Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/__yAU94rYnhNXb3s3v2n8LLw17A.roa
File:                     __yAU94rYnhNXb3s3v2n8LLw17A.roa (raw, json)
Hash identifier:          OpYLZnMcUK5JI5AxWna9V/8y3044gqKCoifw29K0tFs=
Subject key identifier:   FF:FC:80:53:DE:2B:62:78:4D:5D:BD:EC:DE:FD:A7:F0:B2:F0:D7:B0
Certificate issuer:       /CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Certificate serial:       01078E8C
Authority key identifier: 47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/__yAU94rYnhNXb3s3v2n8LLw17A.roa
Signing time:             Mon 07 Mar 2022 17:38:53 +0000
ROA not before:           Mon 07 Mar 2022 17:38:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59253
IP address blocks:        146.19.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17272460 (0x1078e8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
        Validity
            Not Before: Mar  7 17:38:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fffc8053de2b62784d5dbdecdefda7f0b2f0d7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:40:ba:75:01:b2:5e:de:3d:3a:f2:ff:5f:
                    da:78:74:42:83:70:05:ed:0f:e8:83:be:b2:34:8e:
                    b9:bd:ef:b8:65:04:71:8a:30:b3:ea:b3:99:ff:d7:
                    e1:c3:e3:ef:72:de:fe:83:b2:db:2a:ad:cb:2e:3c:
                    8c:84:3a:63:33:fb:4f:24:cc:ce:ab:bf:74:c6:e7:
                    a3:69:2b:71:65:21:d5:df:c5:3e:77:b7:7d:b3:ac:
                    23:5a:b3:48:94:c7:b2:a7:0d:2d:c3:5a:6d:e2:d8:
                    af:79:a5:aa:14:cc:4a:e2:a4:82:1e:83:25:c1:5c:
                    f9:fb:92:0e:c1:20:dc:fa:53:b5:c1:38:48:b4:c5:
                    a5:33:46:12:2f:62:ea:6a:e5:5f:47:b8:f6:67:ff:
                    fa:b1:14:68:5c:19:dd:31:21:00:ed:e7:24:c1:e6:
                    25:7f:3a:e9:64:7b:4c:a9:16:9e:a3:68:22:5b:bb:
                    23:83:2c:d1:f3:20:7b:f5:f0:24:d2:02:24:53:dd:
                    97:53:a3:b3:3b:b4:ea:78:ab:04:3d:ac:d5:ae:52:
                    4d:27:1f:17:92:65:3a:24:9b:89:8d:aa:67:29:4b:
                    55:fe:17:e5:5f:79:10:7e:75:1a:4c:a7:7b:73:a7:
                    52:fc:12:93:fb:69:40:74:f0:90:42:b7:22:02:d4:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:80:53:DE:2B:62:78:4D:5D:BD:EC:DE:FD:A7:F0:B2:F0:D7:B0
            X509v3 Authority Key Identifier:
                keyid:47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/__yAU94rYnhNXb3s3v2n8LLw17A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c5:ae:39:d3:db:70:37:58:2e:34:b1:df:b5:9e:68:db:40:
         d8:ac:8d:2b:a4:eb:18:55:11:4a:46:47:01:b8:5c:1b:8d:50:
         8b:31:0e:ed:ca:c2:09:2a:57:67:c5:df:5d:66:4e:4b:e5:8f:
         c7:74:54:70:2a:84:df:93:ae:4e:5f:2d:95:61:4f:33:58:2c:
         4c:63:13:81:00:c7:fa:d1:e8:9b:2d:1a:31:73:af:5d:74:a9:
         71:24:e6:32:10:6b:03:5f:b1:3d:8f:2a:dd:a5:ba:f1:8c:49:
         5e:2e:a8:4b:6b:ce:89:eb:16:ea:10:b2:ae:50:7f:26:cd:28:
         bb:d6:98:42:10:09:4b:13:00:e2:cb:11:bf:97:87:84:65:05:
         27:e6:d5:a9:5a:68:a6:b3:a5:7f:7d:76:42:f3:72:3a:0b:ac:
         f7:2b:66:96:59:d6:34:83:be:fe:63:73:b8:42:aa:74:a1:bb:
         77:ef:2b:d9:b7:58:ff:60:b6:a4:8a:65:d9:3a:09:4c:c6:11:
         d5:67:74:e4:8e:89:ed:16:a6:52:e6:e4:ca:fd:9c:65:89:27:
         d7:66:7a:c4:10:67:49:53:1b:ca:fd:bc:32:0f:fa:38:2d:94:
         da:a6:47:0e:aa:fa:2b:2f:7d:11:ae:3e:97:37:8f:48:fa:99:
         63:47:6a:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQeOjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NzFhYWIwYTdlZDJkMzdlNTQ3MzUwMTYxNDM0N2E4NTgwZTBlZDViMB4XDTIyMDMw
NzE3Mzg1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZmYzgwNTNkZTJi
NjI3ODRkNWRiZGVjZGVmZGE3ZjBiMmYwZDdiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMhWQLp1AbJe3j068v9f2nh0QoNwBe0P6IO+sjSOub3vuGUE
cYows+qzmf/X4cPj73Le/oOy2yqtyy48jIQ6YzP7TyTMzqu/dMbno2krcWUh1d/F
Pne3fbOsI1qzSJTHsqcNLcNabeLYr3mlqhTMSuKkgh6DJcFc+fuSDsEg3PpTtcE4
SLTFpTNGEi9i6mrlX0e49mf/+rEUaFwZ3TEhAO3nJMHmJX866WR7TKkWnqNoIlu7
I4Ms0fMge/XwJNICJFPdl1Ojszu06nirBD2s1a5STScfF5JlOiSbiY2qZylLVf4X
5V95EH51Gkyne3OnUvwSk/tpQHTwkEK3IgLU5QkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT//IBT3itieE1dveze/afwsvDXsDAfBgNVHSMEGDAWgBRHGqsKftLTflRz
UBYUNHqFgODtWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1J4cXJDbjdTMDM1VWMxQVdGRFI2aFlEZzdWcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvMWU5YzMzLTY5YTMtNGI2NS04YTIzLTUyZDk1MWUxOGVlYi8x
L19feUFVOTRyWW5oTlhiM3MzdjJuOExMdzE3QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
MWU5YzMzLTY5YTMtNGI2NS04YTIzLTUyZDk1MWUxOGVlYi8xL1J4cXJDbjdTMDM1
VWMxQVdGRFI2aFlEZzdWcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITJDANBgkqhkiG9w0BAQsFAAOC
AQEAl8WuOdPbcDdYLjSx37WeaNtA2KyNK6TrGFURSkZHAbhcG41QizEO7crCCSpX
Z8XfXWZOS+WPx3RUcCqE35OuTl8tlWFPM1gsTGMTgQDH+tHomy0aMXOvXXSpcSTm
MhBrA1+xPY8q3aW68YxJXi6oS2vOiesW6hCyrlB/Js0ou9aYQhAJSxMA4ssRv5eH
hGUFJ+bVqVpoprOlf312QvNyOgus9ytmllnWNIO+/mNzuEKqdKG7d+8r2bdY/2C2
pIpl2ToJTMYR1Wd05I6J7RamUubkyv2cZYkn12Z6xBBnSVMbyv28Mg/6OC2U2qZH
Dqr6Ky99Ea4+lzePSPqZY0dqkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org