Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/LNAHHdYJb__1SdeGVX0dS3jruWM.roa
File:                     LNAHHdYJb__1SdeGVX0dS3jruWM.roa (raw, json)
Hash identifier:          CM+NAMjVvxQ7U2qj3oaxz6xmEf+m4oCmHooeNBE5Y/I=
Subject key identifier:   2C:D0:07:1D:D6:09:6F:FF:F5:49:D7:86:55:7D:1D:4B:78:EB:B9:63
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27C6521A7FD3D4AB31A704845F41B6
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/LNAHHdYJb__1SdeGVX0dS3jruWM.roa
Signing time:             Fri 28 Oct 2022 10:33:53 +0000
ROA not before:           Fri 28 Oct 2022 10:33:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25369
IP address blocks:        89.116.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:c6:52:1a:7f:d3:d4:ab:31:a7:04:84:5f:41:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2cd0071dd6096ffff549d786557d1d4b78ebb963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:a0:9c:c2:07:0a:ec:7f:81:c6:fa:97:97:
                    5e:7d:a7:ad:5b:31:15:da:1c:64:59:d6:28:34:b1:
                    52:a8:44:44:2a:e4:63:59:5f:08:21:5e:a3:ea:70:
                    ef:fd:8f:58:15:b8:5b:8a:15:ac:18:6b:4a:36:16:
                    e9:21:04:02:c0:75:04:3f:f8:d0:2e:3f:c2:11:80:
                    fe:5b:f5:af:ff:aa:f1:93:a2:98:f0:1b:ad:fe:3a:
                    90:02:61:9a:fd:32:42:a5:3f:38:5c:e6:d3:da:c5:
                    72:95:5c:d5:28:17:47:fd:82:34:35:2a:f0:76:f6:
                    2e:28:2e:53:0f:df:42:f2:1f:84:d7:e8:24:c6:8f:
                    6f:d3:d4:ab:38:8d:3b:44:e7:86:c8:68:98:0d:4f:
                    69:69:35:84:46:fd:80:8d:ec:aa:0a:3d:ab:59:91:
                    04:29:30:7e:bb:c6:10:d4:dd:2f:9b:4e:50:a1:75:
                    e4:ea:c4:35:8c:47:46:1a:96:08:dd:ee:13:85:38:
                    75:5c:ff:b9:2a:c9:b1:53:9b:80:58:c3:f7:4f:91:
                    7e:d2:b8:b9:2d:93:94:b4:a2:a6:f2:70:1f:a4:2b:
                    f2:5b:70:df:0c:c8:31:8c:79:d0:8a:52:02:ba:a5:
                    68:cb:dd:bd:79:37:07:a7:f0:1a:53:b5:b4:e8:5e:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D0:07:1D:D6:09:6F:FF:F5:49:D7:86:55:7D:1D:4B:78:EB:B9:63
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/LNAHHdYJb__1SdeGVX0dS3jruWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:d8:66:c5:62:55:3e:c3:66:51:57:56:00:1e:15:01:60:8a:
         8b:bc:bf:11:9e:8c:83:c5:8e:b2:f1:d8:9d:d7:ef:cf:3a:f7:
         2c:1f:38:55:6a:1a:9c:d1:6e:fd:d4:ac:a6:10:3f:34:a3:2e:
         90:a2:dd:7c:0b:fc:eb:ac:58:5f:77:f0:a4:05:f2:b3:6e:44:
         49:5c:78:4a:25:e0:bb:74:0c:61:9d:1f:c1:29:1f:fd:de:77:
         d4:0b:81:8d:29:00:05:49:ac:81:f7:c8:76:e8:1d:89:0a:44:
         c6:1f:d1:c7:94:2a:68:b2:0c:31:88:8c:0a:69:0d:65:42:5c:
         90:36:01:7d:f5:8a:ec:8b:31:80:fe:b2:76:07:8e:72:bf:f8:
         69:83:10:59:9f:a7:d6:20:06:61:1a:b6:b2:90:d3:63:35:4e:
         e5:a5:5b:8a:51:a1:8b:ff:74:54:bc:12:05:4e:4b:07:2a:6c:
         99:d9:11:c7:94:99:e6:6a:7a:3d:f8:16:dd:f4:32:74:b6:ce:
         f3:bc:ec:1f:9d:65:bb:6c:96:76:5a:ee:29:a2:34:94:6f:ad:
         62:84:61:db:e3:fb:10:ab:bd:a8:0f:e2:c1:8c:37:20:73:9b:
         91:68:7e:21:06:d7:7a:6a:52:f5:8f:bd:d8:69:f0:e2:14:3e:
         67:5e:16:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQeJ8ZSGn/T1KsxpwSEX0G2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2QwMDcxZGQ2MDk2ZmZmZjU0OWQ3ODY1NTdkMWQ0Yjc4ZWJiOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJignMIHCux/gcb6l5defaetWzEV
2hxkWdYoNLFSqEREKuRjWV8IIV6j6nDv/Y9YFbhbihWsGGtKNhbpIQQCwHUEP/jQ
Lj/CEYD+W/Wv/6rxk6KY8But/jqQAmGa/TJCpT84XObT2sVylVzVKBdH/YI0NSrw
dvYuKC5TD99C8h+E1+gkxo9v09SrOI07ROeGyGiYDU9paTWERv2AjeyqCj2rWZEE
KTB+u8YQ1N0vm05QoXXk6sQ1jEdGGpYI3e4ThTh1XP+5KsmxU5uAWMP3T5F+0ri5
LZOUtKKm8nAfpCvyW3DfDMgxjHnQilICuqVoy929eTcHp/AaU7W06F6upwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzQBx3WCW//9UnXhlV9HUt467ljMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvTE5BSEhkWUpiX18xU2RlR1ZYMGRTM2pydVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWXQwMA0G
CSqGSIb3DQEBCwUAA4IBAQC12GbFYlU+w2ZRV1YAHhUBYIqLvL8RnoyDxY6y8did
1+/POvcsHzhVahqc0W791KymED80oy6Qot18C/zrrFhfd/CkBfKzbkRJXHhKJeC7
dAxhnR/BKR/93nfUC4GNKQAFSayB98h26B2JCkTGH9HHlCposgwxiIwKaQ1lQlyQ
NgF99YrsizGA/rJ2B45yv/hpgxBZn6fWIAZhGraykNNjNU7lpVuKUaGL/3RUvBIF
TksHKmyZ2RHHlJnmano9+Bbd9DJ0ts7zvOwfnWW7bJZ2Wu4pojSUb61ihGHb4/sQ
q72oD+LBjDcgc5uRaH4hBtd6alL1j73YafDiFD5nXham
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org