Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/22-CIx6EUnWUDJaAxnN9T-HJHdw.roa
File:                     22-CIx6EUnWUDJaAxnN9T-HJHdw.roa (raw, json)
Hash identifier:          WARvs3LXTyQoElrK4VblAUtCJ4u+AqtGR8wOrMoXe5w=
Subject key identifier:   DB:6F:82:23:1E:84:52:75:94:0C:96:80:C6:73:7D:4F:E1:C9:1D:DC
Certificate issuer:       /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial:       05604208
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/22-CIx6EUnWUDJaAxnN9T-HJHdw.roa
Signing time:             Fri 24 Jun 2022 14:13:31 +0000
ROA not before:           Fri 24 Jun 2022 14:13:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.139.106.0/24 maxlen: 24
                          45.139.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90194440 (0x5604208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
        Validity
            Not Before: Jun 24 14:13:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=db6f82231e845275940c9680c6737d4fe1c91ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:ad:7e:d0:b7:16:ac:5b:1e:80:21:9a:c1:
                    ce:81:9c:90:df:3b:b3:f8:32:0c:57:28:b2:9e:fd:
                    0c:ad:10:cd:f9:1e:94:b6:6f:95:50:3c:73:98:c0:
                    dd:9b:2f:bd:80:2f:dd:6d:c6:2e:0b:b3:ee:b1:18:
                    28:d4:6c:06:86:78:ad:83:fe:89:90:c7:ce:39:99:
                    07:62:82:89:24:c8:d6:2d:a8:e3:35:3d:72:ce:d8:
                    f2:a5:c8:18:e5:ce:d1:fb:1c:68:6b:05:17:81:69:
                    a6:8a:33:47:4a:36:b4:11:9a:27:74:6e:2e:b9:ca:
                    85:3e:1d:90:11:20:36:10:b8:1c:fd:21:a0:48:c1:
                    9a:66:91:d9:90:b4:b5:f7:a5:19:0c:25:f8:6f:24:
                    75:cc:ab:0e:b7:9f:bd:d2:f9:b1:a9:19:76:c2:06:
                    46:11:c3:25:11:c7:b0:aa:d7:ba:41:b1:ce:f7:36:
                    f0:2b:54:a9:51:fd:c9:aa:5c:77:17:db:68:8d:22:
                    ac:19:9c:93:14:ba:67:d0:31:3c:38:7d:cd:dd:56:
                    0d:b3:1c:0a:9c:70:cd:fd:b2:bd:18:12:55:a4:77:
                    74:9c:2d:62:14:f2:8f:b7:4f:c3:13:a0:f0:3d:5c:
                    3a:2e:78:18:33:c6:fc:2c:d9:ab:ad:13:ce:6b:3b:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:82:23:1E:84:52:75:94:0C:96:80:C6:73:7D:4F:E1:C9:1D:DC
            X509v3 Authority Key Identifier:
                keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/22-CIx6EUnWUDJaAxnN9T-HJHdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:2c:8d:06:d7:d4:58:2b:22:ca:47:71:4f:6e:c1:8a:10:
         d2:4c:e5:9b:5c:61:5f:b1:bd:5f:36:64:0c:b7:f8:ff:f6:fc:
         85:fa:dd:f3:93:72:46:b9:f4:16:12:56:dd:07:cc:2d:a2:43:
         ac:69:4a:6d:d7:2b:88:a6:72:d4:08:5b:a7:87:90:cf:7b:29:
         4e:d1:89:53:7e:a8:21:5b:a9:23:9e:59:cd:8f:05:74:66:19:
         a3:ba:8d:25:f0:35:47:e2:c9:b1:16:e7:26:51:68:d5:45:ef:
         ac:7a:8e:24:40:f6:76:6c:b6:67:64:d9:56:e9:53:e4:02:39:
         bd:96:ec:33:f1:79:9e:fd:ee:35:15:ba:bb:ac:94:af:67:9f:
         f6:57:dd:a5:ba:dc:91:9d:e7:30:82:dc:e9:83:bb:fd:ed:63:
         c5:2c:80:3a:83:58:96:e9:9a:cd:65:4e:61:de:e6:f4:60:1a:
         20:c8:2a:2e:8f:ae:e0:d3:5b:c2:b8:88:9f:1f:ba:e9:09:b8:
         a8:52:d6:c4:a0:62:e4:f8:26:42:f6:4b:3b:a6:9b:e7:b6:b5:
         86:79:f8:06:2d:d1:a4:43:bc:b7:29:60:84:7d:6f:90:05:50:
         21:e7:75:de:fd:37:8f:4d:c5:5f:32:47:30:6e:74:50:91:d3:
         38:af:6f:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBWBCCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NTcyZTI0ZTZiMjA5NzA4MjNmNjBlNTZlZWI1NDdiNmUwODgwNmM0MB4XDTIyMDYy
NDE0MTMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGI2ZjgyMjMxZTg0
NTI3NTk0MGM5NjgwYzY3MzdkNGZlMWM5MWRkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJy0rX7QtxasWx6AIZrBzoGckN87s/gyDFcosp79DK0Qzfke
lLZvlVA8c5jA3ZsvvYAv3W3GLguz7rEYKNRsBoZ4rYP+iZDHzjmZB2KCiSTI1i2o
4zU9cs7Y8qXIGOXO0fscaGsFF4FppoozR0o2tBGaJ3RuLrnKhT4dkBEgNhC4HP0h
oEjBmmaR2ZC0tfelGQwl+G8kdcyrDrefvdL5sakZdsIGRhHDJRHHsKrXukGxzvc2
8CtUqVH9yapcdxfbaI0irBmckxS6Z9AxPDh9zd1WDbMcCpxwzf2yvRgSVaR3dJwt
YhTyj7dPwxOg8D1cOi54GDPG/CzZq60Tzms7YaECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTbb4IjHoRSdZQMloDGc31P4ckd3DAfBgNVHSMEGDAWgBQVcuJOayCXCCP2
DlbutUe24IgGxDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZYTGlUbXNnbHdnajlnNVc3clZIdHVDSUJzUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvMWYwOWFmLWZiNzctNDYzOC05ZmVlLWMyZmU3ZWYxY2JhMy8x
LzIyLUNJeDZFVW5XVURKYUF4bk45VC1ISkhkdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
MWYwOWFmLWZiNzctNDYzOC05ZmVlLWMyZmU3ZWYxY2JhMy8xL0ZYTGlUbXNnbHdn
ajlnNVc3clZIdHVDSUJzUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2LajANBgkqhkiG9w0BAQsFAAOC
AQEAo2AsjQbX1FgrIspHcU9uwYoQ0kzlm1xhX7G9XzZkDLf4//b8hfrd85NyRrn0
FhJW3QfMLaJDrGlKbdcriKZy1Ahbp4eQz3spTtGJU36oIVupI55ZzY8FdGYZo7qN
JfA1R+LJsRbnJlFo1UXvrHqOJED2dmy2Z2TZVulT5AI5vZbsM/F5nv3uNRW6u6yU
r2ef9lfdpbrckZ3nMILc6YO7/e1jxSyAOoNYlumazWVOYd7m9GAaIMgqLo+u4NNb
wriInx+66Qm4qFLWxKBi5PgmQvZLO6ab57a1hnn4Bi3RpEO8tylghH1vkAVQIed1
3v03j03FXzJHMG50UJHTOK9vQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org