Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/Yafljigfry_dPtZkcEz12a8RaX0.roa
File:                     Yafljigfry_dPtZkcEz12a8RaX0.roa (raw, json)
Hash identifier:          Mp7J5thKmr6eIN73qTxDCVSypDY814MWN+YskHxwwrs=
Subject key identifier:   61:A7:E5:8E:28:1F:AF:2F:DD:3E:D6:64:70:4C:F5:D9:AF:11:69:7D
Certificate issuer:       /CN=647f607854be5196ca373a2027f6589931250d61
Certificate serial:       B5DCC5
Authority key identifier: 64:7F:60:78:54:BE:51:96:CA:37:3A:20:27:F6:58:99:31:25:0D:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZH9geFS-UZbKNzogJ_ZYmTElDWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/Yafljigfry_dPtZkcEz12a8RaX0.roa
Signing time:             Sat 01 Jan 2022 06:58:10 +0000
ROA not before:           Sat 01 Jan 2022 06:58:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        62.233.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11918533 (0xb5dcc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647f607854be5196ca373a2027f6589931250d61
        Validity
            Not Before: Jan  1 06:58:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61a7e58e281faf2fdd3ed664704cf5d9af11697d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:78:4b:96:61:db:37:60:5a:ca:70:4c:06:
                    23:53:63:cf:22:61:57:e5:9d:bf:68:9b:c5:b3:b4:
                    54:80:de:b6:1e:6a:44:ed:68:d0:49:7d:05:28:fe:
                    c9:0d:6d:68:67:71:d9:7b:fd:92:20:a1:22:81:54:
                    bb:a8:8b:3a:28:89:4e:84:29:b8:2f:6d:6a:ae:c2:
                    c4:90:ea:f5:2e:cb:1d:db:95:1e:58:2c:e3:c4:cb:
                    95:90:da:50:6d:cf:ea:10:5d:bd:78:98:a2:b8:77:
                    a5:92:65:01:3f:98:4e:f9:9f:fa:c8:f8:eb:e5:2a:
                    de:a9:51:92:3b:9b:f8:6b:73:56:71:9f:1d:60:d8:
                    94:0d:d2:cc:ca:0f:7e:b0:59:2f:af:3f:62:ce:c6:
                    dc:27:a0:29:9f:63:88:d5:ca:25:c8:de:1f:36:8e:
                    39:1b:a6:8d:5c:17:66:ea:4a:f7:5e:21:a0:ed:59:
                    7c:44:02:03:d0:35:07:57:b0:d1:55:07:af:88:cd:
                    92:9e:5c:04:9c:a9:63:e4:f8:f0:23:f1:55:22:fc:
                    e5:62:a2:23:49:b4:fa:1a:a4:d8:c8:9c:9a:c2:6c:
                    62:d5:59:49:bf:b4:81:37:3d:e7:a8:3d:60:9b:1f:
                    05:5a:9f:02:06:77:08:22:24:eb:ab:de:e4:49:ad:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:E5:8E:28:1F:AF:2F:DD:3E:D6:64:70:4C:F5:D9:AF:11:69:7D
            X509v3 Authority Key Identifier:
                keyid:64:7F:60:78:54:BE:51:96:CA:37:3A:20:27:F6:58:99:31:25:0D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZH9geFS-UZbKNzogJ_ZYmTElDWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/Yafljigfry_dPtZkcEz12a8RaX0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/ZH9geFS-UZbKNzogJ_ZYmTElDWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:07:4d:8d:18:40:10:be:7b:b5:46:02:9a:cd:da:1f:53:
         44:9b:c7:e1:c8:65:5d:c7:d0:e4:fd:c1:ad:4f:29:c7:c9:de:
         1d:b6:7e:19:f2:3c:c7:0d:a6:4b:a7:d3:5e:a6:c4:0f:be:3e:
         5c:9c:ad:c1:22:01:ed:3a:11:86:3d:de:7f:a6:f7:c0:a3:52:
         c5:18:af:65:c1:89:28:fc:41:99:b7:54:80:70:4f:44:81:c1:
         69:97:13:7a:2a:8c:37:69:34:7b:08:6e:ed:5f:ef:3d:00:b8:
         35:79:4b:c1:39:b9:7f:9d:9d:8f:45:90:4d:af:79:ab:47:ee:
         6e:98:78:4b:1a:f1:fb:f1:54:ac:f1:89:f2:3c:96:d8:5f:7d:
         f1:91:dd:8c:2b:eb:19:66:03:c3:d5:5d:59:da:a3:02:69:00:
         17:03:58:f8:30:a0:d0:a2:f0:6e:2a:c7:86:76:b0:a5:87:66:
         bc:96:ee:91:e2:6f:e4:78:76:5c:28:d8:2f:e1:f9:93:c5:e6:
         3f:c7:78:6c:77:ff:75:af:4a:fd:00:05:2c:30:8e:98:01:c1:
         5f:57:e8:3f:2c:54:9a:9e:84:bd:7c:65:dd:67:36:8d:71:f3:
         79:1e:af:1d:d9:3a:d2:1b:da:be:fc:03:b4:10:7a:ff:e8:59:
         06:9d:59:dd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALXcxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NDdmNjA3ODU0YmU1MTk2Y2EzNzNhMjAyN2Y2NTg5OTMxMjUwZDYxMB4XDTIyMDEw
MTA2NTgxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjFhN2U1OGUyODFm
YWYyZmRkM2VkNjY0NzA0Y2Y1ZDlhZjExNjk3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKiceEuWYds3YFrKcEwGI1NjzyJhV+Wdv2ibxbO0VIDeth5q
RO1o0El9BSj+yQ1taGdx2Xv9kiChIoFUu6iLOiiJToQpuC9taq7CxJDq9S7LHduV
Hlgs48TLlZDaUG3P6hBdvXiYorh3pZJlAT+YTvmf+sj46+Uq3qlRkjub+GtzVnGf
HWDYlA3SzMoPfrBZL68/Ys7G3CegKZ9jiNXKJcjeHzaOORumjVwXZupK914hoO1Z
fEQCA9A1B1ew0VUHr4jNkp5cBJypY+T48CPxVSL85WKiI0m0+hqk2MicmsJsYtVZ
Sb+0gTc956g9YJsfBVqfAgZ3CCIk66ve5Emtr2kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRhp+WOKB+vL90+1mRwTPXZrxFpfTAfBgNVHSMEGDAWgBRkf2B4VL5Rlso3
OiAn9liZMSUNYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pIOWdlRlMtVVpiS056b2dKX1pZbVRFbERXRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvNzMyNTU1LThlYjUtNGRiZC1hMDgyLTZiODM3ZWUyZWNlYy8x
L1lhZmxqaWdmcnlfZFB0WmtjRXoxMmE4UmFYMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
NzMyNTU1LThlYjUtNGRiZC1hMDgyLTZiODM3ZWUyZWNlYy8xL1pIOWdlRlMtVVpi
S056b2dKX1pZbVRFbERXRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7pODANBgkqhkiG9w0BAQsFAAOC
AQEAamkHTY0YQBC+e7VGAprN2h9TRJvH4chlXcfQ5P3BrU8px8neHbZ+GfI8xw2m
S6fTXqbED74+XJytwSIB7ToRhj3ef6b3wKNSxRivZcGJKPxBmbdUgHBPRIHBaZcT
eiqMN2k0ewhu7V/vPQC4NXlLwTm5f52dj0WQTa95q0fubph4Sxrx+/FUrPGJ8jyW
2F998ZHdjCvrGWYDw9VdWdqjAmkAFwNY+DCg0KLwbirHhnawpYdmvJbukeJv5Hh2
XCjYL+H5k8XmP8d4bHf/da9K/QAFLDCOmAHBX1foPyxUmp6EvXxl3Wc2jXHzeR6v
Hdk60hvavvwDtBB6/+hZBp1Z3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:05 2024 by rpki-client on console-ams.rpki-client.org