Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/mU3FZeC6E1rGHiitAF-Nu200MO4.roa
File:                     mU3FZeC6E1rGHiitAF-Nu200MO4.roa (raw, json)
Hash identifier:          y8bUKQW0VQRV65K6GfDZrKwbsCfO8o5TzidrxbxeG9M=
Subject key identifier:   99:4D:C5:65:E0:BA:13:5A:C6:1E:28:AD:00:5F:8D:BB:6D:34:30:EE
Certificate issuer:       /CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
Certificate serial:       01856F8244C7FAE433F647E6740F3CB47B7E
Authority key identifier: 04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/mU3FZeC6E1rGHiitAF-Nu200MO4.roa
Signing time:             Sun 01 Jan 2023 22:44:46 +0000
ROA not before:           Sun 01 Jan 2023 22:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:44:c7:fa:e4:33:f6:47:e6:74:0f:3c:b4:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
        Validity
            Not Before: Jan  1 22:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=994dc565e0ba135ac61e28ad005f8dbb6d3430ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:ff:f4:d4:cb:a4:70:55:45:ad:d6:8f:d5:
                    c9:0c:2d:b0:9c:03:77:9c:97:d2:04:d4:cf:ed:ed:
                    25:9d:20:f7:1c:a3:ae:ea:33:5e:2c:1a:f9:f8:f7:
                    40:d2:71:22:fb:fd:cd:16:0b:45:3d:35:53:70:e1:
                    11:3e:cf:70:af:43:50:3b:a7:54:0e:5b:10:11:f8:
                    6b:06:7b:10:6f:cb:41:86:77:e7:70:d3:98:2e:29:
                    41:02:68:83:a8:ca:fb:31:dc:c5:67:06:0a:3b:30:
                    a3:49:41:3e:93:7f:4d:d1:05:51:05:14:2a:98:79:
                    5f:cf:7c:0b:18:1b:aa:45:58:06:3d:96:3a:f5:81:
                    de:9c:74:cc:53:1d:02:f8:91:9a:43:9f:03:56:ce:
                    8e:9b:5b:29:d3:e8:9d:fb:4b:62:c0:e4:a5:d5:37:
                    7f:7a:07:d7:52:50:fc:cc:cd:fd:c0:ee:3d:8e:b2:
                    e0:13:48:81:1f:59:f2:4e:0e:b9:4d:17:e6:24:62:
                    68:54:20:37:a9:ec:fe:5d:37:d1:8e:3e:68:36:9c:
                    18:0b:37:5e:d5:62:21:71:66:ef:4c:8d:79:11:16:
                    ba:1c:f1:ce:1f:18:3b:27:e4:ab:17:c8:04:0d:74:
                    05:89:0b:ed:80:ee:db:4f:fb:24:63:86:2b:e1:28:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4D:C5:65:E0:BA:13:5A:C6:1E:28:AD:00:5F:8D:BB:6D:34:30:EE
            X509v3 Authority Key Identifier:
                keyid:04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/mU3FZeC6E1rGHiitAF-Nu200MO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:a9:9f:0f:7b:7c:b1:39:54:79:44:b8:58:4f:06:20:92:
         e0:e4:1c:f6:49:9f:4e:92:15:37:07:17:dc:b5:a8:94:99:9b:
         dd:b9:5c:18:98:02:f1:03:bc:d4:87:a6:7e:b2:3d:da:23:12:
         31:a3:5f:0e:fa:60:b4:31:31:ce:d0:6e:44:1b:5a:e7:17:20:
         b6:5f:d6:90:e9:b3:be:d3:28:3b:54:15:5e:6a:a7:9c:11:01:
         4e:f6:ff:5a:9d:95:ba:84:2b:d0:21:3a:06:3e:01:1c:ea:ac:
         64:db:de:ed:2a:0d:c7:9d:6b:d6:57:60:c2:c3:fc:7b:e8:32:
         32:71:16:7e:1d:38:51:28:3c:94:49:89:22:3c:1d:ad:0e:27:
         b4:ea:f0:f1:9f:74:da:36:cf:ff:a3:c8:a3:20:20:c1:f3:94:
         95:bb:9f:d1:e5:73:16:c0:7b:d5:41:55:f4:2b:0e:3b:dd:6b:
         e0:89:48:4a:34:bd:42:13:03:1c:e5:f9:f7:b0:b1:ad:7b:3c:
         b0:06:d9:9e:bb:86:5d:f4:aa:4c:03:70:b7:ba:80:86:6b:50:
         f2:02:07:4f:71:6a:61:a3:87:33:b4:c3:3f:47:11:5a:aa:64:
         c4:96:db:32:ce:28:0a:d6:27:99:78:d5:76:a8:24:3a:3b:2d:
         f7:0c:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 09:41:00 2023 by rpki-client on console-ams.rpki-client.org