Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uWr-AIYGP0d5WH-XMmQMmfPzlc0.roa
File:                     uWr-AIYGP0d5WH-XMmQMmfPzlc0.roa (raw, json)
Hash identifier:          dcF+ruNlPEJ1MTR7HYgxb+SMOTFtL9ppLUrE96E5Loc=
Subject key identifier:   B9:6A:FE:00:86:06:3F:47:79:58:7F:97:32:64:0C:99:F3:F3:95:CD
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04126484
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uWr-AIYGP0d5WH-XMmQMmfPzlc0.roa
Signing time:             Thu 21 Apr 2022 17:22:22 +0000
ROA not before:           Thu 21 Apr 2022 17:22:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205684
IP address blocks:        141.11.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68314244 (0x4126484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 21 17:22:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b96afe0086063f4779587f9732640c99f3f395cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:c8:17:98:ba:2a:79:ba:c9:86:d9:b5:e4:
                    25:3f:2b:31:d1:4a:04:58:a0:0e:a8:dd:3b:bd:6b:
                    24:22:8a:92:d4:af:9b:62:62:69:55:99:27:c7:2f:
                    ce:b5:49:12:da:f6:1e:40:d2:d7:23:03:6a:19:ae:
                    0e:fc:27:96:01:bc:4f:d4:30:5e:56:6e:4d:2e:71:
                    b3:45:6b:e5:a1:f8:7c:dc:e5:aa:38:cb:74:30:31:
                    b6:6b:c5:c6:09:e5:27:d5:57:e1:cd:b6:e2:15:b6:
                    46:34:fd:69:89:4a:d7:98:86:6c:ce:b9:fa:04:88:
                    86:06:bc:0f:0d:97:5c:52:06:3f:6a:19:7f:5a:29:
                    bc:ff:32:f0:ee:b5:43:92:da:70:dc:c0:49:fa:bf:
                    65:38:3d:ab:5a:65:d6:1e:6f:d1:20:ff:3e:09:0b:
                    c4:17:9c:a7:38:14:6a:51:bf:1b:32:6b:09:21:f6:
                    0b:21:22:3c:7e:75:7f:c5:ff:43:ff:e9:f3:ee:50:
                    a8:d0:db:52:42:f0:60:2e:30:49:0f:c2:a0:98:57:
                    f1:8f:18:a5:84:6e:0c:59:32:9e:96:ff:65:f1:8d:
                    80:cd:34:35:0a:4e:d0:97:a4:3d:74:fa:47:55:b3:
                    3c:d4:1a:c2:f2:4d:df:d9:03:1b:9c:79:f2:fc:a3:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6A:FE:00:86:06:3F:47:79:58:7F:97:32:64:0C:99:F3:F3:95:CD
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/uWr-AIYGP0d5WH-XMmQMmfPzlc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:dd:41:8d:38:d9:79:e9:55:24:1e:8b:0a:e9:fd:91:ff:
         69:b8:91:dc:13:b8:0d:59:ae:3a:85:d2:42:40:f5:f5:24:10:
         95:96:1d:4f:c6:f9:11:b7:73:ef:3f:c9:24:c4:7c:b2:3a:69:
         9f:66:2f:b9:69:b7:f4:79:2e:25:f3:ba:85:37:cd:b1:ac:2b:
         f6:e1:c4:95:2a:5b:a0:a5:8a:23:c3:bc:58:f6:61:26:c6:7b:
         ea:77:b9:3d:06:0d:a4:19:ba:61:cd:18:26:1b:1e:a7:01:ff:
         6d:a7:9e:5c:61:9d:e2:d4:d5:c7:2a:ae:e1:4b:a2:b6:c1:dc:
         65:32:c1:73:e4:88:8e:4a:61:63:8e:2b:f3:57:f0:37:29:80:
         41:1b:89:c3:6a:01:03:17:78:7e:01:38:01:eb:28:2f:41:67:
         82:39:3d:64:09:93:9e:39:be:dd:f8:4d:39:44:96:39:4c:c7:
         dd:17:68:04:a6:2e:4f:82:bb:fa:1a:8e:42:a6:95:5e:9d:91:
         bb:51:21:4f:2c:c6:91:06:86:ca:07:86:3a:e9:72:b2:67:63:
         4c:cf:59:9a:dd:f6:d9:3e:4d:a6:3a:77:a0:3a:47:a0:9c:19:
         a1:1f:fb:8a:93:78:b0:58:ec:4b:2f:d7:20:51:74:d3:ce:b0:
         ed:ad:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:54 2024 by rpki-client on console-fra.rpki-client.org