Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/Qu_pNoyR7Bxlb98iC98xkax8WBs.roa
File:                     Qu_pNoyR7Bxlb98iC98xkax8WBs.roa (raw, json)
Hash identifier:          jdId6MFGcBJO2yGHez73fugrPerRYYUd6QeH6wHmcs8=
Subject key identifier:   42:EF:E9:36:8C:91:EC:1C:65:6F:DF:22:0B:DF:31:91:AC:7C:58:1B
Certificate issuer:       /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial:       363D28
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/Qu_pNoyR7Bxlb98iC98xkax8WBs.roa
Signing time:             Sat 05 Feb 2022 20:27:01 +0000
ROA not before:           Sat 05 Feb 2022 20:27:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        91.202.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3554600 (0x363d28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
        Validity
            Not Before: Feb  5 20:27:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=42efe9368c91ec1c656fdf220bdf3191ac7c581b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:4f:7d:ff:fb:06:41:8c:8e:60:f9:23:08:
                    f8:bd:e6:fd:9d:cf:dc:90:9c:f7:30:b8:eb:63:a0:
                    62:ed:db:69:18:1f:10:61:94:4a:14:41:bc:cf:81:
                    1b:3a:b3:9a:36:c9:45:8a:32:96:d8:ff:ef:eb:9b:
                    09:86:59:aa:db:2a:f7:d0:06:4c:51:d2:1e:77:ec:
                    e9:ef:1b:43:a0:bf:6c:ae:84:e9:dd:9f:35:6a:67:
                    a8:eb:ef:be:d6:17:58:9e:e9:ec:f7:b2:91:9a:db:
                    53:69:ef:76:b5:c2:aa:4b:da:cc:8b:c6:da:c2:34:
                    81:14:5f:01:90:4a:28:42:e4:40:b2:18:b6:25:0b:
                    f7:fa:a3:3a:1e:10:5b:0a:e4:e8:29:3d:4e:f7:4c:
                    2b:dc:9e:52:c7:ae:4e:8b:c9:af:cb:5b:c2:2d:39:
                    a5:aa:c0:d9:8a:15:6d:53:51:bf:ef:63:88:70:ea:
                    33:ff:cb:9a:b8:45:d4:e5:9c:a4:4d:d3:66:e3:bf:
                    e8:c5:3e:91:ee:30:cf:b9:32:d2:46:ae:89:82:7d:
                    b1:de:da:79:03:4e:bc:68:d2:45:b0:e2:51:7a:31:
                    65:ad:98:56:ec:1a:ff:6d:5f:fb:14:5d:b1:48:27:
                    f8:75:23:8a:e4:d2:52:4c:44:26:d6:82:1c:53:fc:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:E9:36:8C:91:EC:1C:65:6F:DF:22:0B:DF:31:91:AC:7C:58:1B
            X509v3 Authority Key Identifier:
                keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/Qu_pNoyR7Bxlb98iC98xkax8WBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.202.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:57:e1:37:81:64:df:fd:9e:27:83:40:1b:cf:b1:e9:ab:
         e2:be:f9:cf:5b:69:eb:0f:49:7e:12:8c:e5:89:43:f6:64:f1:
         5c:4d:e8:b4:46:90:12:dc:12:d5:0c:b8:1c:ed:f3:02:22:7c:
         6f:26:50:4c:e8:ec:a3:37:90:73:17:32:aa:33:bc:2d:89:1d:
         ec:88:05:1e:a6:49:55:a7:f0:43:1b:7e:e6:17:46:31:dc:6b:
         b5:69:b8:d7:1d:21:95:47:16:6a:ff:23:78:4e:95:6d:2d:77:
         fd:3c:59:78:f7:21:43:7c:ed:97:67:e9:6f:1d:9f:97:9a:b1:
         93:ba:9e:68:90:ef:9a:6a:cd:e5:b8:1a:1d:95:85:85:26:56:
         90:d8:78:8b:cc:ce:1e:5f:59:d0:13:53:07:9c:3b:cd:44:31:
         bd:9c:d1:4b:81:d9:0c:c2:6d:ea:04:5c:c9:1b:1e:99:fc:26:
         fb:90:9a:f1:7a:5c:70:91:bb:75:88:bd:36:c3:6e:23:69:c7:
         ad:38:a2:89:61:5d:c5:fc:90:7d:4f:b2:b6:fa:4b:b0:8a:5f:
         e2:d5:84:70:c7:ab:61:82:27:9c:4a:ca:42:49:fb:73:6e:c7:
         94:11:26:de:ea:01:95:b8:32:e3:23:77:18:15:c5:8f:d1:f8:
         c3:32:e2:5d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDNj0oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
YjYwYTZkNzdjNGNhYzhmMTAyZDgxMGJlMzMwYjNkMzkxZWZlOTMwHhcNMjIwMjA1
MjAyNzAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0MmVmZTkzNjhjOTFl
YzFjNjU2ZmRmMjIwYmRmMzE5MWFjN2M1ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk5BPff/7BkGMjmD5Iwj4veb9nc/ckJz3MLjrY6Bi7dtpGB8Q
YZRKFEG8z4EbOrOaNslFijKW2P/v65sJhlmq2yr30AZMUdIed+zp7xtDoL9sroTp
3Z81ameo6+++1hdYnuns97KRmttTae92tcKqS9rMi8bawjSBFF8BkEooQuRAshi2
JQv3+qM6HhBbCuToKT1O90wr3J5Sx65Oi8mvy1vCLTmlqsDZihVtU1G/72OIcOoz
/8uauEXU5ZykTdNm47/oxT6R7jDPuTLSRq6Jgn2x3tp5A068aNJFsOJRejFlrZhW
7Br/bV/7FF2xSCf4dSOK5NJSTEQm1oIcU/z1lwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFELv6TaMkewcZW/fIgvfMZGsfFgbMB8GA1UdIwQYMBaAFGm2Cm13xMrI8QLY
EL4zCz05Hv6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YWJZS2JYZkV5c2p4QXRnUXZqTUxQVGtlX3BNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kYy81ZmY0ZmYtNWJmZS00MTIzLWExNTItNGFkOTkxNGJiYTY4LzEv
UXVfcE5veVI3QnhsYjk4aUM5OHhrYXg4V0JzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81
ZmY0ZmYtNWJmZS00MTIzLWExNTItNGFkOTkxNGJiYTY4LzEvYWJZS2JYZkV5c2p4
QXRnUXZqTUxQVGtlX3BNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8rRMA0GCSqGSIb3DQEBCwUAA4IB
AQArUFfhN4Fk3/2eJ4NAG8+x6avivvnPW2nrD0l+EozliUP2ZPFcTei0RpAS3BLV
DLgc7fMCInxvJlBM6OyjN5BzFzKqM7wtiR3siAUepklVp/BDG37mF0Yx3Gu1abjX
HSGVRxZq/yN4TpVtLXf9PFl49yFDfO2XZ+lvHZ+XmrGTup5okO+aas3luBodlYWF
JlaQ2HiLzM4eX1nQE1MHnDvNRDG9nNFLgdkMwm3qBFzJGx6Z/Cb7kJrxelxwkbt1
iL02w24jacetOKKJYV3F/JB9T7K2+kuwil/i1YRwx6thgiecSspCSftzbseUESbe
6gGVuDLjI3cYFcWP0fjDMuJd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org