Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/Fncu3SRfTINf1rzFqSvCHY5CdSA.roa
File:                     Fncu3SRfTINf1rzFqSvCHY5CdSA.roa (raw, json)
Hash identifier:          wdzPCBLU5pDpEj6cacPRYwXIRg6V6pfGac0mabWbLio=
Subject key identifier:   16:77:2E:DD:24:5F:4C:83:5F:D6:BC:C5:A9:2B:C2:1D:8E:42:75:20
Certificate issuer:       /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial:       01849E7B10115925155FA44775E0713B0923
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/Fncu3SRfTINf1rzFqSvCHY5CdSA.roa
Signing time:             Tue 22 Nov 2022 08:36:15 +0000
ROA not before:           Tue 22 Nov 2022 08:36:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202044
IP address blocks:        2a10:3e80::/30 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:9e:7b:10:11:59:25:15:5f:a4:47:75:e0:71:3b:09:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Nov 22 08:36:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16772edd245f4c835fd6bcc5a92bc21d8e427520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9b:a0:97:b9:29:df:9e:12:28:e4:b9:ab:78:
                    58:7d:84:28:61:79:3f:b6:46:b6:cd:09:a5:13:b5:
                    e7:3a:f7:4b:c3:9c:b3:81:b1:ea:f7:1b:29:6e:55:
                    cc:3b:49:da:8e:f1:ae:a1:80:96:3c:26:d2:bd:ed:
                    22:04:38:78:32:53:a6:ec:3f:87:34:03:8e:44:b2:
                    ce:7e:31:c3:5b:f2:08:56:91:61:fc:01:f5:e1:48:
                    0a:11:74:3b:d9:67:51:a8:ce:88:bb:34:e8:0f:b9:
                    dc:43:3c:f0:b9:11:92:5e:ab:c2:45:f0:4b:76:4a:
                    7c:a7:9d:0a:c3:96:c3:be:2f:c5:65:93:a0:98:ed:
                    8e:c4:da:b9:2a:03:aa:21:45:cc:cf:b7:80:d8:2b:
                    77:67:12:60:f4:74:e5:3c:77:8d:13:97:24:36:da:
                    d0:03:51:15:ac:ea:0b:db:85:d1:2e:2e:0c:d2:e8:
                    97:59:e8:c6:ab:62:78:a5:6a:c4:52:28:5c:10:f2:
                    2f:20:74:ea:77:f1:fe:ce:d5:a3:9c:81:82:75:01:
                    78:4d:85:56:fa:2b:27:11:d4:fa:86:f4:39:23:93:
                    73:7e:46:c7:0b:24:08:34:5b:b2:56:97:a5:2d:d8:
                    63:23:5e:69:7c:cf:53:98:9c:9d:ef:9d:d3:47:46:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:77:2E:DD:24:5F:4C:83:5F:D6:BC:C5:A9:2B:C2:1D:8E:42:75:20
            X509v3 Authority Key Identifier:
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/Fncu3SRfTINf1rzFqSvCHY5CdSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:3e80::/30

    Signature Algorithm: sha256WithRSAEncryption
         32:df:f0:25:e9:c4:cb:f6:93:a5:90:39:aa:b1:f9:4f:4f:75:
         dd:ec:8c:3d:08:5b:eb:a0:89:a3:20:77:eb:49:14:fd:2b:fa:
         77:c0:e1:80:4d:aa:02:f3:c0:e7:89:b4:21:96:f9:59:b1:ea:
         51:38:66:82:be:34:e0:b5:75:88:9a:6b:e4:a7:f1:6c:ce:34:
         8b:d6:61:b5:c3:29:60:07:b9:ba:b1:1a:eb:0a:2e:a0:a6:f9:
         ee:0a:b8:ce:7c:f6:3d:33:c2:a7:73:62:20:68:40:17:57:71:
         a9:8f:cf:78:60:85:76:e7:2a:f5:33:e4:50:d5:52:cd:64:97:
         dc:2d:28:ae:3e:fd:db:1b:0d:aa:5a:f6:8e:6b:83:48:06:18:
         42:d3:07:14:44:39:c0:49:5f:92:ed:a1:2e:99:8f:76:5e:07:
         bd:0e:f8:3f:79:a2:29:1a:18:d0:aa:08:dd:5f:d2:3e:64:75:
         f3:1f:37:eb:67:22:b9:74:ca:dd:84:b4:5a:71:37:3d:15:8d:
         e6:c0:95:1b:d2:db:2b:0f:db:80:b3:b0:17:f8:2d:71:6c:a4:
         eb:f5:a3:21:4c:b3:7c:2d:e3:3b:6a:86:c6:4c:83:fb:1c:bc:
         7e:fd:a7:71:73:74:c6:1c:78:d9:90:e9:a4:9c:53:8d:41:41:
         3e:9d:6c:1d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYSeexARWSUVX6RHdeBxOwkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTViMWNhMzcyNDI1NWQ2MGEwYTFlZjI5NTcyN2RmMDhl
M2IxNGMwHhcNMjIxMTIyMDgzNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjc3MmVkZDI0NWY0YzgzNWZkNmJjYzVhOTJiYzIxZDhlNDI3NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJugl7kp354SKOS5q3hYfYQoYXk/
tka2zQmlE7XnOvdLw5yzgbHq9xspblXMO0najvGuoYCWPCbSve0iBDh4MlOm7D+H
NAOORLLOfjHDW/IIVpFh/AH14UgKEXQ72WdRqM6IuzToD7ncQzzwuRGSXqvCRfBL
dkp8p50Kw5bDvi/FZZOgmO2OxNq5KgOqIUXMz7eA2Ct3ZxJg9HTlPHeNE5ckNtrQ
A1EVrOoL24XRLi4M0uiXWejGq2J4pWrEUihcEPIvIHTqd/H+ztWjnIGCdQF4TYVW
+isnEdT6hvQ5I5NzfkbHCyQINFuyVpelLdhjI15pfM9TmJyd753TR0ZEqQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBZ3Lt0kX0yDX9a8xakrwh2OQnUgMB8GA1UdIwQY
MBaAFLxVsco3JCVdYKCh7ylXJ98I47FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgt
Y2JiM2NkOWZlZGZlLzEvRm5jdTNTUmZUSU5mMXJ6RnFTdkNIWTVDZFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgtY2JiM2NkOWZlZGZl
LzEvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKhA+gDAN
BgkqhkiG9w0BAQsFAAOCAQEAMt/wJenEy/aTpZA5qrH5T0913eyMPQhb66CJoyB3
60kU/Sv6d8DhgE2qAvPA54m0IZb5WbHqUThmgr404LV1iJpr5KfxbM40i9ZhtcMp
YAe5urEa6wouoKb57gq4znz2PTPCp3NiIGhAF1dxqY/PeGCFducq9TPkUNVSzWSX
3C0orj792xsNqlr2jmuDSAYYQtMHFEQ5wElfku2hLpmPdl4HvQ74P3miKRoY0KoI
3V/SPmR18x8362ciuXTK3YS0WnE3PRWN5sCVG9LbKw/bgLOwF/gtcWyk6/WjIUyz
fC3jO2qGxkyD+xy8fv2ncXN0xhx42ZDppJxTjUFBPp1sHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org