Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/gwEztLatNddBCYYnumdc17JhXSQ.roa
File:                     gwEztLatNddBCYYnumdc17JhXSQ.roa (raw, json)
Hash identifier:          xUJt5D0JXqlqyNzf2mzfcO3CqmveRCay5WZvLQX5OWA=
Subject key identifier:   83:01:33:B4:B6:AD:35:D7:41:09:86:27:BA:67:5C:D7:B2:61:5D:24
Certificate issuer:       /CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
Certificate serial:       01D093B3
Authority key identifier: 04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/gwEztLatNddBCYYnumdc17JhXSQ.roa
Signing time:             Fri 29 Apr 2022 11:23:02 +0000
ROA not before:           Fri 29 Apr 2022 11:23:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212949
IP address blocks:        185.241.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30446515 (0x1d093b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
        Validity
            Not Before: Apr 29 11:23:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=830133b4b6ad35d741098627ba675cd7b2615d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:72:0d:9e:b7:3c:fc:95:af:17:14:63:f0:
                    47:46:50:9d:7d:79:15:ef:b1:9d:ea:f0:83:ff:0a:
                    5e:46:fc:01:74:94:f5:77:d2:44:55:b2:d8:76:9d:
                    17:d3:1a:de:eb:2b:90:3d:dd:fc:a5:79:01:5e:71:
                    dd:5d:43:e2:bb:f0:9c:a6:9b:49:b9:1a:ec:fd:9d:
                    b9:fb:bf:60:32:78:df:1b:18:82:43:0d:e4:95:8d:
                    5c:8c:f2:75:78:4e:29:e2:53:f0:b3:db:61:51:97:
                    3f:d7:4c:72:40:da:74:7e:73:43:a6:8b:48:7a:49:
                    a3:ff:29:8a:48:63:2f:63:7d:83:df:d9:0b:88:72:
                    f1:a0:26:95:a9:13:90:ca:19:8a:d5:85:22:b3:0a:
                    da:f7:d0:98:d1:05:cb:62:5d:d5:35:c4:78:ab:35:
                    91:be:f7:7f:ce:91:99:73:c2:7a:67:93:80:8c:85:
                    12:d5:c4:3c:e3:78:cc:bb:83:e5:47:bd:02:72:0e:
                    d7:eb:ff:07:d4:8c:54:8a:f7:15:b6:44:73:b4:dc:
                    0e:45:24:cf:37:02:70:af:f2:57:5d:8e:de:a6:18:
                    99:7c:92:70:f1:36:80:03:da:e2:02:6e:c4:f6:13:
                    42:32:60:fa:02:ac:bd:41:59:e8:f2:06:cb:85:44:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:33:B4:B6:AD:35:D7:41:09:86:27:BA:67:5C:D7:B2:61:5D:24
            X509v3 Authority Key Identifier:
                keyid:04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/gwEztLatNddBCYYnumdc17JhXSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:a9:30:5f:d0:53:b0:be:20:21:51:4d:a6:74:2e:5c:40:
         49:71:ff:b0:d9:97:73:f1:12:fb:57:14:37:74:1c:24:c6:87:
         7b:d5:19:64:ab:90:bc:ec:fe:b5:cc:da:4e:8e:7d:b5:19:dd:
         31:41:3b:0a:1c:80:ce:2d:e9:c2:61:e6:17:a9:36:6b:97:b4:
         30:ba:ac:fe:1e:34:04:91:63:9c:70:7e:b6:f3:9d:91:ae:f4:
         b5:3c:c5:70:04:08:9b:c2:55:15:84:eb:78:fe:e1:56:6f:3a:
         7d:eb:b2:d1:a5:f4:dc:b6:9d:ec:8b:5f:1a:95:08:bd:89:77:
         4c:2c:fb:0f:f6:a5:89:88:b3:bb:cc:63:3e:a6:51:3a:2a:ce:
         90:c4:66:17:a5:e0:1a:ac:b6:d7:e1:34:af:39:b0:c6:02:2a:
         8a:56:fe:28:a1:66:b3:d2:4c:0a:2c:c3:99:5d:3e:a8:ee:c4:
         16:a7:2e:98:f9:58:ce:31:b0:ab:b9:75:5a:a8:30:5b:05:fc:
         57:cc:58:c9:ad:d0:a0:e2:1b:f9:1b:3d:27:96:17:7c:4e:26:
         b7:f7:2a:a9:b8:bc:61:62:9d:e0:52:34:6a:af:f0:e4:64:51:
         15:09:e7:82:69:4e:6a:b3:7a:af:4f:15:b1:e9:9d:57:ff:af:
         cf:a7:f6:78
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAdCTszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NGQ5ZTViMGY5ZDFhN2ZkZDNlNmJjMTJlODE3ZTY3M2EwOWVhMTkzMB4XDTIyMDQy
OTExMjMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODMwMTMzYjRiNmFk
MzVkNzQxMDk4NjI3YmE2NzVjZDdiMjYxNWQyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKylcg2etzz8la8XFGPwR0ZQnX15Fe+xnerwg/8KXkb8AXSU
9XfSRFWy2HadF9Ma3usrkD3d/KV5AV5x3V1D4rvwnKabSbka7P2dufu/YDJ43xsY
gkMN5JWNXIzydXhOKeJT8LPbYVGXP9dMckDadH5zQ6aLSHpJo/8pikhjL2N9g9/Z
C4hy8aAmlakTkMoZitWFIrMK2vfQmNEFy2Jd1TXEeKs1kb73f86RmXPCemeTgIyF
EtXEPON4zLuD5Ue9AnIO1+v/B9SMVIr3FbZEc7TcDkUkzzcCcK/yV12O3qYYmXyS
cPE2gAPa4gJuxPYTQjJg+gKsvUFZ6PIGy4VEMK0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSDATO0tq0110EJhie6Z1zXsmFdJDAfBgNVHSMEGDAWgBQE2eWw+dGn/dPm
vBLoF+ZzoJ6hkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JObmxzUG5ScF8zVDVyd1M2QmZtYzZDZW9aTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvMDdkZDY3LWU4YzAtNDZiNi04MjljLWU0YzI3ZDJlMjM3Ni8x
L2d3RXp0TGF0TmRkQkNZWW51bWRjMTdKaFhTUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
MDdkZDY3LWU4YzAtNDZiNi04MjljLWU0YzI3ZDJlMjM3Ni8xL0JObmxzUG5ScF8z
VDVyd1M2QmZtYzZDZW9aTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnx9DANBgkqhkiG9w0BAQsFAAOC
AQEAOkypMF/QU7C+ICFRTaZ0LlxASXH/sNmXc/ES+1cUN3QcJMaHe9UZZKuQvOz+
tczaTo59tRndMUE7ChyAzi3pwmHmF6k2a5e0MLqs/h40BJFjnHB+tvOdka70tTzF
cAQIm8JVFYTreP7hVm86feuy0aX03Lad7ItfGpUIvYl3TCz7D/aliYizu8xjPqZR
OirOkMRmF6XgGqy21+E0rzmwxgIqilb+KKFms9JMCizDmV0+qO7EFqcumPlYzjGw
q7l1WqgwWwX8V8xYya3QoOIb+Rs9J5YXfE4mt/cqqbi8YWKd4FI0aq/w5GRRFQnn
gmlOarN6r08VsemdV/+vz6f2eA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org