Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/TV0TVotE1gXUhJNh6L19G3l913c.roa
File:                     TV0TVotE1gXUhJNh6L19G3l913c.roa (raw, json)
Hash identifier:          b1dpuQIU5Xt0jSwS2xU6S5kEF80n3Z4/bXF0MZQZUng=
Subject key identifier:   4D:5D:13:56:8B:44:D6:05:D4:84:93:61:E8:BD:7D:1B:79:7D:D7:77
Certificate issuer:       /CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Certificate serial:       01832B8ED21B3B9CC60F93B2F1810B9CD493
Authority key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/TV0TVotE1gXUhJNh6L19G3l913c.roa
Signing time:             Sun 11 Sep 2022 07:58:43 +0000
ROA not before:           Sun 11 Sep 2022 07:58:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        188.227.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2b:8e:d2:1b:3b:9c:c6:0f:93:b2:f1:81:0b:9c:d4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
        Validity
            Not Before: Sep 11 07:58:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d5d13568b44d605d4849361e8bd7d1b797dd777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:33:cf:87:3f:84:73:c5:26:f8:64:05:d1:
                    b5:4e:db:38:6e:b8:d0:74:de:09:e2:84:fe:79:0d:
                    e6:ec:30:5a:49:67:23:ae:e3:02:23:86:aa:33:5b:
                    d8:60:0d:87:20:83:ca:18:46:5e:68:36:46:4f:5a:
                    ed:0c:45:75:94:83:f1:1f:70:17:6a:86:4b:87:ca:
                    d7:66:36:f6:4b:e5:fc:62:1c:1f:23:3b:e9:ef:da:
                    61:a3:01:ef:9a:8b:a4:eb:cf:39:0c:1a:01:e1:07:
                    df:6f:10:9b:db:96:f6:ff:26:64:ac:21:60:01:b3:
                    ba:78:87:db:f9:42:d8:dd:fa:fc:1e:88:e3:c5:da:
                    1f:17:ed:60:ca:65:3e:46:7c:19:e8:8b:00:12:8b:
                    a5:e8:eb:98:3a:9a:ab:18:35:8a:2c:01:93:01:ba:
                    80:0f:e9:1d:3f:a1:64:51:45:e3:88:cb:8b:aa:36:
                    af:6a:7f:2e:2b:53:1b:42:f0:1e:8c:db:bc:ab:11:
                    7c:87:2f:ce:15:b8:18:7e:fa:ff:81:5e:4c:21:46:
                    1b:e8:40:74:7d:6c:aa:4f:6a:ff:dd:c9:e5:ab:d4:
                    f2:5f:5c:4d:42:30:b3:d9:ef:79:ad:09:d6:c6:b7:
                    cb:51:4e:dc:06:73:50:3f:6b:f9:18:9c:36:11:f8:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:13:56:8B:44:D6:05:D4:84:93:61:E8:BD:7D:1B:79:7D:D7:77
            X509v3 Authority Key Identifier:
                keyid:58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/TV0TVotE1gXUhJNh6L19G3l913c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.227.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:06:48:53:63:37:26:96:53:aa:e0:12:69:35:7d:62:4a:4c:
         10:d5:1c:4f:54:9a:d6:3e:19:b3:9f:71:34:b2:24:a8:f2:ee:
         ac:cb:59:87:ab:7d:6e:40:3b:8e:65:0f:be:88:2a:dc:9e:fc:
         2c:57:05:2c:28:a7:5b:df:47:69:80:cf:51:ae:ab:13:44:69:
         f3:c3:1c:90:6b:32:0f:9d:07:84:85:a5:ef:dc:e4:96:50:d5:
         e1:82:1d:18:08:12:b3:d8:96:04:67:b0:c2:04:ae:39:95:e1:
         57:e8:90:86:18:26:67:9e:f5:0f:8e:6d:2a:eb:21:e5:83:82:
         46:14:d1:84:a3:a5:ae:32:24:47:78:6e:d1:6a:a9:13:49:f8:
         86:fb:11:29:29:b9:56:06:b9:8c:2e:47:ae:74:a0:44:dd:b0:
         f0:31:70:49:27:57:ac:90:38:5f:48:ae:7f:f7:41:0a:f6:cc:
         ff:5f:1b:18:bf:95:e5:07:ee:3a:5a:44:c8:27:6f:fe:40:13:
         1a:8c:a2:cf:f4:89:98:76:b9:a1:43:f7:e6:06:c1:ec:d7:80:
         f9:ea:d9:ff:96:70:5d:a6:c4:ac:a1:03:21:08:21:07:04:68:
         28:a8:18:0b:01:c8:88:6c:1c:6f:3b:2b:4a:39:96:db:c6:55:
         4a:7e:1b:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMrjtIbO5zGD5Oy8YELnNSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZmFmMzkwOWFiNDA2MTAzMTQ4ZjNmMzJmOTVhNzlmOGRl
MzVkMGUwHhcNMjIwOTExMDc1ODQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDVkMTM1NjhiNDRkNjA1ZDQ4NDkzNjFlOGJkN2QxYjc5N2RkNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD8zz4c/hHPFJvhkBdG1Tts4brjQ
dN4J4oT+eQ3m7DBaSWcjruMCI4aqM1vYYA2HIIPKGEZeaDZGT1rtDEV1lIPxH3AX
aoZLh8rXZjb2S+X8YhwfIzvp79phowHvmouk6885DBoB4QffbxCb25b2/yZkrCFg
AbO6eIfb+ULY3fr8HojjxdofF+1gymU+RnwZ6IsAEoul6OuYOpqrGDWKLAGTAbqA
D+kdP6FkUUXjiMuLqjavan8uK1MbQvAejNu8qxF8hy/OFbgYfvr/gV5MIUYb6EB0
fWyqT2r/3cnlq9TyX1xNQjCz2e95rQnWxrfLUU7cBnNQP2v5GJw2EfgIgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1dE1aLRNYF1ISTYei9fRt5fdd3MB8GA1UdIwQY
MBaAFFj685CatAYQMUjz8y+Vp5+N410OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ByemtKcTBCaEF4U1BQekw1V25uNDNqWFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xYWU3YjktM2U1Ni00Zjg5LWJhZDYt
NmUxYjBkNjQ3OGMwLzEvVFYwVFZvdEUxZ1hVaEpOaDZMMTlHM2w5MTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xYWU3YjktM2U1Ni00Zjg5LWJhZDYtNmUxYjBkNjQ3OGMw
LzEvV1ByemtKcTBCaEF4U1BQekw1V25uNDNqWFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvOPEMA0G
CSqGSIb3DQEBCwUAA4IBAQAEBkhTYzcmllOq4BJpNX1iSkwQ1RxPVJrWPhmzn3E0
siSo8u6sy1mHq31uQDuOZQ++iCrcnvwsVwUsKKdb30dpgM9RrqsTRGnzwxyQazIP
nQeEhaXv3OSWUNXhgh0YCBKz2JYEZ7DCBK45leFX6JCGGCZnnvUPjm0q6yHlg4JG
FNGEo6WuMiRHeG7RaqkTSfiG+xEpKblWBrmMLkeudKBE3bDwMXBJJ1eskDhfSK5/
90EK9sz/XxsYv5XlB+46WkTIJ2/+QBMajKLP9ImYdrmhQ/fmBsHs14D56tn/lnBd
psSsoQMhCCEHBGgoqBgLAciIbBxvOytKOZbbxlVKfhu2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org