Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/Az4iOXPDEZS4ax-0_QcgrEiaV8k.roa
File:                     Az4iOXPDEZS4ax-0_QcgrEiaV8k.roa (raw, json)
Hash identifier:          Obvl4IfelzPlPY+6AaoTsmvSYzXFVc1DJMJZIBbrBvo=
Subject key identifier:   03:3E:22:39:73:C3:11:94:B8:6B:1F:B4:FD:07:20:AC:48:9A:57:C9
Certificate issuer:       /CN=452bd94deef72106794399c8b37190c958837a1a
Certificate serial:       02778B27
Authority key identifier: 45:2B:D9:4D:EE:F7:21:06:79:43:99:C8:B3:71:90:C9:58:83:7A:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RSvZTe73IQZ5Q5nIs3GQyViDeho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/Az4iOXPDEZS4ax-0_QcgrEiaV8k.roa
Signing time:             Mon 27 Jun 2022 18:46:31 +0000
ROA not before:           Mon 27 Jun 2022 18:46:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        193.35.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41388839 (0x2778b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452bd94deef72106794399c8b37190c958837a1a
        Validity
            Not Before: Jun 27 18:46:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=033e223973c31194b86b1fb4fd0720ac489a57c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:a0:c0:87:c3:47:7f:c6:48:99:d0:c2:78:
                    c7:f0:73:fb:5c:12:20:fe:7f:87:e6:ee:ed:f1:70:
                    1b:29:13:f3:c4:ce:05:bb:55:7e:90:09:fe:fe:f1:
                    75:f6:29:87:e4:d7:b2:ae:3e:eb:51:56:2c:f5:18:
                    b7:4d:f3:70:82:dc:81:ca:a8:6b:4d:67:f1:ea:f9:
                    ee:08:bb:e4:f2:65:87:68:24:92:08:9e:59:48:8f:
                    c9:ba:28:16:70:58:2c:0c:82:f6:a9:c7:0f:c7:5b:
                    d6:e0:eb:19:34:05:04:41:62:d4:26:e8:5a:3a:3e:
                    69:78:59:4b:1c:b4:f3:c1:c7:32:c1:6f:4e:b2:c4:
                    6b:0f:48:88:80:69:ec:ab:62:7b:69:03:be:0a:02:
                    c1:b0:bf:41:4c:80:64:14:a9:a9:27:3c:e4:b1:98:
                    21:33:67:0b:e6:a5:5c:69:b5:6a:90:eb:8a:df:02:
                    c4:16:07:bf:71:b2:3f:9c:f0:94:f1:54:d5:e3:81:
                    9f:ea:32:62:94:c3:13:6e:8d:a4:6b:7a:c2:33:09:
                    d4:1c:2a:8d:fa:44:c2:c7:77:fe:09:4d:cb:3a:af:
                    c9:8c:a5:23:32:53:28:41:71:a3:bc:1a:b7:42:38:
                    4e:cf:81:81:02:59:3f:44:28:d7:76:80:ab:e3:ef:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3E:22:39:73:C3:11:94:B8:6B:1F:B4:FD:07:20:AC:48:9A:57:C9
            X509v3 Authority Key Identifier:
                keyid:45:2B:D9:4D:EE:F7:21:06:79:43:99:C8:B3:71:90:C9:58:83:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSvZTe73IQZ5Q5nIs3GQyViDeho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/Az4iOXPDEZS4ax-0_QcgrEiaV8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/RSvZTe73IQZ5Q5nIs3GQyViDeho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.35.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:c2:de:51:11:47:94:fb:5e:e7:1c:55:71:e1:33:d6:1a:
         df:e7:3d:d9:c4:63:36:3c:37:40:8f:2a:be:48:6b:bb:a8:e2:
         a5:d3:db:04:d1:24:d1:c3:ba:20:83:ec:7a:b3:be:89:21:9c:
         1e:82:9b:e9:cc:34:23:0e:4d:99:b8:a2:04:21:dc:2e:7d:d9:
         86:20:f1:2a:a9:74:14:25:26:90:79:2c:04:43:b8:f1:b3:33:
         be:80:cf:34:f9:28:84:00:a2:83:17:19:6d:93:45:01:28:32:
         70:b6:78:78:64:2c:dc:61:f9:2a:6c:a7:63:bb:f4:c0:b3:77:
         db:06:74:d5:74:aa:a8:c5:b1:d2:84:d9:e3:01:d0:4a:58:64:
         bc:eb:dc:6b:6f:66:73:47:6b:e5:c3:80:80:d0:6b:21:1c:39:
         7d:31:f5:6d:8e:ff:6d:f1:bc:42:fd:c8:bd:c5:05:5b:3e:ea:
         05:20:c0:53:2a:23:46:e1:80:84:00:71:b7:2b:7a:20:91:a3:
         4b:08:63:7e:72:f6:5f:9f:6a:3b:bd:db:f2:9c:59:c8:11:ed:
         bf:f6:e6:eb:65:3d:38:5d:77:7f:ed:b9:88:11:e0:b1:bb:80:
         3c:1b:c9:0d:5e:2c:1a:b6:19:5b:63:d6:b4:6f:0a:48:09:ce:
         05:1b:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:43 2024 by rpki-client on console-fra.rpki-client.org