Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/fl-x6_fWAWOHOaATwxVOnqW22gA.roa
File:                     fl-x6_fWAWOHOaATwxVOnqW22gA.roa (raw, json)
Hash identifier:          EN5/UaBoYTBYN711Kma2KXmzyHpJcLEpeR0bJEacyfg=
Subject key identifier:   7E:5F:B1:EB:F7:D6:01:63:87:39:A0:13:C3:15:4E:9E:A5:B6:DA:00
Certificate issuer:       /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial:       018B510C847591B05A71DF776C1BFB4DC371
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/fl-x6_fWAWOHOaATwxVOnqW22gA.roa
Signing time:             Sat 21 Oct 2023 07:04:16 +0000
ROA not before:           Sat 21 Oct 2023 07:04:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0b:a4c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:51:0c:84:75:91:b0:5a:71:df:77:6c:1b:fb:4d:c3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Oct 21 07:04:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e5fb1ebf7d601638739a013c3154e9ea5b6da00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:59:8c:85:f7:4c:30:d9:a6:9d:ec:0e:37:
                    80:df:b0:25:3a:fd:72:d4:39:85:f0:c4:cb:35:ce:
                    c9:7d:bc:be:85:27:17:52:49:69:5f:5e:a9:18:cf:
                    a3:7b:2a:c2:4f:d2:d3:a5:df:12:43:2d:b1:91:f4:
                    e6:34:87:5d:38:69:22:a4:7e:a1:50:88:ef:96:a4:
                    c8:d6:c1:71:9b:cd:82:c0:5e:57:9c:f7:7a:2d:03:
                    aa:5c:53:25:7e:38:06:ea:7e:14:0b:de:43:88:c5:
                    eb:55:24:4f:e9:60:c3:f2:6e:ff:9e:63:7e:89:fc:
                    b7:b5:d5:3c:4e:07:06:e3:79:65:2a:db:19:b0:db:
                    54:f1:5f:9a:ec:e2:0f:c4:a3:d4:6f:0e:bd:da:46:
                    c7:c1:3f:85:96:2e:2f:d2:48:a6:67:85:69:46:1f:
                    f6:fc:b4:d2:dd:03:d2:ab:8b:a1:18:ef:23:89:93:
                    94:f5:44:51:d4:9f:67:21:9b:6b:73:a1:34:03:01:
                    28:47:30:19:bc:3c:b9:c4:54:3c:af:13:1c:92:06:
                    6d:33:b0:8e:a3:3c:db:ec:dc:c2:e9:2d:6b:a0:b6:
                    51:83:c8:90:52:f9:0c:34:14:dd:51:86:32:6b:65:
                    f5:45:68:9f:48:92:66:08:4f:8a:8f:6d:9e:22:82:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5F:B1:EB:F7:D6:01:63:87:39:A0:13:C3:15:4E:9E:A5:B6:DA:00
            X509v3 Authority Key Identifier:
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/fl-x6_fWAWOHOaATwxVOnqW22gA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:a4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:0f:05:c1:69:6d:97:c2:4e:cc:9f:41:db:b5:14:f3:ce:
         a1:72:54:c5:c1:43:87:26:ce:71:ba:e9:9b:53:12:a5:73:b3:
         90:fe:91:66:7a:44:2f:7f:c0:37:11:46:20:f3:ae:df:81:35:
         6b:f7:d7:cc:e5:76:97:46:cf:59:f9:7b:00:3b:02:f2:73:00:
         4f:7c:9d:86:06:85:5b:28:fb:ea:71:8d:d8:a2:22:c6:fd:76:
         ec:14:37:71:3d:9d:e8:3d:b7:e0:de:0b:e6:1e:33:1f:a4:e9:
         93:43:01:b2:c2:ac:e2:86:9e:87:d3:fa:15:a5:46:90:82:8b:
         6e:46:1e:d4:85:1f:b9:38:f1:51:35:00:85:ef:92:2b:5e:8a:
         ff:ef:0c:af:cb:6a:76:29:cb:1f:69:6f:4c:34:6d:9c:50:d4:
         69:7e:e5:b0:5b:99:a8:f1:17:86:09:f1:80:b3:b5:45:55:c1:
         f5:94:09:f7:cd:6f:69:e9:4f:65:cc:c9:5f:a0:d9:cb:63:b9:
         c5:8b:90:f2:69:a8:8f:72:b2:01:49:ed:2f:da:a8:38:6a:dc:
         22:c4:4a:60:1c:8a:5b:05:a3:e7:fd:5c:34:5b:48:64:eb:13:
         80:23:39:a1:d1:03:d6:44:0a:86:92:6f:a9:dd:7a:99:76:dc:
         d1:ee:b4:5d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtRDIR1kbBacd93bBv7TcNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTViMWNhMzcyNDI1NWQ2MGEwYTFlZjI5NTcyN2RmMDhl
M2IxNGMwHhcNMjMxMDIxMDcwNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTVmYjFlYmY3ZDYwMTYzODczOWEwMTNjMzE1NGU5ZWE1YjZkYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iVZjIX3TDDZpp3sDjeA37AlOv1y
1DmF8MTLNc7Jfby+hScXUklpX16pGM+jeyrCT9LTpd8SQy2xkfTmNIddOGkipH6h
UIjvlqTI1sFxm82CwF5XnPd6LQOqXFMlfjgG6n4UC95DiMXrVSRP6WDD8m7/nmN+
ify3tdU8TgcG43llKtsZsNtU8V+a7OIPxKPUbw692kbHwT+Fli4v0kimZ4VpRh/2
/LTS3QPSq4uhGO8jiZOU9URR1J9nIZtrc6E0AwEoRzAZvDy5xFQ8rxMckgZtM7CO
ozzb7NzC6S1roLZRg8iQUvkMNBTdUYYya2X1RWifSJJmCE+Kj22eIoIStwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFH5fsev31gFjhzmgE8MVTp6lttoAMB8GA1UdIwQY
MBaAFLxVsco3JCVdYKCh7ylXJ98I47FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgt
Y2JiM2NkOWZlZGZlLzEvZmwteDZfZldBV09IT2FBVHd4Vk9ucVcyMmdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgtY2JiM2NkOWZlZGZl
LzEvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgukwDAN
BgkqhkiG9w0BAQsFAAOCAQEAkOwPBcFpbZfCTsyfQdu1FPPOoXJUxcFDhybOcbrp
m1MSpXOzkP6RZnpEL3/ANxFGIPOu34E1a/fXzOV2l0bPWfl7ADsC8nMAT3ydhgaF
Wyj76nGN2KIixv127BQ3cT2d6D234N4L5h4zH6Tpk0MBssKs4oaeh9P6FaVGkIKL
bkYe1IUfuTjxUTUAhe+SK16K/+8Mr8tqdinLH2lvTDRtnFDUaX7lsFuZqPEXhgnx
gLO1RVXB9ZQJ981vaelPZczJX6DZy2O5xYuQ8mmoj3KyAUntL9qoOGrcIsRKYByK
WwWj5/1cNFtIZOsTgCM5odED1kQKhpJvqd16mXbc0e60XQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org