Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/q6Wij9swy8R2c4gL53IpFKBGS28.roa
File:                     q6Wij9swy8R2c4gL53IpFKBGS28.roa (raw, json)
Hash identifier:          lNKgCqjjyyY4QwJXW3bAOiv/qaEsC3DrHq6INV5LpXU=
Subject key identifier:   AB:A5:A2:8F:DB:30:CB:C4:76:73:88:0B:E7:72:29:14:A0:46:4B:6F
Certificate issuer:       /CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Certificate serial:       01856F79891E5D115ACCA3EAE5A648C9F2B2
Authority key identifier: 50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/q6Wij9swy8R2c4gL53IpFKBGS28.roa
Signing time:             Sun 01 Jan 2023 22:35:13 +0000
ROA not before:           Sun 01 Jan 2023 22:35:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209235
IP address blocks:        146.19.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:89:1e:5d:11:5a:cc:a3:ea:e5:a6:48:c9:f2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
        Validity
            Not Before: Jan  1 22:35:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aba5a28fdb30cbc47673880be7722914a0464b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:f4:eb:a5:69:83:5f:85:65:3c:51:ae:ef:
                    e1:73:eb:52:94:25:80:53:f1:0d:eb:62:d1:ad:1c:
                    f7:6e:ef:87:18:86:9c:92:4f:8a:d1:f3:68:7d:21:
                    de:db:7e:18:b7:b2:ce:a4:4e:d2:aa:d2:18:01:dd:
                    96:9c:b2:4e:92:b8:4b:d5:58:6a:e3:9b:57:9a:2f:
                    27:60:0a:0c:3e:c9:12:cc:0c:25:39:16:b4:8e:c7:
                    64:03:6e:5e:8b:c0:74:94:93:86:ce:c3:c4:db:00:
                    6c:d3:79:fb:a3:cb:29:6c:bb:ac:29:33:cf:a9:6a:
                    61:b7:ef:fe:9b:e0:45:4e:3f:ef:eb:10:35:bf:5b:
                    43:09:cd:6d:ce:86:f7:73:76:da:12:ec:bf:9f:f8:
                    63:81:a8:b4:a6:8c:ac:dd:f4:24:5d:4b:87:98:88:
                    77:bc:47:be:82:9c:55:dc:8a:9d:69:c0:24:7f:d1:
                    da:95:eb:e9:1a:bb:b8:9b:6c:b0:76:28:c1:3f:0a:
                    f1:de:ab:aa:4a:60:65:d4:28:cc:dc:f1:90:5e:66:
                    47:59:14:ac:d5:63:c6:7e:37:00:51:7e:f9:af:2b:
                    aa:66:10:cb:2c:57:aa:3d:da:dd:1c:54:73:13:e1:
                    15:0e:1b:5f:03:8c:4a:f0:4c:fa:10:ba:6e:2e:b6:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A5:A2:8F:DB:30:CB:C4:76:73:88:0B:E7:72:29:14:A0:46:4B:6F
            X509v3 Authority Key Identifier:
                keyid:50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/q6Wij9swy8R2c4gL53IpFKBGS28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:9e:e6:85:86:65:70:1a:b3:6d:b5:1a:2e:69:c0:ab:73:
         48:c0:1a:7d:f5:e6:e8:13:53:89:8a:d8:be:eb:97:b7:9b:0f:
         47:23:11:8e:bc:78:89:55:88:b5:7d:57:a8:af:28:73:e4:a3:
         23:89:94:98:be:31:81:27:2a:51:29:a5:46:c8:b8:95:81:de:
         24:a3:22:68:56:09:3d:ba:43:a8:11:80:67:9d:de:07:60:cd:
         18:6b:69:a4:29:3a:77:0d:25:b1:f0:ff:90:95:46:ca:f8:a2:
         e5:f3:18:d8:ff:f1:83:6d:ff:f5:d8:88:02:54:08:63:69:a9:
         6e:a4:85:0b:05:39:bd:51:85:a3:67:af:62:0f:ba:01:c5:4c:
         14:5f:db:75:0a:6c:1a:ff:2b:8c:9b:50:7d:69:ab:de:3b:e1:
         ac:b1:ee:de:b9:19:b3:de:54:5f:fb:57:16:8d:da:d7:f9:cf:
         f7:17:a0:3a:2d:2b:2e:01:83:be:97:bf:00:85:7e:8d:2d:18:
         47:25:e7:74:02:43:cd:a3:f3:14:1f:76:82:e7:4f:db:e4:2b:
         3d:e2:21:c1:91:80:5d:6f:0c:68:65:c5:a5:35:9e:75:00:77:
         cf:79:2f:16:9b:f9:a0:48:57:5d:d2:82:bf:93:d6:e2:c1:58:
         2e:d8:08:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveYkeXRFazKPq5aZIyfKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTZhMTg2ZjQxZjQ2ZmQxNGRhMDA0MGNjMDc4N2U3NmE5
YWI4NDgwHhcNMjMwMTAxMjIzNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmE1YTI4ZmRiMzBjYmM0NzY3Mzg4MGJlNzcyMjkxNGEwNDY0YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hr066Vpg1+FZTxRru/hc+tSlCWA
U/EN62LRrRz3bu+HGIackk+K0fNofSHe234Yt7LOpE7SqtIYAd2WnLJOkrhL1Vhq
45tXmi8nYAoMPskSzAwlORa0jsdkA25ei8B0lJOGzsPE2wBs03n7o8spbLusKTPP
qWpht+/+m+BFTj/v6xA1v1tDCc1tzob3c3baEuy/n/hjgai0poys3fQkXUuHmIh3
vEe+gpxV3IqdacAkf9HalevpGru4m2ywdijBPwrx3quqSmBl1CjM3PGQXmZHWRSs
1WPGfjcAUX75ryuqZhDLLFeqPdrdHFRzE+EVDhtfA4xK8Ez6ELpuLrZlvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKuloo/bMMvEdnOIC+dyKRSgRktvMB8GA1UdIwQY
MBaAFFBWoYb0H0b9FNoAQMwHh+dqmrhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZhaGh2UWZSdjBVMmdCQXpBZUg1MnFhdUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mZDkzODItMTdkNi00OTQwLTlkN2Yt
YzdkOGEzZDljODhhLzEvcTZXaWo5c3d5OFIyYzRnTDUzSXBGS0JHUzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mZDkzODItMTdkNi00OTQwLTlkN2YtYzdkOGEzZDljODhh
LzEvVUZhaGh2UWZSdjBVMmdCQXpBZUg1MnFhdUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN1MA0G
CSqGSIb3DQEBCwUAA4IBAQB4tp7mhYZlcBqzbbUaLmnAq3NIwBp99eboE1OJiti+
65e3mw9HIxGOvHiJVYi1fVeoryhz5KMjiZSYvjGBJypRKaVGyLiVgd4koyJoVgk9
ukOoEYBnnd4HYM0Ya2mkKTp3DSWx8P+QlUbK+KLl8xjY//GDbf/12IgCVAhjaalu
pIULBTm9UYWjZ69iD7oBxUwUX9t1Cmwa/yuMm1B9aaveO+Gsse7euRmz3lRf+1cW
jdrX+c/3F6A6LSsuAYO+l78AhX6NLRhHJed0AkPNo/MUH3aC50/b5Cs94iHBkYBd
bwxoZcWlNZ51AHfPeS8Wm/mgSFdd0oK/k9biwVgu2Ahz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:41 2024 by rpki-client on console-ams.rpki-client.org