Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oDYvt3dhW44n13K8PCL_H2GigSc.roa
File:                     oDYvt3dhW44n13K8PCL_H2GigSc.roa (raw, json)
Hash identifier:          x+MYo66W1+lygzyqMOpEhHpOcQz1p89mZEkiRt8j7eU=
Subject key identifier:   A0:36:2F:B7:77:61:5B:8E:27:D7:72:BC:3C:22:FF:1F:61:A2:81:27
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       01848AD44E8D0915598B8C67076AE714906B
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oDYvt3dhW44n13K8PCL_H2GigSc.roa
Signing time:             Fri 18 Nov 2022 13:01:20 +0000
ROA not before:           Fri 18 Nov 2022 13:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212298
IP address blocks:        141.11.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8a:d4:4e:8d:09:15:59:8b:8c:67:07:6a:e7:14:90:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Nov 18 13:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0362fb777615b8e27d772bc3c22ff1f61a28127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:ba:83:ae:22:36:44:6a:08:57:77:e7:3f:
                    f7:53:37:0b:05:3e:ca:ff:7b:1c:5f:fb:9b:2c:61:
                    0c:d5:cf:bf:e0:88:94:a9:1a:e4:01:31:ce:99:b0:
                    96:e8:ca:ca:6b:c2:ba:8f:28:06:a7:25:3b:0d:d9:
                    9d:b8:86:3a:d1:d6:27:4d:54:70:af:ca:58:7e:d3:
                    3b:e5:bb:e4:94:b9:77:14:66:74:4c:1e:d8:36:78:
                    35:09:9f:00:44:d5:25:66:bc:4b:9b:3f:9d:e3:6c:
                    44:d0:74:62:1a:cf:61:51:52:70:41:4e:90:07:fb:
                    da:fe:39:3b:bb:59:f1:35:08:e0:e4:9c:4c:7c:c1:
                    b9:2e:ef:5e:59:ea:8d:ba:c7:cd:53:ec:69:0c:e5:
                    82:22:1c:ca:fb:96:f6:3b:d4:4c:6a:b4:4e:d1:01:
                    a9:00:79:5b:2c:05:e7:d2:b1:e4:f2:80:48:79:13:
                    5b:a2:9d:68:22:d1:df:a9:77:fd:92:5b:a5:10:e9:
                    48:eb:79:ee:f5:08:e5:81:24:fa:07:d3:48:53:66:
                    fa:45:59:a9:c0:2c:5f:7e:27:7b:74:e6:da:86:48:
                    d4:dd:79:18:78:be:d8:3a:64:73:88:10:39:34:67:
                    f9:81:4a:98:99:7a:a3:d5:21:8a:c0:bb:e1:b2:a3:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:36:2F:B7:77:61:5B:8E:27:D7:72:BC:3C:22:FF:1F:61:A2:81:27
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/oDYvt3dhW44n13K8PCL_H2GigSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:43:22:88:36:49:a6:67:6b:9b:c4:71:cc:3b:e0:b7:66:7c:
         6c:67:dc:7f:b8:34:df:2f:80:ad:93:8b:fa:ec:f8:21:b3:ff:
         43:68:2e:f7:49:46:fa:fe:93:82:e7:13:8d:0f:00:06:46:49:
         e6:f3:da:77:4d:d7:4c:e5:bd:0a:a1:c7:c0:b2:67:ef:78:11:
         29:15:ad:b4:17:02:95:cb:7c:0b:7e:ec:4d:d3:75:68:bf:64:
         36:5f:5e:90:f8:e6:75:7f:35:6e:88:b5:c5:89:27:0c:d2:e7:
         0f:82:c5:d3:27:33:13:23:62:05:13:ad:26:44:94:92:30:21:
         d8:81:41:bf:e7:36:f6:94:df:a6:4a:3a:28:b1:02:29:8c:99:
         06:b3:2f:b6:ef:4e:b5:72:3d:21:b8:d1:d7:3f:b2:00:00:87:
         25:9c:ec:3c:9b:9f:00:df:2b:51:c4:9e:2d:10:e8:fa:21:d0:
         b5:f2:ee:74:a4:7b:07:30:1b:82:47:64:72:84:8d:3b:32:c9:
         b4:af:3c:89:89:3b:74:db:0b:80:e2:6d:9b:ab:45:ea:0d:23:
         78:5b:98:dc:96:fb:a7:35:a3:b7:59:4d:98:8a:7a:b0:16:91:
         73:49:89:9a:ca:e7:36:56:16:15:45:44:d6:8f:da:59:da:28:
         4e:5e:d9:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSK1E6NCRVZi4xnB2rnFJBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMTE4MTMwMTIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDM2MmZiNzc3NjE1YjhlMjdkNzcyYmMzYzIyZmYxZjYxYTI4MTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRy6g64iNkRqCFd35z/3UzcLBT7K
/3scX/ubLGEM1c+/4IiUqRrkATHOmbCW6MrKa8K6jygGpyU7DdmduIY60dYnTVRw
r8pYftM75bvklLl3FGZ0TB7YNng1CZ8ARNUlZrxLmz+d42xE0HRiGs9hUVJwQU6Q
B/va/jk7u1nxNQjg5JxMfMG5Lu9eWeqNusfNU+xpDOWCIhzK+5b2O9RMarRO0QGp
AHlbLAXn0rHk8oBIeRNbop1oItHfqXf9klulEOlI63nu9QjlgST6B9NIU2b6RVmp
wCxffid7dObahkjU3XkYeL7YOmRziBA5NGf5gUqYmXqj1SGKwLvhsqNYuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKA2L7d3YVuOJ9dyvDwi/x9hooEnMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvb0RZdnQzZGhXNDRuMTNLOFBDTF9IMkdpZ1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsjMA0G
CSqGSIb3DQEBCwUAA4IBAQAfQyKINkmmZ2ubxHHMO+C3ZnxsZ9x/uDTfL4Ctk4v6
7Pghs/9DaC73SUb6/pOC5xONDwAGRknm89p3TddM5b0KocfAsmfveBEpFa20FwKV
y3wLfuxN03Vov2Q2X16Q+OZ1fzVuiLXFiScM0ucPgsXTJzMTI2IFE60mRJSSMCHY
gUG/5zb2lN+mSjoosQIpjJkGsy+27061cj0huNHXP7IAAIclnOw8m58A3ytRxJ4t
EOj6IdC18u50pHsHMBuCR2RyhI07Msm0rzyJiTt02wuA4m2bq0XqDSN4W5jclvun
NaO3WU2YinqwFpFzSYmayuc2VhYVRUTWj9pZ2ihOXtlq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org