Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/qjNNTShX_0bG5eiXFAFXlU6ewII.roa
File:                     qjNNTShX_0bG5eiXFAFXlU6ewII.roa (raw, json)
Hash identifier:          RgMV0pXZtTaIA8nc54oSelk3xczw1qWwMm2HJ63CY6U=
Subject key identifier:   AA:33:4D:4D:28:57:FF:46:C6:E5:E8:97:14:01:57:95:4E:9E:C0:82
Certificate issuer:       /CN=659479e85d98443ae916ab4be88574ead841b019
Certificate serial:       0181F46A8BE14BD12A4E12B675BFF5DEC9FE
Authority key identifier: 65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZR56F2YRDrpFqtL6IV06thBsBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/qjNNTShX_0bG5eiXFAFXlU6ewII.roa
Signing time:             Tue 12 Jul 2022 21:57:12 +0000
ROA not before:           Tue 12 Jul 2022 21:57:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        62.204.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:6a:8b:e1:4b:d1:2a:4e:12:b6:75:bf:f5:de:c9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659479e85d98443ae916ab4be88574ead841b019
        Validity
            Not Before: Jul 12 21:57:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa334d4d2857ff46c6e5e897140157954e9ec082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:4f:08:7b:6a:54:fc:1e:00:a8:ab:04:67:
                    6f:df:56:0d:74:a1:04:b1:a4:5e:72:34:8a:ef:72:
                    ca:e6:d5:c0:3e:0c:3c:f2:51:19:6f:f1:db:3e:84:
                    b9:4d:4a:50:2b:7c:be:a9:d9:bc:03:f3:f7:9a:fd:
                    3b:db:da:c8:18:68:3a:9f:a3:9c:41:2c:1a:b6:d7:
                    22:c6:61:2f:88:9e:c2:20:59:13:c5:fa:bb:03:6c:
                    8e:4d:b3:ab:20:4e:66:84:97:3c:b4:8c:90:36:22:
                    fc:d7:ad:b8:81:f6:77:9e:ec:9d:70:5f:c0:97:c2:
                    ad:f6:b4:a9:b8:04:60:c8:e3:06:36:a4:99:e6:1c:
                    07:60:f6:85:ab:ac:86:11:9e:c6:73:bc:90:ab:d9:
                    08:8c:6d:66:f2:df:ed:76:5a:ae:80:22:b0:bb:d0:
                    2f:06:c4:1e:7a:33:a7:fb:61:d2:64:b0:f7:99:bf:
                    74:9e:7a:10:c4:b9:65:06:fb:df:ff:b6:03:0d:fe:
                    da:4e:a8:5c:02:4d:60:44:be:87:46:67:c9:a3:49:
                    5f:ed:d0:1e:32:64:2b:66:94:fb:e9:0d:e8:88:9c:
                    c9:78:25:a3:68:13:ec:ca:ca:ad:e0:19:b4:d7:39:
                    be:68:e6:d8:9c:92:4d:e6:c6:bd:f3:2f:37:1d:33:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:4D:4D:28:57:FF:46:C6:E5:E8:97:14:01:57:95:4E:9E:C0:82
            X509v3 Authority Key Identifier:
                keyid:65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZR56F2YRDrpFqtL6IV06thBsBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/qjNNTShX_0bG5eiXFAFXlU6ewII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/ZZR56F2YRDrpFqtL6IV06thBsBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ae:aa:56:6e:c2:15:91:2e:24:f2:6e:e7:56:6d:6d:00:3f:
         28:e7:44:81:3e:be:4c:34:a3:cc:c0:76:6e:39:14:de:cb:fe:
         f4:dd:5e:96:30:f6:d8:7d:60:a7:56:6f:ff:be:49:9e:70:66:
         7b:e4:5d:68:a9:17:9c:c7:fa:d5:42:a9:49:9d:66:0b:68:4b:
         0c:80:15:21:af:3b:ff:39:e5:99:32:8b:85:cf:ac:ab:d9:ac:
         d7:ac:60:3f:d6:8a:74:4a:8e:26:1b:7e:93:5e:46:98:9c:44:
         77:b3:58:e1:ad:76:62:ef:89:1c:29:91:55:44:8b:bc:ff:61:
         c3:f2:78:43:77:dd:ae:e3:e7:48:ee:92:23:8d:ae:d2:a8:6a:
         ce:d2:07:e1:ec:d1:b4:d2:a8:5e:69:9f:05:4a:af:1c:51:f5:
         1b:17:05:3d:f4:e9:b2:44:52:02:11:38:f9:f9:18:8a:5d:5d:
         46:75:0b:de:4e:53:c4:ac:4b:dd:77:f5:39:1b:db:e1:e7:86:
         65:9b:07:30:34:1d:4d:5c:be:c4:de:78:33:b3:42:b6:21:ca:
         bf:e4:35:dc:88:48:3b:27:69:9e:a7:3d:2f:f4:07:bc:41:65:
         08:b1:c0:5e:77:cb:e5:5e:6a:ba:e3:d9:b5:16:5b:ce:36:81:
         44:93:df:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH0aovhS9EqThK2db/13sn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTQ3OWU4NWQ5ODQ0M2FlOTE2YWI0YmU4ODU3NGVhZDg0
MWIwMTkwHhcNMjIwNzEyMjE1NzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTMzNGQ0ZDI4NTdmZjQ2YzZlNWU4OTcxNDAxNTc5NTRlOWVjMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TdPCHtqVPweAKirBGdv31YNdKEE
saRecjSK73LK5tXAPgw88lEZb/HbPoS5TUpQK3y+qdm8A/P3mv0729rIGGg6n6Oc
QSwattcixmEviJ7CIFkTxfq7A2yOTbOrIE5mhJc8tIyQNiL81624gfZ3nuydcF/A
l8Kt9rSpuARgyOMGNqSZ5hwHYPaFq6yGEZ7Gc7yQq9kIjG1m8t/tdlqugCKwu9Av
BsQeejOn+2HSZLD3mb90nnoQxLllBvvf/7YDDf7aTqhcAk1gRL6HRmfJo0lf7dAe
MmQrZpT76Q3oiJzJeCWjaBPsysqt4Bm01zm+aObYnJJN5sa98y83HTMoHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKozTU0oV/9GxuXolxQBV5VOnsCCMB8GA1UdIwQY
MBaAFGWUeehdmEQ66RarS+iFdOrYQbAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpSNTZGMllSRHJwRnF0TDZJVjA2dGhCc0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mNGJmMTItMTQ0MS00YjI4LTgzZDIt
YjNmYmIxYjA2NzdlLzEvcWpOTlRTaFhfMGJHNWVpWEZBRlhsVTZld0lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mNGJmMTItMTQ0MS00YjI4LTgzZDItYjNmYmIxYjA2Nzdl
LzEvWlpSNTZGMllSRHJwRnF0TDZJVjA2dGhCc0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsw0MA0G
CSqGSIb3DQEBCwUAA4IBAQCQrqpWbsIVkS4k8m7nVm1tAD8o50SBPr5MNKPMwHZu
ORTey/703V6WMPbYfWCnVm//vkmecGZ75F1oqRecx/rVQqlJnWYLaEsMgBUhrzv/
OeWZMouFz6yr2azXrGA/1op0So4mG36TXkaYnER3s1jhrXZi74kcKZFVRIu8/2HD
8nhDd92u4+dI7pIjja7SqGrO0gfh7NG00qheaZ8FSq8cUfUbFwU99OmyRFICETj5
+RiKXV1GdQveTlPErEvdd/U5G9vh54ZlmwcwNB1NXL7E3ngzs0K2Icq/5DXciEg7
J2mepz0v9Ae8QWUIscBed8vlXmq649m1FlvONoFEk99T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:10 2024 by rpki-client on console-ams.rpki-client.org