Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/bxnZBlJhWS0U1CNfScsQZNwyjKY.roa
File:                     bxnZBlJhWS0U1CNfScsQZNwyjKY.roa (raw, json)
Hash identifier:          G0DXHPLPIX0QMKoXW5k+prYiQ2QAK4V1OuCAd8Q8QrM=
Subject key identifier:   6F:19:D9:06:52:61:59:2D:14:D4:23:5F:49:CB:10:64:DC:32:8C:A6
Certificate issuer:       /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial:       01837A9BB57E910640B3CAE8072A8F934F44
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/bxnZBlJhWS0U1CNfScsQZNwyjKY.roa
Signing time:             Mon 26 Sep 2022 16:22:48 +0000
ROA not before:           Mon 26 Sep 2022 16:22:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41171
IP address blocks:        146.19.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7a:9b:b5:7e:91:06:40:b3:ca:e8:07:2a:8f:93:4f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
        Validity
            Not Before: Sep 26 16:22:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f19d9065261592d14d4235f49cb1064dc328ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:66:ca:2e:26:d0:f9:f9:e2:32:9a:b0:8b:
                    69:75:3b:3d:65:38:00:24:50:27:2b:25:d2:47:ed:
                    ae:d2:13:66:01:f8:96:cd:fe:9b:38:2c:e7:49:07:
                    b9:be:20:7c:3d:0a:83:47:5c:e1:9f:d8:95:ec:68:
                    e6:81:ab:2d:b9:ad:8a:6e:51:70:2f:f4:33:21:e1:
                    2a:6d:65:0c:b7:f0:85:cb:3b:ea:a1:d7:3e:80:7f:
                    51:52:02:a1:ac:b6:12:bc:0a:fd:87:fa:7a:f6:63:
                    e2:4e:da:fb:b3:08:21:d5:0e:d2:96:44:07:4c:8b:
                    7e:96:87:f9:bc:67:03:ff:5e:a3:0f:26:92:0c:e3:
                    a7:a0:50:0a:69:a5:25:6b:57:c7:5d:a7:86:d4:8d:
                    9f:ce:2c:ab:e0:31:91:f1:10:35:f6:c5:e1:eb:6e:
                    94:95:33:05:6b:4f:0c:06:c3:03:60:cb:98:18:88:
                    cc:fe:7b:78:f8:c4:df:55:f7:60:d0:ec:a4:c9:fc:
                    81:5d:8d:d7:5b:b1:2b:b1:7c:42:12:91:ff:22:2a:
                    42:e6:1e:d2:ec:b4:0f:d3:e5:87:57:54:46:aa:ad:
                    18:a6:02:f1:75:65:d9:6f:21:04:ef:a5:d2:35:02:
                    b8:7c:72:1c:dc:0d:c0:ff:d4:4b:12:c1:ba:67:05:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:19:D9:06:52:61:59:2D:14:D4:23:5F:49:CB:10:64:DC:32:8C:A6
            X509v3 Authority Key Identifier:
                keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/bxnZBlJhWS0U1CNfScsQZNwyjKY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:1c:f8:43:6b:e4:67:18:77:48:c1:5d:bc:f7:0a:d7:1c:
         48:c9:2a:05:61:5e:2e:84:ed:7c:38:78:e7:0c:81:66:15:73:
         d5:b5:45:a9:47:d4:ce:66:af:79:13:8c:a5:e2:ba:47:04:f8:
         f3:3f:84:7c:a4:ed:f4:3f:02:77:dc:df:b6:56:3e:c3:c5:4a:
         0e:ac:cb:7c:6d:b7:96:d4:8c:93:97:d7:17:40:fd:76:4b:6d:
         78:55:f3:26:49:c7:a8:55:98:e1:4a:2e:22:e4:18:d4:a5:84:
         7e:17:f2:a4:f4:d1:fe:ed:42:d8:79:25:e4:5f:d0:1e:fe:33:
         73:29:97:50:18:e6:f1:41:bf:ec:1f:b4:1f:6e:7a:be:a3:b5:
         84:60:6b:74:7a:8a:69:bd:b8:ff:5f:74:14:82:06:1d:b1:67:
         f3:0f:44:fc:1c:0c:61:6d:e5:51:d2:ad:8b:74:b7:ed:24:2e:
         44:95:b3:e6:df:13:d7:0a:aa:41:4e:29:62:1e:c5:24:a0:10:
         94:db:f2:50:5c:4d:6a:39:af:9d:de:87:34:44:8b:31:75:83:
         c8:8a:ce:a5:b6:ec:40:97:48:cf:b8:9e:94:5f:9f:00:49:b9:
         b6:c0:af:40:ac:a7:6f:36:50:bc:f4:8f:9e:a8:86:b3:5d:e4:
         77:a1:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org