Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/gsNNpqj5unqgs3nXJnL_DHwaZzE.roa
File:                     gsNNpqj5unqgs3nXJnL_DHwaZzE.roa (raw, json)
Hash identifier:          XtIeskV3O1zbGDkcnjlFriM9AyHOeJXAY8JaAm0vw6s=
Subject key identifier:   82:C3:4D:A6:A8:F9:BA:7A:A0:B3:79:D7:26:72:FF:0C:7C:1A:67:31
Certificate issuer:       /CN=93b0bf0da13843d61bc0a82fd1e4e2eec4c05bb4
Certificate serial:       5F8303
Authority key identifier: 93:B0:BF:0D:A1:38:43:D6:1B:C0:A8:2F:D1:E4:E2:EE:C4:C0:5B:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7C_DaE4Q9YbwKgv0eTi7sTAW7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/gsNNpqj5unqgs3nXJnL_DHwaZzE.roa
Signing time:             Sat 01 Jan 2022 00:58:38 +0000
ROA not before:           Sat 01 Jan 2022 00:58:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210512
IP address blocks:        193.3.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6259459 (0x5f8303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b0bf0da13843d61bc0a82fd1e4e2eec4c05bb4
        Validity
            Not Before: Jan  1 00:58:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82c34da6a8f9ba7aa0b379d72672ff0c7c1a6731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:6a:f2:9e:3e:51:2c:28:3c:cc:1b:77:42:
                    07:d8:fd:8c:08:ad:c3:7b:62:83:fc:54:19:89:1d:
                    91:f0:67:25:bc:06:f8:db:90:b2:41:6d:84:b9:4a:
                    d6:43:e2:02:1f:44:78:a2:93:b3:7a:e4:6d:eb:1c:
                    1e:1d:49:0e:cd:33:b0:bf:c9:e3:e3:dd:a0:f0:f4:
                    1d:2f:0d:8e:7a:e3:b8:28:3a:0d:b1:b5:2a:b4:4f:
                    c3:3f:64:8b:9a:e6:02:f8:da:f2:b2:a7:ba:4c:67:
                    4a:23:92:10:9c:d4:10:4d:8f:4d:bb:f4:9a:7d:b9:
                    1c:24:d7:b4:c3:a1:1e:89:5b:ba:18:91:03:3a:d2:
                    cd:ee:29:46:89:a2:d0:dc:98:e5:de:89:e3:01:27:
                    20:34:dd:0b:29:99:ca:33:ce:be:fb:6f:5e:b6:19:
                    e7:fa:f5:c1:55:af:d3:87:dc:66:3d:33:28:58:d3:
                    34:91:d4:44:97:da:2e:64:d6:7b:5a:3e:83:c1:51:
                    0a:03:1b:b6:9d:74:d5:ea:88:2e:eb:f8:f2:2c:6c:
                    9d:b3:e5:db:c4:56:0b:96:ef:74:b0:4f:d1:f7:78:
                    df:06:4e:41:67:9f:7a:5c:9f:e3:f1:52:1b:56:5c:
                    8a:33:bb:35:60:08:43:92:d5:db:12:2c:6c:0c:43:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:4D:A6:A8:F9:BA:7A:A0:B3:79:D7:26:72:FF:0C:7C:1A:67:31
            X509v3 Authority Key Identifier:
                keyid:93:B0:BF:0D:A1:38:43:D6:1B:C0:A8:2F:D1:E4:E2:EE:C4:C0:5B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7C_DaE4Q9YbwKgv0eTi7sTAW7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/gsNNpqj5unqgs3nXJnL_DHwaZzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9163a3-c3fc-4053-95e1-cff52866ea36/1/k7C_DaE4Q9YbwKgv0eTi7sTAW7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:9e:fa:16:7a:37:84:93:e2:54:b5:eb:40:20:85:9f:78:cd:
         6a:1b:5b:5d:ea:a2:f1:3d:f6:57:ee:4c:0f:b6:19:65:d7:32:
         bd:3a:9d:1e:05:f9:8c:64:88:ff:b8:5c:97:a7:18:e6:f3:ff:
         eb:ba:d6:a7:30:40:c0:ba:26:49:3a:67:01:b6:59:d9:27:98:
         06:05:fa:ea:5d:3c:23:1a:ff:7c:d2:77:ed:8a:f2:52:40:62:
         b5:d3:9f:c7:ac:e3:11:70:7e:05:fb:32:5b:2a:d3:28:20:e8:
         e8:fb:c9:0b:37:34:ed:a9:67:7d:22:ae:84:c0:69:bc:b2:78:
         57:04:fb:19:a3:4a:42:06:5a:a5:6e:88:2f:e0:a8:5e:b0:76:
         26:e4:1d:0b:f3:5c:28:bd:a6:d6:7e:2a:14:89:c0:ea:34:bd:
         ef:74:0a:7c:a3:bd:69:c3:e7:c9:dc:ba:76:8f:68:a0:0f:4a:
         c6:3a:c7:be:12:5b:c7:46:a3:4d:67:20:03:fa:ee:21:3c:b4:
         5c:d1:01:6e:e6:9d:b6:1a:d8:33:84:b7:70:3e:23:54:b3:65:
         c6:e7:29:94:71:58:1c:64:e9:3d:b5:c5:b9:fc:cb:7b:68:83:
         5e:8a:f0:43:74:b4:a0:41:a0:67:32:55:a6:9d:36:88:3e:f0:
         8d:94:2e:cd
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDX4MDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkz
YjBiZjBkYTEzODQzZDYxYmMwYTgyZmQxZTRlMmVlYzRjMDViYjQwHhcNMjIwMTAx
MDA1ODM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MmMzNGRhNmE4Zjli
YTdhYTBiMzc5ZDcyNjcyZmYwYzdjMWE2NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtAJq8p4+USwoPMwbd0IH2P2MCK3De2KD/FQZiR2R8GclvAb4
25CyQW2EuUrWQ+ICH0R4opOzeuRt6xweHUkOzTOwv8nj492g8PQdLw2OeuO4KDoN
sbUqtE/DP2SLmuYC+Nrysqe6TGdKI5IQnNQQTY9Nu/SafbkcJNe0w6EeiVu6GJED
OtLN7ilGiaLQ3Jjl3onjAScgNN0LKZnKM86++29ethnn+vXBVa/Th9xmPTMoWNM0
kdREl9ouZNZ7Wj6DwVEKAxu2nXTV6ogu6/jyLGyds+XbxFYLlu90sE/R93jfBk5B
Z596XJ/j8VIbVlyKM7s1YAhDktXbEixsDEMf3wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFILDTaao+bp6oLN51yZy/wx8GmcxMB8GA1UdIwQYMBaAFJOwvw2hOEPWG8Co
L9Hk4u7EwFu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
azdDX0RhRTRROVlid0tndjBlVGk3c1RBVzdRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jNy85MTYzYTMtYzNmYy00MDUzLTk1ZTEtY2ZmNTI4NjZlYTM2LzEv
Z3NOTnBxajV1bnFnczNuWEpuTF9ESHdhWnpFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85
MTYzYTMtYzNmYy00MDUzLTk1ZTEtY2ZmNTI4NjZlYTM2LzEvazdDX0RhRTRROVli
d0tndjBlVGk3c1RBVzdRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQOxMA0GCSqGSIb3DQEBCwUAA4IB
AQB8nvoWejeEk+JUtetAIIWfeM1qG1td6qLxPfZX7kwPthll1zK9Op0eBfmMZIj/
uFyXpxjm8//rutanMEDAuiZJOmcBtlnZJ5gGBfrqXTwjGv980nftivJSQGK105/H
rOMRcH4F+zJbKtMoIOjo+8kLNzTtqWd9Iq6EwGm8snhXBPsZo0pCBlqlbogv4Khe
sHYm5B0L81wovabWfioUicDqNL3vdAp8o71pw+fJ3Lp2j2igD0rGOse+ElvHRqNN
ZyAD+u4hPLRc0QFu5p22GtgzhLdwPiNUs2XG5ymUcVgcZOk9tcW5/Mt7aINeivBD
dLSgQaBnMlWmnTaIPvCNlC7N
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:23 2024 by rpki-client on console-fra.rpki-client.org