Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/xi13TM3_tw-fDdiHyekX_ltlT9w.roa
File:                     xi13TM3_tw-fDdiHyekX_ltlT9w.roa (raw, json)
Hash identifier:          AsWWLdH1MuWx8M0B4I6iEnKri4ocziZ2w4a6CcjKOxY=
Subject key identifier:   C6:2D:77:4C:CD:FF:B7:0F:9F:0D:D8:87:C9:E9:17:FE:5B:65:4F:DC
Certificate issuer:       /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial:       0111EBC6
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/xi13TM3_tw-fDdiHyekX_ltlT9w.roa
Signing time:             Mon 07 Mar 2022 17:38:52 +0000
ROA not before:           Mon 07 Mar 2022 17:38:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59253
IP address blocks:        146.19.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17951686 (0x111ebc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
        Validity
            Not Before: Mar  7 17:38:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c62d774ccdffb70f9f0dd887c9e917fe5b654fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:d8:39:90:92:64:1b:a8:29:ae:9e:a8:6e:
                    0d:d0:fb:43:88:bb:15:fb:af:6d:5e:9a:8e:92:5d:
                    9f:dd:cd:ca:01:e1:69:1a:35:b4:71:2d:93:bb:b5:
                    f2:4e:1d:e0:94:6b:5c:92:47:66:fc:ad:c3:c4:22:
                    48:c5:ef:81:4c:ee:8e:53:21:f6:c5:1f:cf:14:dc:
                    f4:a6:3c:3c:cf:1e:77:e7:4e:d0:71:1e:c7:a1:51:
                    7c:00:7c:3e:40:cf:b4:38:58:0a:56:9d:5c:a1:42:
                    0f:56:98:ca:d9:c4:46:e6:4c:f4:ff:56:10:5d:73:
                    6d:37:f3:c4:1b:e7:0a:af:63:9e:88:2a:6b:96:85:
                    13:b8:e5:21:eb:d5:ff:ac:49:85:ba:96:a2:c0:ff:
                    28:1e:16:e8:87:15:a7:3e:2c:4e:53:3e:59:1a:cb:
                    93:0e:d1:8c:c1:b3:0e:33:58:33:07:c0:13:13:7e:
                    07:bf:02:99:ad:2b:0b:27:53:b5:b5:9a:bc:ea:e6:
                    58:b9:cc:85:9b:27:dd:e9:ab:8b:03:54:3b:3e:a5:
                    67:4c:35:7d:66:ef:93:23:99:48:40:ce:ab:ba:d1:
                    82:a5:10:78:35:0c:8f:75:d5:22:9b:d7:4b:c3:8e:
                    bd:f2:24:f9:c8:e4:e5:09:fb:92:3c:ce:c1:f4:23:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:77:4C:CD:FF:B7:0F:9F:0D:D8:87:C9:E9:17:FE:5B:65:4F:DC
            X509v3 Authority Key Identifier:
                keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/xi13TM3_tw-fDdiHyekX_ltlT9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:7d:dc:21:5d:e1:a4:3c:08:1f:2d:44:0d:6c:f6:fa:f0:
         29:ac:83:cd:1a:2d:a4:a0:f3:b4:82:e9:d0:aa:7b:5d:5c:5f:
         51:eb:18:75:64:ad:89:dd:ba:a7:bb:f2:50:6b:4c:19:76:77:
         e5:07:b1:0a:f1:ab:95:53:41:4a:43:98:2b:aa:8c:34:7d:63:
         d0:82:7e:5c:0b:fb:05:d1:8f:1e:b0:4f:07:48:a0:3b:d6:fe:
         38:91:7c:aa:e3:4b:1f:ac:05:76:ff:db:c9:10:04:49:0b:4e:
         9d:96:e7:8d:9d:41:57:ef:f9:57:a1:63:8a:ca:86:eb:3b:c9:
         10:7d:68:62:79:ac:f6:43:a7:7a:a5:30:dc:3c:f5:bb:96:a5:
         9e:47:c5:44:76:b7:cb:c8:95:4b:47:d8:e3:31:48:cb:8e:2c:
         a3:df:b0:01:34:1d:4d:2d:31:93:45:9a:0e:65:ca:1c:e7:ce:
         8a:e4:34:de:99:1d:5d:35:68:91:7f:26:5c:b1:df:6d:b7:ac:
         34:7c:79:55:f8:e7:d4:dd:e8:0f:97:68:97:43:2f:1b:a9:fb:
         ce:e3:a6:d0:86:a8:b4:9c:14:4c:bf:e8:47:c4:55:da:41:12:
         5d:ff:cd:94:86:b7:3b:85:74:27:86:9a:de:82:43:de:ba:0b:
         a6:52:5c:c4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARHrxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YTNiN2EwMWQ3ZGI0MDI1Yzk4YjQ5MGIzOTU2ZmE5ZTQ2ZTFmMzYyMB4XDTIyMDMw
NzE3Mzg1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzYyZDc3NGNjZGZm
YjcwZjlmMGRkODg3YzllOTE3ZmU1YjY1NGZkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALaO2DmQkmQbqCmunqhuDdD7Q4i7FfuvbV6ajpJdn93NygHh
aRo1tHEtk7u18k4d4JRrXJJHZvytw8QiSMXvgUzujlMh9sUfzxTc9KY8PM8ed+dO
0HEex6FRfAB8PkDPtDhYCladXKFCD1aYytnERuZM9P9WEF1zbTfzxBvnCq9jnogq
a5aFE7jlIevV/6xJhbqWosD/KB4W6IcVpz4sTlM+WRrLkw7RjMGzDjNYMwfAExN+
B78Cma0rCydTtbWavOrmWLnMhZsn3emriwNUOz6lZ0w1fWbvkyOZSEDOq7rRgqUQ
eDUMj3XVIpvXS8OOvfIk+cjk5Qn7kjzOwfQjaEkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTGLXdMzf+3D58N2IfJ6Rf+W2VP3DAfBgNVHSMEGDAWgBTKO3oB19tAJcmL
SQs5VvqeRuHzYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lqdDZBZGZiUUNYSmkwa0xPVmI2bmtiaDgySS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvNzJiMGJmLTZmZmQtNDU2Yy05MmM0LTc1OTQ5NmNmNzM4My8x
L3hpMTNUTTNfdHctZkRkaUh5ZWtYX2x0bFQ5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
NzJiMGJmLTZmZmQtNDU2Yy05MmM0LTc1OTQ5NmNmNzM4My8xL3lqdDZBZGZiUUNY
Smkwa0xPVmI2bmtiaDgySS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITHTANBgkqhkiG9w0BAQsFAAOC
AQEAPvB93CFd4aQ8CB8tRA1s9vrwKayDzRotpKDztILp0Kp7XVxfUesYdWStid26
p7vyUGtMGXZ35QexCvGrlVNBSkOYK6qMNH1j0IJ+XAv7BdGPHrBPB0igO9b+OJF8
quNLH6wFdv/byRAESQtOnZbnjZ1BV+/5V6FjisqG6zvJEH1oYnms9kOneqUw3Dz1
u5alnkfFRHa3y8iVS0fY4zFIy44so9+wATQdTS0xk0WaDmXKHOfOiuQ03pkdXTVo
kX8mXLHfbbesNHx5Vfjn1N3oD5dol0MvG6n7zuOm0IaotJwUTL/oR8RV2kESXf/N
lIa3O4V0J4aa3oJD3roLplJcxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org