Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/t4gt_RV__DbpRIF_dhdsakjcoJ4.roa
File:                     t4gt_RV__DbpRIF_dhdsakjcoJ4.roa (raw, json)
Hash identifier:          oeq0Vs490dxWhLsIke7wv7Y+R8lzYl9FPeoC3GHzRIQ=
Subject key identifier:   B7:88:2D:FD:15:7F:FC:36:E9:44:81:7F:76:17:6C:6A:48:DC:A0:9E
Certificate issuer:       /CN=b092deb02be4c37814b000e6681894c261a7cfd0
Certificate serial:       01856EEFCFBED466A374DA1258CFC5466360
Authority key identifier: B0:92:DE:B0:2B:E4:C3:78:14:B0:00:E6:68:18:94:C2:61:A7:CF:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJLesCvkw3gUsADmaBiUwmGnz9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/t4gt_RV__DbpRIF_dhdsakjcoJ4.roa
Signing time:             Sun 01 Jan 2023 20:04:48 +0000
ROA not before:           Sun 01 Jan 2023 20:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     996
IP address blocks:        80.71.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:cf:be:d4:66:a3:74:da:12:58:cf:c5:46:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092deb02be4c37814b000e6681894c261a7cfd0
        Validity
            Not Before: Jan  1 20:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7882dfd157ffc36e944817f76176c6a48dca09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:81:a0:06:b0:ac:c3:c3:6a:dc:21:c9:3d:
                    46:38:3f:f7:fc:c6:c3:a4:b1:b1:c0:03:0d:84:b0:
                    0e:56:0e:84:b7:fb:98:37:0b:5e:28:35:0c:5f:42:
                    eb:63:1e:64:95:11:b6:02:70:34:61:ec:bf:8f:b5:
                    65:aa:c9:51:bc:57:3f:9e:6a:0b:ed:2a:63:ab:e0:
                    ef:4f:90:f3:c6:87:f9:1a:ee:e9:0a:a2:cd:5e:72:
                    06:c3:1b:6a:27:36:b7:af:b9:51:e4:12:f2:36:0f:
                    04:5b:a5:87:f6:fb:ca:99:eb:76:c4:85:8f:ee:57:
                    92:22:79:e0:27:e4:de:77:2f:a0:d8:9f:5f:4f:20:
                    8d:b3:02:d5:b9:31:71:50:fc:95:7a:a6:ab:27:8b:
                    3e:06:e9:db:64:5d:18:ee:48:50:24:db:59:d7:a0:
                    7f:ee:8a:79:9b:4a:c1:f7:e2:5a:75:79:30:8f:31:
                    a6:ac:64:19:3e:55:2f:cd:49:b0:40:65:14:53:33:
                    03:5f:22:84:c0:64:92:b1:9c:4f:39:3e:c0:f0:87:
                    9c:74:eb:49:07:41:9a:42:5a:55:7c:b8:8e:39:23:
                    9c:9d:ef:15:1b:6d:28:a9:de:bb:bc:1f:6d:ec:57:
                    f7:5d:09:1b:f9:ba:36:4e:0e:5f:16:33:9a:d5:56:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:2D:FD:15:7F:FC:36:E9:44:81:7F:76:17:6C:6A:48:DC:A0:9E
            X509v3 Authority Key Identifier:
                keyid:B0:92:DE:B0:2B:E4:C3:78:14:B0:00:E6:68:18:94:C2:61:A7:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLesCvkw3gUsADmaBiUwmGnz9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/t4gt_RV__DbpRIF_dhdsakjcoJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/sJLesCvkw3gUsADmaBiUwmGnz9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:a1:b2:bd:c6:0e:43:44:de:b2:c1:40:85:84:10:6d:ce:
         2c:c7:e4:9c:c4:19:4d:7e:e8:a4:ac:8b:54:93:32:63:26:91:
         f8:97:7f:56:68:0a:e7:88:f8:8b:96:6d:20:e9:6e:48:c5:50:
         ed:87:ec:46:eb:78:ca:d8:d4:19:69:d0:12:5f:22:23:91:cc:
         d7:fd:d9:ac:3a:b6:f3:72:1e:81:8c:b5:62:a1:16:96:bc:8b:
         7e:b3:d7:7d:c5:00:7b:e9:48:26:7b:f9:af:94:c4:e5:8b:5a:
         47:d3:e8:d7:09:19:47:fa:16:de:77:0c:d6:f4:53:56:3d:f2:
         18:40:5f:71:03:d1:60:a4:81:ba:a8:31:df:c0:28:a8:f6:24:
         83:b1:a6:d6:88:9d:90:94:60:b9:3d:fd:39:0e:fd:77:b2:e2:
         8a:26:ae:b3:51:f0:63:bc:f2:e4:b0:f8:07:03:55:92:63:fc:
         3f:50:56:4b:c3:43:5f:f1:ca:0d:a3:20:a8:ff:f0:e2:c6:96:
         62:7b:be:78:d9:fd:4b:82:42:f9:7a:26:53:be:b0:4d:64:d3:
         cc:27:08:74:0b:e7:36:00:ef:82:e3:99:9d:da:00:52:0c:49:
         71:22:74:a1:10:c5:ad:b0:2e:bd:46:0b:dc:98:4f:64:4a:41:
         23:de:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:56 2024 by rpki-client on console-ams.rpki-client.org