cc:bd:f5:12:
                    19:1c:ec:5d:a9:0f:31:11:92:a7:82:90:43:a6:c0:
                    b7:52:f3:cd:b2:b0:84:46:8b:a7:f4:d1:22:f0:ab:
                    6f:f3:a9:55:fb:65:0e:96:05:fe:99:36:d4:93:84:
                    fa:e7:b9:16:42:a2:6b:a1:9a:6f:8f:fb:23:1f:41:
                    9a:8f:6b:b2:d3:05:9d:8f:2c:76:40:79:ae:40:59:
                    60:d2:e7:17:b8:d3:70:f5:be:7c:bd:4d:55:30:2a:
                    61:ae:b5:9b:02:9e:c8:19:5d:47:23:17:28:26:c3:
                    db:1f:4f:b5:bb:2e:5e:ec:91:46:69:d5:4a:43:f1:
                    e2:e3:f2:80:27:b6:d5:be:e8:ba:aa:2c:a9:a8:5c:
                    fb:79:66:b6:ee:f0:70:b4:31:c6:ef:e9:30:ee:51:
                    4a:8a:d3:cc:dd:f0:4a:19:2f:4b:00:84:9d:a3:93:
                    d3:a5:c6:24:ed:df:99:ad:59:1d:fd:41:3e:ae:70:
                    0e:2f:77:f3:dc:4e:33:40:05:45:2a:21:c7:88:d3:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:18:95:EB:9E:92:25:D7:6E:1F:C5:E0:BB:E9:64:81:70:36:35:0A
            X509v3 Authority Key Identifier:
                keyid:74:D2:B8:B5:BA:9B:62:85:6C:E4:41:A8:46:EA:CF:41:14:50:60:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNK4tbqbYoVs5EGoRurPQRRQYEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/LBiV656SJdduH8Xgu-lkgXA2NQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/dNK4tbqbYoVs5EGoRurPQRRQYEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:58:80:1c:f8:22:af:76:ac:45:56:f8:ad:4e:8e:07:29:
         0b:49:33:9f:da:4f:04:11:80:57:cf:ff:16:c9:cc:eb:67:50:
         07:c5:b8:dd:ce:2d:69:c6:5b:2c:70:8e:cb:01:c6:45:bf:54:
         97:59:a6:42:84:c1:6f:59:e9:9e:3e:74:52:a5:86:dc:e3:55:
         4c:19:51:3f:28:4a:54:0b:64:73:2f:92:13:b4:96:2f:0e:00:
         31:33:3b:77:8b:2a:a7:fc:26:b1:77:57:2c:9d:7b:6a:91:9c:
         a6:8f:78:92:4a:24:fc:6e:ca:40:eb:ba:0d:a7:0a:75:d4:96:
         bd:d0:58:6c:a1:9b:c2:ab:4e:13:e8:dd:f1:2e:0f:5f:83:51:
         c0:da:56:5b:f4:1a:74:ce:51:3d:c9:2b:16:bc:d8:ba:0b:4a:
         c0:93:1f:b2:7c:47:a5:b3:f3:51:60:73:ff:8b:85:45:b4:37:
         c4:0a:c6:fa:be:bf:a0:ec:1c:cd:e4:ef:d1:cf:ee:6e:c1:b5:
         75:4c:8b:1b:5d:b0:32:df:1c:a5:46:40:3a:25:4e:7a:5a:57:
         87:f3:a3:bf:8c:42:9b:3d:52:07:2b:d5:df:55:32:d7:47:aa:
         ed:fc:2d:e5:4c:d2:27:35:b0:7a:03:2c:66:22:c1:f3:c8:a9:
         ba:a3:a7:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkdT6aIFUocWeiCq+VoRYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDJiOGI1YmE5YjYyODU2Y2U0NDFhODQ2ZWFjZjQxMTQ1
MDYwNDgwHhcNMjMwNzE3MTUyNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzE4OTVlYjllOTIyNWQ3NmUxZmM1ZTBiYmU5NjQ4MTcwMzYzNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAup3QOmzeIZKxkKu1yErILRIP5T
8icOV68uoGo68Ilm+UrNs5VQ01hs5AAPoiKiMt4lGJ4Lfsy99RIZHOxdqQ8xEZKn
gpBDpsC3UvPNsrCERoun9NEi8Ktv86lV+2UOlgX+mTbUk4T657kWQqJroZpvj/sj
H0Gaj2uy0wWdjyx2QHmuQFlg0ucXuNNw9b58vU1VMCphrrWbAp7IGV1HIxcoJsPb
H0+1uy5e7JFGadVKQ/Hi4/KAJ7bVvui6qiypqFz7eWa27vBwtDHG7+kw7lFKitPM
3fBKGS9LAISdo5PTpcYk7d+ZrVkd/UE+rnAOL3fz3E4zQAVFKiHHiNOLtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwYleuekiXXbh/F4LvpZIFwNjUKMB8GA1UdIwQY
MBaAFHTSuLW6m2KFbORBqEbqz0EUUGBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5LNHRicWJZb1ZzNUVHb1J1clBRUlJRWUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iM2VlNTgtYTlkOS00YjQxLWIxNmUt
NmU2NWQ4MjkwMGE4LzEvTEJpVjY1NlNKZGR1SDhYZ3UtbGtnWEEyTlFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iM2VlNTgtYTlkOS00YjQxLWIxNmUtNmU2NWQ4MjkwMGE4
LzEvZE5LNHRicWJZb1ZzNUVHb1J1clBRUlJRWUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ1oMA0G
CSqGSIb3DQEBCwUAA4IBAQBpXFiAHPgir3asRVb4rU6OBykLSTOf2k8EEYBXz/8W
yczrZ1AHxbjdzi1pxlsscI7LAcZFv1SXWaZChMFvWemePnRSpYbc41VMGVE/KEpU
C2RzL5ITtJYvDgAxMzt3iyqn/Caxd1csnXtqkZymj3iSSiT8bspA67oNpwp11Ja9
0FhsoZvCq04T6N3xLg9fg1HA2lZb9Bp0zlE9ySsWvNi6C0rAkx+yfEels/NRYHP/
i4VFtDfECsb6vr+g7BzN5O/Rz+5uwbV1TIsbXbAy3xylRkA6JU56WleH86O/jEKb
PVIHK9XfVTLXR6rt/C3lTNInNbB6AyxmIsHzyKm6o6eo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:41 2024 by rpki-client on console-ams.rpki-client.org