Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/_qjc89Gvscwl1V0ZppYH__jzc6I.roa
File:                     _qjc89Gvscwl1V0ZppYH__jzc6I.roa (raw, json)
Hash identifier:          lt9Cjd9TbjIHm9T5futo+4VAKgrefGifoF+R1HS2RyI=
Subject key identifier:   FE:A8:DC:F3:D1:AF:B1:CC:25:D5:5D:19:A6:96:07:FF:F8:F3:73:A2
Certificate issuer:       /CN=73afc75778e90802d1d2db2872533d19099f13fc
Certificate serial:       4EBFFC
Authority key identifier: 73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/_qjc89Gvscwl1V0ZppYH__jzc6I.roa
Signing time:             Sat 01 Jan 2022 00:51:01 +0000
ROA not before:           Sat 01 Jan 2022 00:51:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44592
IP address blocks:        146.19.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5160956 (0x4ebffc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73afc75778e90802d1d2db2872533d19099f13fc
        Validity
            Not Before: Jan  1 00:51:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fea8dcf3d1afb1cc25d55d19a69607fff8f373a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:e0:61:01:f3:6a:90:cf:52:d9:25:bc:fa:
                    5c:43:34:ad:d9:68:0f:72:ac:85:39:ed:6c:e5:6b:
                    ef:e7:25:bf:af:31:6e:42:f9:62:32:75:e0:2d:52:
                    c6:39:02:e4:3d:ec:60:4d:38:20:c3:f5:6f:5e:86:
                    1e:23:c2:dd:06:c2:df:ef:ac:77:c5:cd:0c:00:c8:
                    33:fc:b0:7c:b9:c3:fb:c4:90:5b:57:f8:d5:3e:c6:
                    97:f3:8e:5a:bf:36:90:43:d8:61:76:51:44:f9:7b:
                    1e:a7:c7:74:c4:40:b9:2c:19:85:31:ab:1f:29:e3:
                    23:ae:ff:1a:3b:a1:31:44:4e:19:b0:b5:9f:df:cb:
                    85:09:4d:a4:b2:60:c7:b9:b6:4e:8c:7f:ce:a0:27:
                    05:24:18:5c:56:ea:96:35:e6:4e:9e:3f:f1:ce:05:
                    50:76:fc:87:00:94:f3:40:c9:f4:91:90:fb:d7:1f:
                    00:c8:a5:32:cf:15:42:7a:94:a6:46:18:81:0d:fc:
                    b6:97:b5:e3:9b:8d:af:9d:47:b5:8e:c4:3b:40:0c:
                    39:ac:db:ed:50:97:c9:e9:83:bc:66:28:1d:20:ce:
                    70:dd:1a:1e:0e:e0:f5:7f:de:2d:b5:6f:0e:cd:fc:
                    f1:e0:c1:e5:b7:b7:43:ab:d2:0b:8a:1f:55:88:7e:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:DC:F3:D1:AF:B1:CC:25:D5:5D:19:A6:96:07:FF:F8:F3:73:A2
            X509v3 Authority Key Identifier:
                keyid:73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/_qjc89Gvscwl1V0ZppYH__jzc6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:04:8e:71:8d:d2:0d:a0:67:38:1b:2a:78:29:8f:6a:18:6a:
         3e:cb:44:a1:73:e3:90:20:dd:3b:fb:af:20:4d:af:b3:e7:45:
         85:bc:09:73:36:9a:fd:bb:7e:d6:ce:03:71:60:e7:d5:b0:25:
         70:29:94:13:0a:e4:1e:6f:2c:0d:70:91:e2:eb:54:7f:c2:69:
         02:b6:44:e1:70:ab:2a:68:bf:f0:ca:be:ef:ae:60:45:0b:56:
         8a:d1:69:a4:64:6a:a5:89:23:d7:01:01:3f:5e:f1:39:ed:ee:
         f8:14:97:2f:dc:62:27:4c:6d:e1:3e:da:3c:aa:bc:a0:49:bc:
         4d:ee:e9:30:10:27:fc:76:e7:57:a9:c1:bf:59:bc:f0:ec:87:
         d1:3c:43:4e:3d:65:77:e9:aa:5e:65:54:01:bc:fb:e8:71:a6:
         28:44:62:e4:12:08:2a:a2:9a:ad:cb:30:68:27:e1:14:db:4e:
         e3:07:f3:70:23:43:f1:2b:26:0c:6d:d0:f2:64:1d:37:74:c8:
         08:ef:3b:ce:ca:f2:29:d5:d5:87:bb:5d:94:4b:fb:75:ff:83:
         dd:36:ae:27:31:14:de:ac:d9:58:01:81:bb:9f:eb:c4:ee:28:
         c4:f4:27:c4:1b:25:f8:2e:df:55:42:ea:8b:d8:ee:90:63:a6:
         3e:4c:ad:ad
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDTr/8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcz
YWZjNzU3NzhlOTA4MDJkMWQyZGIyODcyNTMzZDE5MDk5ZjEzZmMwHhcNMjIwMTAx
MDA1MTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmZWE4ZGNmM2QxYWZi
MWNjMjVkNTVkMTlhNjk2MDdmZmY4ZjM3M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqRzgYQHzapDPUtklvPpcQzSt2WgPcqyFOe1s5Wvv5yW/rzFu
QvliMnXgLVLGOQLkPexgTTggw/VvXoYeI8LdBsLf76x3xc0MAMgz/LB8ucP7xJBb
V/jVPsaX845avzaQQ9hhdlFE+Xsep8d0xEC5LBmFMasfKeMjrv8aO6ExRE4ZsLWf
38uFCU2ksmDHubZOjH/OoCcFJBhcVuqWNeZOnj/xzgVQdvyHAJTzQMn0kZD71x8A
yKUyzxVCepSmRhiBDfy2l7Xjm42vnUe1jsQ7QAw5rNvtUJfJ6YO8ZigdIM5w3Roe
DuD1f94ttW8Ozfzx4MHlt7dDq9ILih9ViH4DlQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFP6o3PPRr7HMJdVdGaaWB//483OiMB8GA1UdIwQYMBaAFHOvx1d46QgC0dLb
KHJTPRkJnxP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YzZfSFYzanBDQUxSMHRzb2NsTTlHUW1mRV93LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNS82MjBjZTEtODVhNS00MzQ5LWEzMjYtODVlNWQ1NDAyNGVmLzEv
X3FqYzg5R3ZzY3dsMVYwWnBwWUhfX2p6YzZJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82
MjBjZTEtODVhNS00MzQ5LWEzMjYtODVlNWQ1NDAyNGVmLzEvYzZfSFYzanBDQUxS
MHRzb2NsTTlHUW1mRV93LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOpMA0GCSqGSIb3DQEBCwUAA4IB
AQAJBI5xjdINoGc4Gyp4KY9qGGo+y0Shc+OQIN07+68gTa+z50WFvAlzNpr9u37W
zgNxYOfVsCVwKZQTCuQebywNcJHi61R/wmkCtkThcKsqaL/wyr7vrmBFC1aK0Wmk
ZGqliSPXAQE/XvE57e74FJcv3GInTG3hPto8qrygSbxN7ukwECf8dudXqcG/Wbzw
7IfRPENOPWV36apeZVQBvPvocaYoRGLkEggqopqtyzBoJ+EU207jB/NwI0PxKyYM
bdDyZB03dMgI7zvOyvIp1dWHu12US/t1/4PdNq4nMRTerNlYAYG7n+vE7ijE9CfE
GyX4Lt9VQuqL2O6QY6Y+TK2t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:48 2024 by rpki-client on console-fra.rpki-client.org