Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/90lgcf6pKsfGazc1Iiy_CO99qts.roa
File:                     90lgcf6pKsfGazc1Iiy_CO99qts.roa (raw, json)
Hash identifier:          GxG2IXh8SL08aNMIZi41JEGlcqHZeX67SZGW/JZiAm4=
Subject key identifier:   F7:49:60:71:FE:A9:2A:C7:C6:6B:37:35:22:2C:BF:08:EF:7D:AA:DB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05CF3C82
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/90lgcf6pKsfGazc1Iiy_CO99qts.roa
Signing time:             Mon 11 Apr 2022 11:43:29 +0000
ROA not before:           Mon 11 Apr 2022 11:43:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97467522 (0x5cf3c82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 11 11:43:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7496071fea92ac7c66b3735222cbf08ef7daadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:36:22:10:5a:7a:96:8a:35:ac:64:eb:6b:
                    75:d3:27:0f:ad:09:e2:1a:2a:73:87:f1:18:df:a8:
                    dc:f4:7e:fa:6b:98:7a:de:81:53:82:6e:97:af:bb:
                    7d:b0:26:c2:6e:a8:aa:d9:ec:62:88:83:ad:c7:5b:
                    bb:86:f3:2b:de:1b:d2:e7:9e:b9:f1:38:b5:12:75:
                    2c:d1:63:13:d7:95:3b:4b:b7:e4:e0:75:e8:d5:80:
                    a7:3f:af:64:bf:10:9b:0e:bb:e4:01:dc:8d:92:42:
                    3a:74:bb:7a:8f:e1:7f:4d:e9:1d:5d:b9:72:8f:98:
                    e8:19:d6:d6:e7:dd:54:7f:0f:32:58:85:69:85:76:
                    00:97:6c:ae:e4:61:d7:07:ca:d3:5d:30:8d:34:02:
                    30:a4:46:1b:37:54:38:c6:5f:42:56:66:b3:c9:24:
                    36:31:35:13:32:4d:f0:48:79:52:5c:b4:aa:95:80:
                    f3:4f:3c:62:7f:73:d1:3e:d7:ac:7d:5f:5b:b9:2c:
                    dc:b1:f5:ee:8f:1d:8c:28:24:cd:2d:a8:16:2c:de:
                    77:ea:e6:f6:62:12:1e:88:dd:af:b9:de:a3:14:56:
                    22:60:8c:55:26:3f:58:11:01:b3:d2:e5:ee:8d:b5:
                    cc:3d:0a:2a:c6:16:36:40:e8:ab:57:1d:0b:57:f5:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:49:60:71:FE:A9:2A:C7:C6:6B:37:35:22:2C:BF:08:EF:7D:AA:DB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/90lgcf6pKsfGazc1Iiy_CO99qts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         8f:46:ba:b8:17:01:9d:d0:dd:5b:9f:a5:b9:6e:6f:74:26:34:
         6c:11:a7:e8:7c:fb:3e:30:ef:ec:ba:16:ab:e0:97:2a:78:80:
         8f:94:49:64:85:ca:5d:c1:b5:27:9b:55:f9:3d:ad:74:56:1c:
         7b:81:e7:2c:b4:a2:ba:bd:66:2a:e8:2b:25:d0:24:91:f4:7c:
         64:ef:ff:74:90:25:05:41:5e:1e:9a:cc:cb:cd:93:72:da:65:
         1f:05:1c:18:ba:8f:97:70:3a:56:db:83:7d:8c:64:2c:06:b1:
         1e:f6:48:b5:71:0c:6e:4c:ed:57:9e:6d:c0:b0:d3:31:2c:78:
         a7:f3:fe:c3:6e:ce:b0:86:e9:10:3b:9a:02:cd:77:dc:a3:20:
         e3:d0:f7:e8:32:2d:ad:35:e4:17:38:a2:dc:e2:50:42:26:58:
         9e:38:c5:27:5b:94:3d:aa:03:da:d0:91:a8:7d:46:5f:ba:53:
         d1:49:b8:70:bb:c1:42:1e:55:0f:ce:82:33:a2:f6:84:3c:e4:
         63:ed:4d:ee:bd:fc:fd:6e:41:f6:72:e0:10:71:b0:90:a7:41:
         16:d0:51:93:a6:0d:2a:00:54:f5:88:d5:da:ca:14:34:d4:03:
         a8:56:ed:ba:10:fd:8e:40:a5:e7:3b:2a:fd:c9:55:96:e0:84:
         c1:45:e4:df
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBc88gjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQx
MTExNDMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc0OTYwNzFmZWE5
MmFjN2M2NmIzNzM1MjIyY2JmMDhlZjdkYWFkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMP5NiIQWnqWijWsZOtrddMnD60J4hoqc4fxGN+o3PR++muY
et6BU4Jul6+7fbAmwm6oqtnsYoiDrcdbu4bzK94b0ueeufE4tRJ1LNFjE9eVO0u3
5OB16NWApz+vZL8Qmw675AHcjZJCOnS7eo/hf03pHV25co+Y6BnW1ufdVH8PMliF
aYV2AJdsruRh1wfK010wjTQCMKRGGzdUOMZfQlZms8kkNjE1EzJN8Eh5Uly0qpWA
8088Yn9z0T7XrH1fW7ks3LH17o8djCgkzS2oFized+rm9mISHojdr7neoxRWImCM
VSY/WBEBs9Ll7o21zD0KKsYWNkDoq1cdC1f1i08CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT3SWBx/qkqx8ZrNzUiLL8I732q2zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzkwbGdjZjZwS3NmR2F6YzFJaXlfQ085OXF0cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCPRrq4FwGd0N1bn6W5bm90JjRsEafofPs+MO/s
uhar4JcqeICPlElkhcpdwbUnm1X5Pa10Vhx7gecstKK6vWYq6Csl0CSR9Hxk7/90
kCUFQV4emszLzZNy2mUfBRwYuo+XcDpW24N9jGQsBrEe9ki1cQxuTO1Xnm3AsNMx
LHin8/7Dbs6whukQO5oCzXfcoyDj0PfoMi2tNeQXOKLc4lBCJlieOMUnW5Q9qgPa
0JGofUZfulPRSbhwu8FCHlUPzoIzovaEPORj7U3uvfz9bkH2cuAQcbCQp0EW0FGT
pg0qAFT1iNXayhQ01AOoVu26EP2OQKXnOyr9yVWW4ITBReTf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org