Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/sr55VHmeY_dd1Q4cVP4_CiLPLMs.roa
File:                     sr55VHmeY_dd1Q4cVP4_CiLPLMs.roa (raw, json)
Hash identifier:          GVtxWdRNJEhZ29oUKfPo9j6rq5ZS9ZOYc1WdP863qiA=
Subject key identifier:   B2:BE:79:54:79:9E:63:F7:5D:D5:0E:1C:54:FE:3F:0A:22:CF:2C:CB
Certificate issuer:       /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial:       01484D
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/sr55VHmeY_dd1Q4cVP4_CiLPLMs.roa
Signing time:             Thu 24 Mar 2022 19:38:25 +0000
ROA not before:           Thu 24 Mar 2022 19:38:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6939
IP address blocks:        146.19.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84045 (0x1484d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
        Validity
            Not Before: Mar 24 19:38:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b2be7954799e63f75dd50e1c54fe3f0a22cf2ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:55:4f:98:69:b4:a2:6f:6a:65:c5:1a:2d:
                    82:af:a6:f1:a4:94:06:8b:ef:72:86:1a:88:ee:31:
                    20:05:68:d0:13:5f:09:b0:7e:2e:35:e5:53:e7:95:
                    be:6e:df:0b:0e:29:2a:de:c4:fa:90:c0:06:d5:3f:
                    16:fc:81:e3:be:7e:c8:18:b4:7c:78:18:83:0d:40:
                    f4:7f:f2:51:bf:6e:88:f5:60:57:34:fe:2b:ab:db:
                    b7:e6:b0:ee:70:fc:1c:b0:c7:0a:b0:62:bf:b0:54:
                    87:9e:6f:7f:0f:93:8b:57:85:37:d9:62:44:41:57:
                    f3:02:e1:26:9b:65:26:35:c3:95:f4:e9:7c:7a:b5:
                    fe:3c:74:77:42:8e:dd:98:ef:84:b0:6f:a4:fc:6d:
                    11:bb:49:21:37:b9:8a:2f:f0:70:37:2c:57:f7:1b:
                    d7:5b:bb:f8:55:7d:43:29:e7:2a:a8:e1:6b:1b:04:
                    a9:2f:fc:22:6a:c0:cf:d2:1f:c7:eb:fa:da:f5:e7:
                    ef:b9:63:76:d7:54:3b:f3:8b:c5:4e:6f:80:c5:64:
                    19:56:62:49:32:a4:d5:4e:ee:2c:c5:a8:b5:56:0f:
                    84:18:28:bf:01:91:be:1e:9d:59:69:16:75:2d:8f:
                    7a:a3:05:49:db:fc:c3:b3:52:e8:55:dd:0f:ba:5c:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BE:79:54:79:9E:63:F7:5D:D5:0E:1C:54:FE:3F:0A:22:CF:2C:CB
            X509v3 Authority Key Identifier:
                keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/sr55VHmeY_dd1Q4cVP4_CiLPLMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:94:7e:16:7a:10:c4:37:87:6b:a3:36:b4:f7:6c:3a:ae:
         ce:a9:db:8c:00:83:09:8d:03:8f:fe:c2:14:fe:d7:a7:10:57:
         97:ae:9f:36:5f:54:86:a8:1a:16:4c:4a:57:0d:e8:dd:8a:b1:
         b6:23:94:46:d8:a1:7a:47:ab:59:bb:05:08:55:a0:d6:a9:f9:
         62:b9:1c:7f:b8:6a:fa:e0:39:45:06:6d:cc:ee:05:58:40:cf:
         10:07:d0:33:91:6a:70:06:c8:bd:1b:04:bb:bc:bf:10:4f:b4:
         90:22:d5:44:a4:d6:53:90:c1:0f:3b:fb:97:25:28:ef:f6:d4:
         a2:ac:56:36:bb:ff:19:6d:e2:c3:8f:bc:d4:1e:af:8b:39:df:
         93:94:b7:39:86:d8:cc:c9:84:16:0a:f9:b3:19:60:7e:0e:9d:
         ec:f5:c1:47:80:05:a8:4f:d6:fb:0d:10:aa:63:71:2e:04:d8:
         d8:cc:79:34:35:e9:6c:a8:d8:74:13:bd:e7:8e:a0:ee:0c:10:
         f4:e1:cb:f9:a8:ae:bf:c8:9f:ac:92:0f:9f:b7:9b:61:68:26:
         01:5c:5b:30:1a:cd:5a:54:f5:f4:9a:32:f1:7a:28:2d:f5:fe:
         8a:84:c6:51:59:32:83:0c:21:45:79:22:cf:48:d4:d0:3f:bb:
         11:8d:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org