Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/UzXM_XjjU4Bn5tWRHHbQuzZSz04.roa
File:                     UzXM_XjjU4Bn5tWRHHbQuzZSz04.roa (raw, json)
Hash identifier:          xP8ieVTgMFSyUKtZVvi1GmzzHAA4yT2g3kAhNf2tdSo=
Subject key identifier:   53:35:CC:FD:78:E3:53:80:67:E6:D5:91:1C:76:D0:BB:36:52:CF:4E
Certificate issuer:       /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial:       0187FEDD050B7A0BF533FDDC888D6A7A533B
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/UzXM_XjjU4Bn5tWRHHbQuzZSz04.roa
Signing time:             Tue 09 May 2023 04:55:10 +0000
ROA not before:           Tue 09 May 2023 04:55:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64267
IP address blocks:        146.19.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fe:dd:05:0b:7a:0b:f5:33:fd:dc:88:8d:6a:7a:53:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
        Validity
            Not Before: May  9 04:55:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5335ccfd78e3538067e6d5911c76d0bb3652cf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:fb:90:20:e1:aa:fa:eb:83:d4:19:a5:f6:
                    3c:33:18:c4:02:7a:58:ae:0a:74:ff:95:31:1a:b7:
                    52:3a:a1:82:ce:de:e4:55:29:12:26:87:67:c1:c9:
                    6b:3b:ee:d0:20:06:1a:09:12:b5:a8:23:0d:e0:e4:
                    d2:df:2f:06:40:f7:1d:0a:47:99:81:da:98:10:80:
                    4f:7c:6d:c9:63:0b:f8:8b:f1:6c:77:34:1f:53:18:
                    05:da:74:e3:bc:2c:ac:05:8e:2c:c6:f3:4a:e8:1f:
                    76:79:d3:8d:ce:8b:4c:5c:4a:32:08:68:d7:0f:ca:
                    5c:d7:c6:6d:8c:10:59:64:06:5f:33:68:da:a0:39:
                    fc:17:47:45:17:d9:af:0e:fc:49:72:0f:2f:22:fb:
                    f6:21:68:43:83:5c:ff:40:e2:cf:d5:e8:ff:5e:7b:
                    d0:85:79:00:38:ec:e8:c5:98:11:5b:0b:6f:d0:c5:
                    83:b4:e4:34:09:6a:a9:d9:f6:8d:1c:4a:e6:94:71:
                    f7:59:98:d6:a2:80:cb:62:e0:fe:f4:1d:2c:19:b4:
                    cd:61:d1:0e:ba:cd:bd:4d:16:41:a8:8d:60:c6:0b:
                    48:49:ab:7c:8f:a9:bf:7f:5e:e2:82:56:33:a8:3e:
                    f9:15:72:91:7f:ca:7c:0b:b5:5c:ef:ea:90:f2:18:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:35:CC:FD:78:E3:53:80:67:E6:D5:91:1C:76:D0:BB:36:52:CF:4E
            X509v3 Authority Key Identifier:
                keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/UzXM_XjjU4Bn5tWRHHbQuzZSz04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:81:10:5b:3a:f5:3c:5a:3f:f6:27:60:7d:75:92:42:cb:0f:
         be:74:c5:16:e0:4d:db:4e:47:df:40:47:cf:d7:e8:95:0e:fb:
         75:40:d2:e4:22:29:22:dc:5c:a3:81:82:1b:12:96:ba:93:28:
         07:14:73:32:39:cb:0b:8e:ad:f2:cc:13:09:1b:22:9d:55:ec:
         e1:a0:48:da:83:88:f4:46:96:dc:fe:b1:a1:4f:67:c0:ae:16:
         7f:a6:63:32:72:ca:66:b3:03:e4:88:42:0e:37:c5:48:a2:3a:
         0f:bb:d9:4f:ef:df:08:c3:c8:29:40:a5:71:58:d9:57:0d:f7:
         09:66:8e:98:96:7e:46:31:99:17:d9:d7:cf:c4:84:6d:d8:6e:
         f7:50:13:ca:00:70:97:58:09:78:0b:98:75:31:82:3e:e8:e5:
         e6:b0:ec:3f:e7:04:d8:7f:80:0a:96:2c:87:8c:ff:08:92:36:
         2e:a0:39:61:26:2e:60:74:7d:6d:2a:f3:1d:7c:28:5c:59:1b:
         21:aa:f2:25:6a:d3:f0:19:7e:e2:05:96:6d:b6:5f:e7:72:5f:
         ff:25:c1:a5:3b:29:08:ea:4e:15:a1:8c:26:5f:ac:cd:fc:d8:
         8b:b7:35:47:97:cd:eb:3b:40:59:2f:2b:a7:37:89:ed:0e:6d:
         3d:98:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org