Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/ZLwNoYQc21B5uZfONSmyowFJg4M.roa
File:                     ZLwNoYQc21B5uZfONSmyowFJg4M.roa (raw, json)
Hash identifier:          Wxt0VZiq0xLxtXYXXN1LflHdg/g2dtPW5UMGGq5Rmb8=
Subject key identifier:   64:BC:0D:A1:84:1C:DB:50:79:B9:97:CE:35:29:B2:A3:01:49:83:83
Certificate issuer:       /CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Certificate serial:       018ABD64898D1A17C7A5997FC7F8E4854C6A
Authority key identifier: 16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/ZLwNoYQc21B5uZfONSmyowFJg4M.roa
Signing time:             Fri 22 Sep 2023 14:56:37 +0000
ROA not before:           Fri 22 Sep 2023 14:56:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216394
IP address blocks:        62.3.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bd:64:89:8d:1a:17:c7:a5:99:7f:c7:f8:e4:85:4c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
        Validity
            Not Before: Sep 22 14:56:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64bc0da1841cdb5079b997ce3529b2a301498383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:49:cf:72:5f:4b:ba:5f:a4:3f:6a:18:cc:
                    f6:0c:7d:4b:2b:d9:50:b4:e2:ce:5f:af:d0:87:01:
                    e1:dd:ff:7b:10:df:0e:04:27:df:da:b0:ef:12:55:
                    e0:fb:27:27:67:8d:64:3c:7f:40:c2:96:eb:77:8f:
                    d1:dd:46:24:a3:19:4a:66:12:ea:72:21:b2:1d:56:
                    76:46:86:ef:b1:2f:42:8b:b4:0d:76:01:7a:21:f8:
                    6a:0f:b9:c4:c2:4a:bd:94:5d:89:78:5d:fc:30:5a:
                    17:5b:e8:aa:62:a8:47:49:a0:50:40:7d:40:0e:bf:
                    06:15:d6:48:bd:3f:a8:20:09:38:d4:f3:15:27:23:
                    99:00:97:6f:c3:bb:e9:e1:6e:0c:c2:7c:11:f7:88:
                    ce:9f:15:b8:c3:69:38:29:25:3c:56:c4:c3:68:ec:
                    ec:2a:f8:9d:34:92:b2:a1:5f:83:f4:41:50:97:18:
                    47:dc:7d:f4:4b:a2:59:21:8e:7f:35:5e:30:49:a3:
                    9d:c4:a3:d5:05:74:08:1a:39:51:52:05:8c:c2:68:
                    05:5e:be:da:60:17:02:18:2d:aa:82:3a:c9:ec:f5:
                    2f:36:f2:92:96:d5:06:c9:7b:f1:37:ff:16:43:00:
                    9b:2b:9e:61:87:8b:b0:bf:8b:b4:ef:14:95:7d:ee:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BC:0D:A1:84:1C:DB:50:79:B9:97:CE:35:29:B2:A3:01:49:83:83
            X509v3 Authority Key Identifier:
                keyid:16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/ZLwNoYQc21B5uZfONSmyowFJg4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/FnulbNyMl2YsG1fZAaH4ZYit8q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:e4:9a:f0:04:5c:c8:d0:28:6f:f0:05:fa:fa:e9:d6:94:
         2b:97:fe:29:9e:61:80:22:4b:ad:a7:a8:15:7a:86:df:02:51:
         ea:0b:64:cd:6b:df:0a:b1:47:d4:14:08:67:a5:7f:5c:52:b6:
         4b:56:17:36:cb:fe:cd:5a:30:94:5f:11:f9:93:1e:dc:ce:6c:
         ce:e2:22:33:fb:41:d2:b8:2a:45:fb:56:17:1f:c9:f8:04:21:
         12:2c:89:f1:3b:11:00:a5:84:6a:18:5a:c4:80:a3:85:82:f6:
         3f:da:a0:00:7c:3e:80:32:b7:f1:07:c5:b0:7d:05:13:b9:da:
         1d:63:71:75:6f:52:7c:c3:fc:f1:33:82:7a:82:82:89:ec:3e:
         fa:8c:b4:00:f5:61:93:c4:b3:82:8d:4d:92:c5:20:fa:2a:64:
         c9:af:b2:38:87:5a:5f:07:11:09:3c:e8:d9:a0:e9:1d:8b:00:
         7d:a0:a0:f1:97:16:d2:1a:45:ae:70:63:f3:d7:a2:e2:7f:f9:
         90:66:d9:50:3a:d5:5f:22:ff:45:20:43:b8:16:6f:98:85:74:
         62:f1:4d:f3:46:06:0d:72:07:77:60:62:0e:64:b7:ff:a8:56:
         62:71:ef:e1:2c:22:61:5f:e6:5b:2a:6b:5d:d6:6b:71:50:f7:
         dd:45:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:14 2024 by rpki-client on console-ams.rpki-client.org