Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/QsuRCljwrELVA3e-QSPdfDWIcs4.roa
File:                     QsuRCljwrELVA3e-QSPdfDWIcs4.roa (raw, json)
Hash identifier:          IMO9zy/lLVIBmO/phdXNH+AWGVTPArTjpYBPJ0idJFk=
Subject key identifier:   42:CB:91:0A:58:F0:AC:42:D5:03:77:BE:41:23:DD:7C:35:88:72:CE
Certificate issuer:       /CN=ac89582220b58417a3a9459f55c5b947cc357c25
Certificate serial:       32E26B6E
Authority key identifier: AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/QsuRCljwrELVA3e-QSPdfDWIcs4.roa
Signing time:             Sat 01 Jan 2022 13:58:45 +0000
ROA not before:           Sat 01 Jan 2022 13:58:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198903
IP address blocks:        80.243.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853699438 (0x32e26b6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89582220b58417a3a9459f55c5b947cc357c25
        Validity
            Not Before: Jan  1 13:58:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=42cb910a58f0ac42d50377be4123dd7c358872ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:e7:c8:23:cb:3f:d4:e8:4f:70:5d:af:45:
                    9c:d8:74:75:d5:0f:a2:68:aa:7d:fb:d9:6e:fb:1e:
                    2d:5d:07:6c:15:0f:6f:22:58:e3:ba:7d:54:39:9a:
                    be:04:a2:83:f1:7f:f8:06:24:ac:59:bd:92:49:a2:
                    68:88:f6:11:14:2c:6f:42:26:4f:7f:29:f6:3f:6f:
                    55:38:6d:b8:4f:ca:cb:f6:f2:bf:a1:ec:13:28:b7:
                    07:ad:87:7a:4f:0a:84:a8:81:78:76:85:c5:d0:5b:
                    85:07:35:82:71:ae:20:6c:41:f6:56:32:ed:c3:dc:
                    78:80:4e:4e:90:75:a7:ac:b5:bd:94:fb:f8:51:df:
                    ea:27:cc:ce:80:9b:9b:de:d7:97:8c:e6:3e:ca:fb:
                    89:26:42:73:3a:1d:b0:07:67:63:d8:ec:ca:d7:c3:
                    07:fb:e3:d2:62:57:d8:c3:2f:30:0f:64:24:1e:fa:
                    e5:9b:18:c7:6c:ff:24:60:bc:a3:60:3e:dc:eb:5a:
                    10:01:d6:11:17:80:ef:ff:d1:c5:86:84:ec:22:42:
                    8c:59:be:f6:24:af:de:79:4a:dc:b2:74:de:4e:81:
                    df:2f:17:8d:d1:37:f0:76:20:95:8d:ce:33:c0:38:
                    bb:88:c6:19:45:e5:3d:73:84:d2:db:01:bb:2e:50:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CB:91:0A:58:F0:AC:42:D5:03:77:BE:41:23:DD:7C:35:88:72:CE
            X509v3 Authority Key Identifier:
                keyid:AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/QsuRCljwrELVA3e-QSPdfDWIcs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.243.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:89:5f:8c:0c:73:00:28:42:56:b8:56:67:0e:ea:6a:50:64:
         ac:d1:9f:25:07:b9:94:f1:d3:74:6a:cd:5c:3f:04:c8:68:e4:
         2f:36:ed:79:1c:e5:d0:2d:a5:ea:00:20:50:79:e2:41:75:3b:
         33:46:b1:70:f2:b9:b9:a8:f0:2e:34:ad:c3:9d:bc:16:4e:68:
         71:6d:b0:63:49:f4:98:7e:c3:29:ae:9c:ad:06:2a:3d:90:49:
         5d:50:e0:ad:c9:85:ad:f0:98:95:5b:c8:33:f2:4b:18:da:ee:
         5d:7f:f3:2f:78:67:e9:ab:55:4d:ff:1d:a1:97:82:2a:1e:b9:
         85:7b:16:a0:e5:50:f1:3b:a0:36:95:78:26:0b:04:3f:2d:32:
         15:cf:e0:59:2f:fa:45:06:df:7f:12:2e:70:74:cb:2a:52:2e:
         73:3b:7f:15:e7:ae:9e:03:03:45:16:ea:56:aa:3e:f8:5f:02:
         39:d2:d7:db:61:3c:73:d8:82:b9:21:25:14:d1:6e:30:12:2d:
         fc:5b:87:5e:05:dd:e7:40:a9:61:e1:38:28:e6:e9:19:f8:33:
         7b:df:b3:ec:ac:ed:45:48:bd:73:1e:88:01:68:b7:f0:ed:8e:
         86:26:d2:71:e9:d4:8a:af:12:20:33:b6:37:df:f1:fd:6c:7c:
         75:5b:8e:04
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMuJrbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Yzg5NTgyMjIwYjU4NDE3YTNhOTQ1OWY1NWM1Yjk0N2NjMzU3YzI1MB4XDTIyMDEw
MTEzNTg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDJjYjkxMGE1OGYw
YWM0MmQ1MDM3N2JlNDEyM2RkN2MzNTg4NzJjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANYs58gjyz/U6E9wXa9FnNh0ddUPomiqffvZbvseLV0HbBUP
byJY47p9VDmavgSig/F/+AYkrFm9kkmiaIj2ERQsb0ImT38p9j9vVThtuE/Ky/by
v6HsEyi3B62Hek8KhKiBeHaFxdBbhQc1gnGuIGxB9lYy7cPceIBOTpB1p6y1vZT7
+FHf6ifMzoCbm97Xl4zmPsr7iSZCczodsAdnY9jsytfDB/vj0mJX2MMvMA9kJB76
5ZsYx2z/JGC8o2A+3OtaEAHWEReA7//RxYaE7CJCjFm+9iSv3nlK3LJ03k6B3y8X
jdE38HYglY3OM8A4u4jGGUXlPXOE0tsBuy5QIpMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRCy5EKWPCsQtUDd75BI918NYhyzjAfBgNVHSMEGDAWgBSsiVgiILWEF6Op
RZ9VxblHzDV8JTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JJbFlJaUMxaEJlanFVV2ZWY1c1Ujh3MWZDVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWUvYmFiNDg5LThhNGUtNDYwMi04NGI0LWExMzY4ZWVjYjgyYi8x
L1FzdVJDbGp3ckVMVkEzZS1RU1BkZkRXSWNzNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUv
YmFiNDg5LThhNGUtNDYwMi04NGI0LWExMzY4ZWVjYjgyYi8xL3JJbFlJaUMxaEJl
anFVV2ZWY1c1Ujh3MWZDVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFDzeTANBgkqhkiG9w0BAQsFAAOC
AQEAcolfjAxzAChCVrhWZw7qalBkrNGfJQe5lPHTdGrNXD8EyGjkLzbteRzl0C2l
6gAgUHniQXU7M0axcPK5uajwLjStw528Fk5ocW2wY0n0mH7DKa6crQYqPZBJXVDg
rcmFrfCYlVvIM/JLGNruXX/zL3hn6atVTf8doZeCKh65hXsWoOVQ8TugNpV4JgsE
Py0yFc/gWS/6RQbffxIucHTLKlIuczt/FeeungMDRRbqVqo++F8COdLX22E8c9iC
uSElFNFuMBIt/FuHXgXd50CpYeE4KObpGfgze9+z7KztRUi9cx6IAWi38O2OhibS
cenUiq8SIDO2N9/x/Wx8dVuOBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:24 2024 by rpki-client on console-ams.rpki-client.org