Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vuU_3LNRWKglxEybmQxoESplc1U.roa
File:                     vuU_3LNRWKglxEybmQxoESplc1U.roa (raw, json)
Hash identifier:          HcsOrVAAcx6FGBEAOuJ5by1KYwL09Ai7Uada6lEQSiI=
Subject key identifier:   BE:E5:3F:DC:B3:51:58:A8:25:C4:4C:9B:99:0C:68:11:2A:65:73:55
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04C35B5A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vuU_3LNRWKglxEybmQxoESplc1U.roa
Signing time:             Fri 20 May 2022 14:03:30 +0000
ROA not before:           Fri 20 May 2022 14:03:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        141.11.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79911770 (0x4c35b5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 20 14:03:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bee53fdcb35158a825c44c9b990c68112a657355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:51:e4:09:ed:a0:ad:8a:c4:e2:ac:b0:98:
                    f1:79:1f:a0:fe:03:ca:3e:b5:1f:24:bc:18:69:66:
                    44:9d:96:23:82:54:19:06:23:9c:d9:48:92:ca:df:
                    ae:50:4f:2c:f7:b6:87:1e:b3:3d:80:34:e5:08:2b:
                    13:6f:e3:83:ce:26:c9:82:69:e7:a0:45:ba:57:03:
                    a3:96:8e:d4:8e:91:63:74:c8:2b:9e:9d:7e:93:9d:
                    bc:62:da:dd:1b:cc:fe:82:64:b8:0a:2a:9a:3d:29:
                    4a:fe:ec:7d:9b:e2:a4:81:93:31:fd:ef:e1:c2:7c:
                    9d:90:d8:43:11:2f:80:60:36:e8:57:eb:53:1d:cc:
                    bb:7a:d9:be:19:eb:23:13:df:42:36:7a:43:0a:d0:
                    9d:80:03:4f:04:41:2e:18:1c:c8:4e:e6:e3:47:5a:
                    e9:5b:68:34:6a:d0:d2:88:09:ef:c3:35:89:c0:b2:
                    f1:e6:ea:46:8f:bc:1c:9c:62:7f:c3:5d:67:0e:3a:
                    e1:af:7b:6d:23:77:00:20:47:8d:40:18:9f:72:2e:
                    9f:d0:8b:a3:1a:8c:90:88:72:d7:3a:3b:53:4b:88:
                    2b:b0:99:31:c6:68:16:f9:bf:87:5a:05:f3:1b:1d:
                    a4:78:e0:15:5a:92:47:b2:66:38:c1:59:29:50:8a:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E5:3F:DC:B3:51:58:A8:25:C4:4C:9B:99:0C:68:11:2A:65:73:55
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/vuU_3LNRWKglxEybmQxoESplc1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:b5:14:73:bd:a6:c8:ab:91:da:a9:00:2c:51:79:55:c3:69:
         11:5a:36:b6:d3:14:50:f2:60:97:a5:a0:26:fc:1f:bb:01:83:
         74:15:46:1f:6e:20:64:9d:26:1a:35:c3:30:b6:c6:7c:8c:7b:
         02:63:74:c6:0a:96:4c:a9:af:cf:75:40:b9:4b:c3:23:0f:cf:
         cb:f3:0b:9d:91:12:a5:75:ca:c6:b2:2d:d6:91:59:40:27:08:
         87:a4:e9:5c:45:c3:d7:c5:dc:25:9c:b3:f4:83:03:5f:02:3e:
         17:a2:9c:10:f7:73:f8:10:69:55:ee:d1:aa:71:24:db:52:51:
         db:ae:31:07:de:54:cb:3f:ae:ad:92:f2:42:ca:4b:57:f8:f0:
         5f:cc:07:ef:6c:34:af:20:d1:95:67:43:d2:36:56:91:2f:5f:
         e8:c6:a3:14:42:f8:87:21:d7:ea:91:a3:a4:53:0f:4b:89:ef:
         3a:ab:ac:cd:3f:9a:d0:9f:d7:45:cf:f5:30:ac:bb:1e:06:d7:
         08:7e:49:1b:40:83:08:27:bb:90:4b:79:49:29:55:ff:00:1d:
         6c:42:12:19:cb:de:c0:b1:67:65:03:e4:17:0a:44:7a:5b:9f:
         35:50:0d:6a:31:f2:2a:bf:a9:c5:a9:8c:e4:b1:d8:2d:d2:05:
         17:d5:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:34 2024 by rpki-client on console-ams.rpki-client.org