Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/UyU0PNViCLO8UjdnAsblTv3cgmY.roa
File:                     UyU0PNViCLO8UjdnAsblTv3cgmY.roa (raw, json)
Hash identifier:          Ey8K1zoznO2yjLGRyQkIbLhsx/R3zmVqU0AH9p5J4ls=
Subject key identifier:   53:25:34:3C:D5:62:08:B3:BC:52:37:67:02:C6:E5:4E:FD:DC:82:66
Certificate issuer:       /CN=c4e9b1784a2d3decd168b4aee668d8ffc4f51d3c
Certificate serial:       01821CFE495CF3779A96A2EC2C5C876C1859
Authority key identifier: C4:E9:B1:78:4A:2D:3D:EC:D1:68:B4:AE:E6:68:D8:FF:C4:F5:1D:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOmxeEotPezRaLSu5mjY_8T1HTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/UyU0PNViCLO8UjdnAsblTv3cgmY.roa
Signing time:             Wed 20 Jul 2022 19:03:23 +0000
ROA not before:           Wed 20 Jul 2022 19:03:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     996
IP address blocks:        80.71.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1c:fe:49:5c:f3:77:9a:96:a2:ec:2c:5c:87:6c:18:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4e9b1784a2d3decd168b4aee668d8ffc4f51d3c
        Validity
            Not Before: Jul 20 19:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5325343cd56208b3bc52376702c6e54efddc8266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:08:c8:18:29:a8:90:60:f4:90:47:bb:46:
                    57:a0:b2:3c:bd:79:63:b6:a7:a0:b8:10:05:e7:14:
                    04:fe:95:20:6c:11:9a:c5:56:11:63:4e:3a:ca:6a:
                    a3:a0:be:d3:12:23:33:48:b8:50:4e:d1:66:ce:a0:
                    fd:8d:d4:95:e4:a5:3f:9d:a8:b6:26:8c:dc:29:90:
                    d7:a4:c9:30:64:55:0e:3f:8d:83:cc:2c:01:5e:9f:
                    cf:0e:84:d2:0d:88:7c:22:e1:8e:bb:6f:82:6b:a3:
                    d5:64:0a:2b:38:4d:1e:3c:0c:40:ca:bf:12:87:c5:
                    ab:42:d6:46:1d:9f:1f:0b:00:63:5e:fc:2b:2e:0d:
                    9b:44:af:a9:f8:dd:36:b2:57:cc:6d:c8:9e:4c:12:
                    ec:57:99:75:a9:a0:25:a1:fb:1b:d3:74:76:e7:98:
                    10:f3:5c:bb:55:95:6e:77:78:88:f6:21:62:e6:8f:
                    5d:1b:f4:bd:6e:cb:a3:90:d9:44:f6:33:33:b2:bb:
                    fa:a6:8b:69:a4:65:15:b1:e2:44:31:a2:41:c1:06:
                    b8:3e:fa:bf:3a:4f:75:ad:01:ab:19:10:40:49:44:
                    4d:7c:0e:11:29:06:be:1b:a2:49:80:da:9d:93:0f:
                    e1:b7:ca:1a:43:6b:7c:4b:26:93:58:db:75:b8:16:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:34:3C:D5:62:08:B3:BC:52:37:67:02:C6:E5:4E:FD:DC:82:66
            X509v3 Authority Key Identifier:
                keyid:C4:E9:B1:78:4A:2D:3D:EC:D1:68:B4:AE:E6:68:D8:FF:C4:F5:1D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOmxeEotPezRaLSu5mjY_8T1HTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/UyU0PNViCLO8UjdnAsblTv3cgmY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/xOmxeEotPezRaLSu5mjY_8T1HTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:0b:aa:80:68:48:79:8f:10:c1:ea:67:f5:69:49:14:18:ca:
         58:72:4c:e7:55:0e:75:fb:7d:3d:63:a2:ae:59:ad:57:8c:01:
         14:22:75:9f:af:01:23:ba:6e:b7:cb:a9:1c:b1:dd:2e:bc:5b:
         5b:89:0b:71:91:a4:d5:83:5e:07:20:63:28:67:20:f2:b8:02:
         a3:47:a4:d5:b3:55:19:d0:07:68:5a:4d:86:8b:80:13:8c:19:
         50:0f:26:43:3a:50:db:1d:3d:34:7a:36:1c:83:6f:8d:fa:2b:
         25:33:24:b4:5d:12:4f:84:91:ad:22:0b:6e:e7:a7:f5:f7:d6:
         e3:f1:8b:3d:e7:67:b0:b3:7f:ac:80:73:65:6d:ef:e9:2e:fd:
         91:b4:44:d2:67:1a:2a:f3:82:62:6d:3e:c1:d3:35:e1:df:0c:
         8d:27:ee:56:35:dd:67:76:ae:38:ed:8a:93:29:f5:6e:17:f5:
         dd:19:99:2d:d5:8c:d3:82:1d:48:e7:cb:1a:8d:bf:67:83:3b:
         54:23:6e:79:55:d5:bb:f9:b9:cd:4a:75:4d:2f:06:d0:a0:56:
         68:c5:57:7b:25:14:ee:0a:5f:62:c7:c8:df:b3:19:1c:e2:be:
         2c:e3:58:53:19:7d:d9:aa:95:16:3a:46:ea:59:dd:b3:c3:d3:
         21:06:8a:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIc/klc83ealqLsLFyHbBhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTliMTc4NGEyZDNkZWNkMTY4YjRhZWU2NjhkOGZmYzRm
NTFkM2MwHhcNMjIwNzIwMTkwMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzI1MzQzY2Q1NjIwOGIzYmM1MjM3NjcwMmM2ZTU0ZWZkZGM4MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9cIyBgpqJBg9JBHu0ZXoLI8vXlj
tqeguBAF5xQE/pUgbBGaxVYRY046ymqjoL7TEiMzSLhQTtFmzqD9jdSV5KU/nai2
JozcKZDXpMkwZFUOP42DzCwBXp/PDoTSDYh8IuGOu2+Ca6PVZAorOE0ePAxAyr8S
h8WrQtZGHZ8fCwBjXvwrLg2bRK+p+N02slfMbcieTBLsV5l1qaAlofsb03R255gQ
81y7VZVud3iI9iFi5o9dG/S9bsujkNlE9jMzsrv6potppGUVseJEMaJBwQa4Pvq/
Ok91rQGrGRBASURNfA4RKQa+G6JJgNqdkw/ht8oaQ2t8SyaTWNt1uBYcBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMlNDzVYgizvFI3ZwLG5U793IJmMB8GA1UdIwQY
MBaAFMTpsXhKLT3s0Wi0ruZo2P/E9R08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9teGVFb3RQZXpSYUxTdTVtallfOFQxSFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lZmRkM2UtMDdlNC00MjU0LWEwZjQt
ZDEwZjk0MDIyOGY0LzEvVXlVMFBOVmlDTE84VWpkbkFzYmxUdjNjZ21ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lZmRkM2UtMDdlNC00MjU0LWEwZjQtZDEwZjk0MDIyOGY0
LzEveE9teGVFb3RQZXpSYUxTdTVtallfOFQxSFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEeaMA0G
CSqGSIb3DQEBCwUAA4IBAQDPC6qAaEh5jxDB6mf1aUkUGMpYckznVQ51+309Y6Ku
Wa1XjAEUInWfrwEjum63y6kcsd0uvFtbiQtxkaTVg14HIGMoZyDyuAKjR6TVs1UZ
0AdoWk2Gi4ATjBlQDyZDOlDbHT00ejYcg2+N+islMyS0XRJPhJGtIgtu56f199bj
8Ys952ews3+sgHNlbe/pLv2RtETSZxoq84JibT7B0zXh3wyNJ+5WNd1ndq447YqT
KfVuF/XdGZkt1YzTgh1I58sajb9ngztUI255VdW7+bnNSnVNLwbQoFZoxVd7JRTu
Cl9ix8jfsxkc4r4s41hTGX3ZqpUWOkbqWd2zw9MhBoq3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:15 2024 by rpki-client on console-ams.rpki-client.org