Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4c3566-71e3-4cb9-bdd6-6a191a57731a/1/R24UNXn6Bja5p98BG6Q8dEBDBfI.roa
File:                     R24UNXn6Bja5p98BG6Q8dEBDBfI.roa (raw, json)
Hash identifier:          9pwlGKO8M/8tt9gYqlbQlLQuRmapGeiDa5BBPG6HjS8=
Subject key identifier:   47:6E:14:35:79:FA:06:36:B9:A7:DF:01:1B:A4:3C:74:40:43:05:F2
Certificate issuer:       /CN=3c039a19d3027ab56c3f2439e3462e25df97ae62
Certificate serial:       04798607
Authority key identifier: 3C:03:9A:19:D3:02:7A:B5:6C:3F:24:39:E3:46:2E:25:DF:97:AE:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PAOaGdMCerVsPyQ540YuJd-XrmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4c3566-71e3-4cb9-bdd6-6a191a57731a/1/R24UNXn6Bja5p98BG6Q8dEBDBfI.roa
Signing time:             Sat 01 Jan 2022 08:54:46 +0000
ROA not before:           Sat 01 Jan 2022 08:54:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42011
IP address blocks:        185.209.116.0/22 maxlen: 22
                          2a0b:4540::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75073031 (0x4798607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c039a19d3027ab56c3f2439e3462e25df97ae62
        Validity
            Not Before: Jan  1 08:54:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=476e143579fa0636b9a7df011ba43c74404305f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:e6:81:ae:1f:e6:dd:e1:fb:ee:41:38:36:
                    61:28:9e:d1:0c:f1:28:91:51:dc:70:6e:9f:52:c1:
                    19:e0:ae:c1:b3:23:cc:41:ba:97:82:82:85:90:13:
                    43:55:2d:2a:da:06:75:01:c3:b7:d9:f3:5e:e9:fd:
                    58:f4:5e:1c:86:09:65:48:fa:9e:3b:09:9a:69:06:
                    d5:1f:8c:30:af:22:59:4e:ea:1b:cd:67:9b:9d:9c:
                    3f:2d:d8:34:cb:43:4c:98:33:60:50:fb:9d:1c:f3:
                    21:41:3c:1c:9e:2d:60:2c:db:87:28:c3:17:49:b6:
                    0e:3c:d1:45:47:4d:f5:5c:9d:7e:47:bb:91:ed:f3:
                    36:d2:3a:09:1d:22:8b:81:ce:05:c1:97:8b:2f:6a:
                    4f:85:95:5f:95:53:6f:44:88:59:77:7f:22:bf:7e:
                    39:7c:e1:11:98:1c:b9:3c:8a:bc:e5:c9:69:d6:ee:
                    52:d4:94:2f:8c:6f:5d:60:01:f5:ea:b6:ce:7d:1e:
                    2c:64:32:4d:e0:19:d8:e0:ed:79:e7:19:13:9b:cc:
                    d7:ef:44:00:e3:c5:4b:5e:fd:6c:72:4e:40:b6:27:
                    96:bf:60:46:74:9a:25:21:d4:10:9f:ce:d3:43:7c:
                    df:cc:25:9b:3a:bc:e2:3a:5d:4d:5f:d2:3a:9a:c2:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6E:14:35:79:FA:06:36:B9:A7:DF:01:1B:A4:3C:74:40:43:05:F2
            X509v3 Authority Key Identifier:
                keyid:3C:03:9A:19:D3:02:7A:B5:6C:3F:24:39:E3:46:2E:25:DF:97:AE:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAOaGdMCerVsPyQ540YuJd-XrmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4c3566-71e3-4cb9-bdd6-6a191a57731a/1/R24UNXn6Bja5p98BG6Q8dEBDBfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4c3566-71e3-4cb9-bdd6-6a191a57731a/1/PAOaGdMCerVsPyQ540YuJd-XrmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.116.0/22
                IPv6:
                  2a0b:4540::/29

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:83:5d:b5:04:a1:59:70:27:f6:eb:88:38:79:26:2b:fe:
         b1:bb:f8:b2:22:ae:03:24:46:65:64:3b:3a:73:1d:8c:37:dd:
         0e:a6:a8:24:92:cd:c9:b9:45:ed:89:b8:99:9d:0f:30:cf:82:
         cd:12:a5:d5:aa:04:34:ae:5a:e7:ff:1d:eb:d2:fe:1b:b7:b1:
         6c:7e:11:64:e1:d8:c1:b2:a2:7b:bb:d4:0b:cc:a2:de:6c:52:
         67:b7:fd:c2:c6:37:28:43:8f:26:47:bc:23:4d:6d:c1:76:7e:
         ef:8a:f2:75:00:d8:99:46:dd:35:36:fc:07:1c:70:a0:e7:b0:
         4a:2d:04:73:b2:f3:79:92:76:79:51:12:55:c3:24:68:e7:e2:
         08:5b:96:e5:c0:93:ef:c6:60:bc:f8:0f:10:96:3a:52:34:b3:
         3d:6c:85:1c:cc:36:bd:5c:29:a4:90:a8:1f:e4:ca:97:37:6d:
         f7:b4:8e:11:32:89:37:37:23:f8:0a:30:03:68:2c:dd:31:02:
         02:3b:7b:88:ad:5b:2c:db:10:02:76:a4:5d:65:c2:17:cf:9d:
         f7:3d:fa:03:e7:b1:f9:51:5c:6a:bb:61:6c:96:14:34:26:7f:
         bb:3e:54:80:74:e1:22:35:03:1a:19:5d:40:81:1f:75:a8:3d:
         25:55:8a:5f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBHmGBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzAzOWExOWQzMDI3YWI1NmMzZjI0MzllMzQ2MmUyNWRmOTdhZTYyMB4XDTIyMDEw
MTA4NTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDc2ZTE0MzU3OWZh
MDYzNmI5YTdkZjAxMWJhNDNjNzQ0MDQzMDVmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDA5oGuH+bd4fvuQTg2YSie0QzxKJFR3HBun1LBGeCuwbMj
zEG6l4KChZATQ1UtKtoGdQHDt9nzXun9WPReHIYJZUj6njsJmmkG1R+MMK8iWU7q
G81nm52cPy3YNMtDTJgzYFD7nRzzIUE8HJ4tYCzbhyjDF0m2DjzRRUdN9Vydfke7
ke3zNtI6CR0ii4HOBcGXiy9qT4WVX5VTb0SIWXd/Ir9+OXzhEZgcuTyKvOXJadbu
UtSUL4xvXWAB9eq2zn0eLGQyTeAZ2ODteecZE5vM1+9EAOPFS179bHJOQLYnlr9g
RnSaJSHUEJ/O00N838wlmzq84jpdTV/SOprC9l0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRHbhQ1efoGNrmn3wEbpDx0QEMF8jAfBgNVHSMEGDAWgBQ8A5oZ0wJ6tWw/
JDnjRi4l35euYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BBT2FHZE1DZXJWc1B5UTU0MFl1SmQtWHJtSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvNGMzNTY2LTcxZTMtNGNiOS1iZGQ2LTZhMTkxYTU3NzMxYS8x
L1IyNFVOWG42QmphNXA5OEJHNlE4ZEVCREJmSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
NGMzNTY2LTcxZTMtNGNiOS1iZGQ2LTZhMTkxYTU3NzMxYS8xL1BBT2FHZE1DZXJW
c1B5UTU0MFl1SmQtWHJtSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnRdDANBAIAAjAHAwUDKgtFQDAN
BgkqhkiG9w0BAQsFAAOCAQEAjByDXbUEoVlwJ/briDh5Jiv+sbv4siKuAyRGZWQ7
OnMdjDfdDqaoJJLNyblF7Ym4mZ0PMM+CzRKl1aoENK5a5/8d69L+G7exbH4RZOHY
wbKie7vUC8yi3mxSZ7f9wsY3KEOPJke8I01twXZ+74rydQDYmUbdNTb8BxxwoOew
Si0Ec7LzeZJ2eVESVcMkaOfiCFuW5cCT78ZgvPgPEJY6UjSzPWyFHMw2vVwppJCo
H+TKlzdt97SOETKJNzcj+AowA2gs3TECAjt7iK1bLNsQAnakXWXCF8+d9z36A+ex
+VFcarthbJYUNCZ/uz5UgHThIjUDGhldQIEfdag9JVWKXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:58 2024 by rpki-client on console-ams.rpki-client.org