Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/V5RSm30kTm9nwzdQah3CtfVfTMk.roa
File:                     V5RSm30kTm9nwzdQah3CtfVfTMk.roa (raw, json)
Hash identifier:          AhT9x9584XQx94pzwUxp4f2Y3RfltTd2WlR+JTFBI1I=
Subject key identifier:   57:94:52:9B:7D:24:4E:6F:67:C3:37:50:6A:1D:C2:B5:F5:5F:4C:C9
Certificate issuer:       /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial:       08CDADC9
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/V5RSm30kTm9nwzdQah3CtfVfTMk.roa
Signing time:             Mon 07 Mar 2022 16:24:04 +0000
ROA not before:           Mon 07 Mar 2022 16:24:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        45.8.95.0/24 maxlen: 24
                          45.8.94.0/24 maxlen: 24
                          45.8.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147697097 (0x8cdadc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
        Validity
            Not Before: Mar  7 16:24:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5794529b7d244e6f67c337506a1dc2b5f55f4cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:5f:cc:a5:2e:bf:a5:18:11:f4:24:90:87:
                    bd:67:4f:ed:ba:d4:9f:86:b3:52:7b:2f:eb:13:34:
                    3c:bb:c1:ec:ef:ef:7f:49:55:6a:a0:69:94:9c:16:
                    ba:4f:0c:b9:11:77:aa:e3:b6:3d:25:f8:c2:e7:2a:
                    e2:4a:fe:f2:44:14:25:db:74:6b:98:a0:9b:03:51:
                    30:b9:34:c5:ec:90:31:4f:da:6b:34:95:5a:a3:42:
                    b6:0b:07:62:85:86:16:39:63:3b:94:b7:fa:60:36:
                    ee:ec:96:f7:78:22:7d:0f:47:69:f3:2f:08:1d:0c:
                    92:c1:10:de:7f:b0:28:77:ee:f7:d7:16:93:0c:fe:
                    cd:03:fa:b1:99:3b:07:f5:7a:fe:f0:e2:54:9a:a5:
                    36:ba:b3:89:71:18:b7:25:e0:58:d4:e2:32:1a:f2:
                    0e:9f:5e:18:27:21:c9:2e:aa:fc:b2:1b:9a:29:50:
                    ce:89:45:08:8c:f3:23:38:7d:34:aa:90:34:30:44:
                    5f:84:83:49:69:46:81:61:0f:43:88:03:c8:de:dd:
                    70:8d:a7:92:cf:9c:9f:10:34:4f:81:20:eb:eb:c4:
                    4a:d3:0e:04:21:99:b7:70:8a:ae:ab:84:3f:12:9f:
                    18:90:bf:72:ee:78:10:bb:f5:ec:cf:a0:c4:7f:8b:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:52:9B:7D:24:4E:6F:67:C3:37:50:6A:1D:C2:B5:F5:5F:4C:C9
            X509v3 Authority Key Identifier:
                keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/V5RSm30kTm9nwzdQah3CtfVfTMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.93.0-45.8.95.255

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:20:57:35:61:7b:6d:d2:d4:86:9e:5a:8f:b3:1d:35:96:
         69:c2:a3:0e:59:28:17:4d:1c:ad:d4:4d:ea:18:ef:6e:54:e3:
         d0:73:f3:49:1e:f4:09:72:53:4a:21:b6:a9:3d:8e:db:13:4d:
         16:00:56:ad:f0:f4:d4:98:1e:04:c0:80:9f:f3:d7:f5:36:f9:
         58:31:69:67:76:af:81:7f:e7:4d:1b:57:a8:63:0c:df:53:a5:
         82:3b:27:52:6a:d5:a6:38:ef:bb:a4:81:05:11:48:68:ca:53:
         8f:b0:47:b7:72:09:5f:45:40:ae:db:ea:d4:2e:8f:b9:7f:91:
         09:fc:78:e2:52:f9:45:9b:dc:59:be:4d:e4:54:13:e8:5f:3f:
         45:bc:d2:b7:3c:e6:6a:9f:6e:0f:02:31:63:45:01:63:67:84:
         94:2f:c9:01:8c:c0:6e:6d:94:b1:7b:ec:1f:5f:9c:c5:c5:3b:
         0e:69:f4:05:b6:fc:3c:43:95:ad:c5:d4:9f:cc:da:82:f6:01:
         99:8c:e8:fb:bd:7a:ac:11:7a:54:2c:51:57:4e:37:50:5f:b2:
         68:67:23:6e:68:c5:d7:b1:0d:ae:11:8a:33:46:9e:dd:9c:1b:
         3f:8e:0b:da:18:89:45:26:67:4e:33:c7:4d:d9:06:18:b5:f9:
         7d:9c:84:0b
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECM2tyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NmMyZGVmZjAxNWZhM2U4MDE1YjFkNWZkYmJmYjc3OWEyYzhlNjE3MB4XDTIyMDMw
NzE2MjQwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTc5NDUyOWI3ZDI0
NGU2ZjY3YzMzNzUwNmExZGMyYjVmNTVmNGNjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKA8X8ylLr+lGBH0JJCHvWdP7brUn4azUnsv6xM0PLvB7O/v
f0lVaqBplJwWuk8MuRF3quO2PSX4wucq4kr+8kQUJdt0a5igmwNRMLk0xeyQMU/a
azSVWqNCtgsHYoWGFjljO5S3+mA27uyW93gifQ9HafMvCB0MksEQ3n+wKHfu99cW
kwz+zQP6sZk7B/V6/vDiVJqlNrqziXEYtyXgWNTiMhryDp9eGCchyS6q/LIbmilQ
zolFCIzzIzh9NKqQNDBEX4SDSWlGgWEPQ4gDyN7dcI2nks+cnxA0T4Eg6+vEStMO
BCGZt3CKrquEPxKfGJC/cu54ELv17M+gxH+Lcg0CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRXlFKbfSROb2fDN1BqHcK19V9MyTAfBgNVHSMEGDAWgBR2wt7/AV+j6AFb
HV/bv7d5osjmFzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RzTGVfd0Zmby1nQld4MWYyNy0zZWFMSTVoYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvYTcxYzY5LTRhZTUtNDg1My05ZGE4LTc2YWU3MDExMjZmOS8x
L1Y1UlNtMzBrVG05bnd6ZFFhaDNDdGZWZlRNay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
YTcxYzY5LTRhZTUtNDg1My05ZGE4LTc2YWU3MDExMjZmOS8xL2RzTGVfd0Zmby1n
Qld4MWYyNy0zZWFMSTVoYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALQhdAwQFLQhAMA0GCSqGSIb3
DQEBCwUAA4IBAQCoZCBXNWF7bdLUhp5aj7MdNZZpwqMOWSgXTRyt1E3qGO9uVOPQ
c/NJHvQJclNKIbapPY7bE00WAFat8PTUmB4EwICf89f1NvlYMWlndq+Bf+dNG1eo
YwzfU6WCOydSatWmOO+7pIEFEUhoylOPsEe3cglfRUCu2+rULo+5f5EJ/HjiUvlF
m9xZvk3kVBPoXz9FvNK3POZqn24PAjFjRQFjZ4SUL8kBjMBubZSxe+wfX5zFxTsO
afQFtvw8Q5WtxdSfzNqC9gGZjOj7vXqsEXpULFFXTjdQX7JoZyNuaMXXsQ2uEYoz
Rp7dnBs/jgvaGIlFJmdOM8dN2QYYtfl9nIQL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org