Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-c1J6gMvQQzva2pevWVlP4EsFYM.roa
File:                     1-c1J6gMvQQzva2pevWVlP4EsFYM.roa (raw, json)
Hash identifier:          Quzj9HTAgCnKXA9+hPjrVFgk/anh3UDw7yVLdrMLOxU=
Subject key identifier:   F9:CD:49:EA:03:2F:41:0C:EF:6B:6A:5E:BD:65:65:3F:81:2C:15:83
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       078540ED
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-c1J6gMvQQzva2pevWVlP4EsFYM.roa
Signing time:             Thu 26 May 2022 05:52:13 +0000
ROA not before:           Thu 26 May 2022 05:52:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126173421 (0x78540ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 26 05:52:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9cd49ea032f410cef6b6a5ebd65653f812c1583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:38:cf:a2:f4:20:42:b9:c0:dd:08:68:3c:
                    40:6f:63:c6:b0:f4:1e:f7:6c:04:e6:02:7b:7a:7c:
                    02:09:b1:f9:82:70:d6:a4:bf:e2:ea:8f:90:46:17:
                    30:b8:d7:26:9c:a4:f2:03:8e:d8:11:72:87:3e:f2:
                    b8:6b:14:76:c9:a0:5d:12:1d:63:09:e5:6c:08:18:
                    c8:83:70:a6:07:03:0c:4f:b5:c2:5f:c4:4c:b8:02:
                    ea:6a:b6:6c:52:7e:d3:85:82:6f:37:62:9f:16:a6:
                    9b:19:f5:64:63:25:7f:db:7f:cb:2f:da:ca:1a:6b:
                    94:bd:27:d6:37:45:ff:2c:80:0e:f1:3b:93:8e:91:
                    e5:d1:80:da:66:f7:5d:30:9d:8e:0c:53:e3:e3:20:
                    63:af:b9:70:50:0b:86:b5:be:bd:90:76:a1:b5:5f:
                    aa:c5:06:94:e9:7d:e2:43:db:91:4e:40:41:b3:aa:
                    9d:b7:7c:36:cc:fa:bf:b6:f9:f4:23:20:5b:04:9f:
                    17:57:9d:37:b3:ba:2b:36:25:a6:a9:ff:13:15:3c:
                    25:03:a9:36:06:0d:35:d6:e5:fe:f2:71:15:a7:83:
                    2a:95:d9:98:6f:8a:65:0f:9d:35:18:fd:ab:d2:6d:
                    12:82:93:75:57:f7:24:ef:05:73:c5:21:6a:78:ce:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CD:49:EA:03:2F:41:0C:EF:6B:6A:5E:BD:65:65:3F:81:2C:15:83
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-c1J6gMvQQzva2pevWVlP4EsFYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:83:7e:83:a9:09:05:1e:0e:c1:56:b0:ae:96:ae:e7:dc:a9:
         08:aa:33:bc:9f:ac:46:c7:c8:35:cc:c7:97:90:3b:38:66:13:
         20:de:2c:32:3a:15:54:b5:fb:21:ea:a3:2a:c2:66:00:e9:24:
         a8:17:1c:20:58:d9:34:b9:a6:0c:67:e4:8f:e7:c8:7a:c1:13:
         31:ac:1b:34:9b:e1:d6:05:56:0e:3c:02:c5:a8:5e:fb:4e:51:
         16:40:0f:03:96:02:44:b3:c3:92:68:29:23:64:8d:92:e0:81:
         f6:02:f4:9c:d6:cc:3d:9a:12:a6:fc:7c:c3:50:06:da:0c:07:
         5d:77:f3:67:18:52:97:c7:08:87:65:75:ca:37:73:08:70:1f:
         6d:82:dc:cf:6a:a3:e4:e9:32:7f:c4:7a:4a:c8:eb:d1:69:28:
         c5:70:38:9c:9a:00:9b:e5:43:82:42:d8:78:4f:90:82:15:40:
         49:a2:30:d4:d9:12:66:4a:db:1c:44:23:8e:1f:29:b7:aa:e4:
         ca:5d:c6:66:f7:af:ef:6e:21:8e:38:0f:ad:6f:11:ef:a5:00:
         82:97:25:57:3b:cc:99:0d:ba:c3:e0:fe:28:bb:b3:12:0a:cb:
         63:e9:94:73:f6:3d:83:40:18:cc:8a:6f:74:b3:c8:76:93:8b:
         db:82:70:85
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEB4VA7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
NjA1NTIxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjljZDQ5ZWEwMzJm
NDEwY2VmNmI2YTVlYmQ2NTY1M2Y4MTJjMTU4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIAOM+i9CBCucDdCGg8QG9jxrD0HvdsBOYCe3p8Agmx+YJw
1qS/4uqPkEYXMLjXJpyk8gOO2BFyhz7yuGsUdsmgXRIdYwnlbAgYyINwpgcDDE+1
wl/ETLgC6mq2bFJ+04WCbzdinxammxn1ZGMlf9t/yy/ayhprlL0n1jdF/yyADvE7
k46R5dGA2mb3XTCdjgxT4+MgY6+5cFALhrW+vZB2obVfqsUGlOl94kPbkU5AQbOq
nbd8Nsz6v7b59CMgWwSfF1edN7O6KzYlpqn/ExU8JQOpNgYNNdbl/vJxFaeDKpXZ
mG+KZQ+dNRj9q9JtEoKTdVf3JO8Fc8UhanjO0jMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5zUnqAy9BDO9ral69ZWU/gSwVgzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzEtYzFKNmdNdlFRenZhMnBldldWbFA0RXNGWU0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vi
LzZmMjMyZS0yMjc1LTQ0ZTktOTFjMC1jNzM5N2EyNjY5YTkvMS9TejJtNlp4bVpS
T2l6dVh3NE5PcmRGOFdmY00uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACX2CAwDQYJKoZIhvcNAQELBQAD
ggEBAJ6DfoOpCQUeDsFWsK6WrufcqQiqM7yfrEbHyDXMx5eQOzhmEyDeLDI6FVS1
+yHqoyrCZgDpJKgXHCBY2TS5pgxn5I/nyHrBEzGsGzSb4dYFVg48AsWoXvtOURZA
DwOWAkSzw5JoKSNkjZLggfYC9JzWzD2aEqb8fMNQBtoMB11382cYUpfHCIdldco3
cwhwH22C3M9qo+TpMn/EekrI69FpKMVwOJyaAJvlQ4JC2HhPkIIVQEmiMNTZEmZK
2xxEI44fKbeq5Mpdxmb3r+9uIY44D61vEe+lAIKXJVc7zJkNusPg/ii7sxIKy2Pp
lHP2PYNAGMyKb3SzyHaTi9uCcIU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org