Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6ed3cc-faa0-46ab-9995-1d5fc6f3d2e1/1/ASeJn4Ibx6HiB0x0aeOXXsfHn1I.roa
File:                     ASeJn4Ibx6HiB0x0aeOXXsfHn1I.roa (raw, json)
Hash identifier:          M06Qzs58g9KZZBWLmnyfJn1aNMhSJt/NsMim7xRi5js=
Subject key identifier:   01:27:89:9F:82:1B:C7:A1:E2:07:4C:74:69:E3:97:5E:C7:C7:9F:52
Certificate issuer:       /CN=d5a5897a9b46c6e5f37b4143e0ec7e3f9250aeb5
Certificate serial:       01DD52AE
Authority key identifier: D5:A5:89:7A:9B:46:C6:E5:F3:7B:41:43:E0:EC:7E:3F:92:50:AE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aWJeptGxuXze0FD4Ox-P5JQrrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6ed3cc-faa0-46ab-9995-1d5fc6f3d2e1/1/ASeJn4Ibx6HiB0x0aeOXXsfHn1I.roa
Signing time:             Sat 28 May 2022 14:07:13 +0000
ROA not before:           Sat 28 May 2022 14:07:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203020
IP address blocks:        80.73.243.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31281838 (0x1dd52ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a5897a9b46c6e5f37b4143e0ec7e3f9250aeb5
        Validity
            Not Before: May 28 14:07:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0127899f821bc7a1e2074c7469e3975ec7c79f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:29:d5:e5:9a:15:2d:a7:02:c4:79:73:f5:
                    4b:b0:d7:ed:dc:23:fb:bc:ad:eb:5b:16:dc:71:9e:
                    45:1d:9a:6e:1e:59:6e:b4:a0:54:44:82:8b:15:cb:
                    c1:e6:6d:1b:ff:f1:b1:af:a2:8d:33:20:00:d0:97:
                    65:39:26:65:a9:41:4a:e7:c9:51:56:b0:18:5d:59:
                    85:bd:88:6c:cf:1f:dd:4e:df:9b:2d:3d:d2:9f:ff:
                    d3:5c:7d:fe:9e:c3:21:41:79:49:24:40:3c:3b:4d:
                    2f:bd:ce:0b:3b:f7:ce:c6:bc:4b:71:29:28:fe:29:
                    b7:22:bf:9d:ea:e8:4c:bf:2a:f9:96:c7:11:6c:8b:
                    49:4a:51:e3:a7:58:af:88:60:3a:41:c0:64:af:9e:
                    0c:e5:d1:39:73:96:b1:71:9b:73:a4:5a:8d:88:5b:
                    03:99:da:eb:be:45:0d:62:ae:d4:c0:2b:99:f7:62:
                    0b:05:eb:6f:75:90:80:b1:0d:50:62:dc:34:bc:4d:
                    c0:a1:c4:ea:4e:85:bc:d1:b4:59:e2:a0:2a:0a:97:
                    bd:88:ea:9a:b3:fd:17:ca:a1:73:f0:ba:41:e6:98:
                    76:c8:1f:64:02:5f:4f:91:56:23:fe:91:6f:79:c0:
                    b2:12:f7:64:b1:63:e6:de:cf:bd:e5:c5:03:b8:b8:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:89:9F:82:1B:C7:A1:E2:07:4C:74:69:E3:97:5E:C7:C7:9F:52
            X509v3 Authority Key Identifier:
                keyid:D5:A5:89:7A:9B:46:C6:E5:F3:7B:41:43:E0:EC:7E:3F:92:50:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aWJeptGxuXze0FD4Ox-P5JQrrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6ed3cc-faa0-46ab-9995-1d5fc6f3d2e1/1/ASeJn4Ibx6HiB0x0aeOXXsfHn1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6ed3cc-faa0-46ab-9995-1d5fc6f3d2e1/1/1aWJeptGxuXze0FD4Ox-P5JQrrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:12:f8:7d:bb:6c:1a:c4:4d:7d:0c:9a:f5:2e:ce:e5:a0:c0:
         24:20:68:d4:bf:79:ab:16:bc:e5:a3:0b:4e:fb:fb:2f:37:54:
         45:ed:85:df:db:2c:df:c9:f9:02:4d:f7:04:63:67:52:b0:80:
         2c:19:1d:eb:95:4b:76:3f:be:60:62:f1:34:d9:4b:b9:95:27:
         0f:7f:8a:2e:ec:18:17:7e:05:ef:e6:08:9f:35:56:b0:3f:0b:
         99:6c:2b:42:23:5c:61:dd:29:1a:79:4d:03:5f:44:cd:63:0d:
         d0:1e:e3:61:ce:8c:e9:03:8a:08:90:ac:2c:e3:c8:43:70:ac:
         90:10:9a:c2:12:99:7b:b0:39:e5:2d:ff:73:4e:79:21:fb:98:
         b8:e2:27:2f:8e:5f:cb:ae:23:f4:39:2a:d1:79:d9:39:eb:20:
         c5:ee:26:57:f4:f6:62:6c:84:53:1d:e1:da:ba:64:17:4a:ce:
         59:be:0e:2b:8d:ab:aa:3b:0e:aa:9f:be:4a:eb:1d:f8:2c:af:
         da:a9:10:d5:e0:25:eb:0c:d4:cc:50:59:ad:b4:cd:e2:ac:3c:
         8a:d9:79:dc:2a:94:eb:c2:26:01:4b:30:ce:d5:8a:ea:48:e0:
         ed:3b:df:e9:ad:27:77:74:da:7f:32:6a:7c:d2:a2:d0:13:e6:
         55:33:3d:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAd1SrjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NWE1ODk3YTliNDZjNmU1ZjM3YjQxNDNlMGVjN2UzZjkyNTBhZWI1MB4XDTIyMDUy
ODE0MDcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDEyNzg5OWY4MjFi
YzdhMWUyMDc0Yzc0NjllMzk3NWVjN2M3OWY1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKi1KdXlmhUtpwLEeXP1S7DX7dwj+7yt61sW3HGeRR2abh5Z
brSgVESCixXLweZtG//xsa+ijTMgANCXZTkmZalBSufJUVawGF1Zhb2IbM8f3U7f
my090p//01x9/p7DIUF5SSRAPDtNL73OCzv3zsa8S3EpKP4ptyK/neroTL8q+ZbH
EWyLSUpR46dYr4hgOkHAZK+eDOXROXOWsXGbc6RajYhbA5na675FDWKu1MArmfdi
CwXrb3WQgLENUGLcNLxNwKHE6k6FvNG0WeKgKgqXvYjqmrP9F8qhc/C6QeaYdsgf
ZAJfT5FWI/6Rb3nAshL3ZLFj5t7PveXFA7i4Ja0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQBJ4mfghvHoeIHTHRp45dex8efUjAfBgNVHSMEGDAWgBTVpYl6m0bG5fN7
QUPg7H4/klCutTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFhV0plcHRHeHVYemUwRkQ0T3gtUDVKUXJyVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvNmVkM2NjLWZhYTAtNDZhYi05OTk1LTFkNWZjNmYzZDJlMS8x
L0FTZUpuNElieDZIaUIweDBhZU9YWHNmSG4xSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
NmVkM2NjLWZhYTAtNDZhYi05OTk1LTFkNWZjNmYzZDJlMS8xLzFhV0plcHRHeHVY
emUwRkQ0T3gtUDVKUXJyVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBJ8zANBgkqhkiG9w0BAQsFAAOC
AQEAyBL4fbtsGsRNfQya9S7O5aDAJCBo1L95qxa85aMLTvv7LzdURe2F39ss38n5
Ak33BGNnUrCALBkd65VLdj++YGLxNNlLuZUnD3+KLuwYF34F7+YInzVWsD8LmWwr
QiNcYd0pGnlNA19EzWMN0B7jYc6M6QOKCJCsLOPIQ3CskBCawhKZe7A55S3/c055
IfuYuOInL45fy64j9Dkq0XnZOesgxe4mV/T2YmyEUx3h2rpkF0rOWb4OK42rqjsO
qp++Susd+Cyv2qkQ1eAl6wzUzFBZrbTN4qw8itl53CqU68ImAUswztWK6kjg7Tvf
6a0nd3TafzJqfNKi0BPmVTM94Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:00 2024 by rpki-client on console-ams.rpki-client.org