Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa
File:                     HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa (raw, json)
Hash identifier:          cFeqByOmyQFGupuNLwlRBDWpYtbLHNAkcy3Scl6RRBI=
Subject key identifier:   1E:03:EC:76:63:66:83:43:BF:CC:E5:FB:2D:F4:C2:D3:F7:EF:7B:86
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0639FAF4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa
Signing time:             Tue 26 Apr 2022 04:50:54 +0000
ROA not before:           Tue 26 Apr 2022 04:50:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104463092 (0x639faf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 26 04:50:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e03ec7663668343bfcce5fb2df4c2d3f7ef7b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:82:5c:72:f1:aa:02:45:60:10:1b:6e:18:
                    89:29:87:82:ba:e2:24:01:8f:de:88:10:25:9c:cb:
                    a0:42:6b:71:b1:0f:fe:16:dc:e7:96:fe:df:bf:87:
                    20:e4:e5:5e:a6:c4:c3:78:93:cb:c5:40:9f:3e:1e:
                    30:9b:60:fd:f2:23:a6:44:9b:75:5d:cc:0b:13:02:
                    4f:d6:13:06:50:1a:9f:ae:aa:52:9b:09:4b:8f:24:
                    10:c3:6c:6a:82:55:f6:c8:79:34:b5:6b:30:7a:a5:
                    52:5f:f8:1b:01:5e:60:f9:71:62:63:01:12:5c:a1:
                    df:03:c3:67:d6:46:f6:81:64:b4:75:41:ca:48:f3:
                    ed:f4:49:89:c2:4d:9d:93:39:9d:3f:be:8b:11:23:
                    2c:04:3a:da:6c:37:48:ba:08:b6:32:3e:51:31:91:
                    49:c3:b3:b1:d1:6b:e3:07:f1:d9:0c:96:9a:b0:31:
                    07:e8:93:29:dc:5d:d8:12:07:c7:24:6c:bf:71:6e:
                    0e:14:9d:85:9c:5d:b2:dd:f4:71:84:84:7f:7c:b3:
                    3d:8a:73:41:f3:3f:48:3b:5c:ad:0c:b7:e1:92:50:
                    ad:98:79:42:2e:c1:2e:93:11:41:07:bc:65:0e:be:
                    b9:06:eb:be:66:7d:4f:b3:ad:3b:6d:1e:ae:75:37:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:03:EC:76:63:66:83:43:BF:CC:E5:FB:2D:F4:C2:D3:F7:EF:7B:86
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HgPsdmNmg0O_zOX7LfTC0_fve4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:38:81:60:ec:9e:82:a2:2b:e1:53:a7:48:1e:9e:83:df:33:
         bf:cb:8c:f6:ac:1c:d6:48:0c:9b:60:9d:04:be:8f:d2:31:c1:
         7b:a0:4c:ab:5c:1d:9a:09:a9:94:a3:1e:4b:13:7d:27:d3:2f:
         b8:e9:4d:a3:f4:93:9c:e7:1b:24:33:ab:16:c8:2d:3a:2c:31:
         5f:f6:43:f4:1b:24:ef:3c:47:37:7b:14:1a:a0:a5:db:d5:5b:
         51:fa:80:3b:32:c6:6c:27:14:0d:64:d8:27:80:6d:40:10:5e:
         8d:ee:5e:39:af:6a:d4:26:2f:77:05:e0:fe:b9:88:35:1d:9c:
         7a:74:fe:c7:5a:0c:9e:c4:fb:58:ce:a0:7b:d5:c5:6f:19:c9:
         1a:6e:ee:1a:62:17:9c:6a:06:da:c9:34:2d:94:a9:b9:ec:a3:
         d7:36:c6:12:50:09:d9:57:39:60:d1:5f:e2:ae:6c:b0:3e:39:
         c5:58:87:dc:e5:80:95:21:ea:cd:49:ef:52:69:c5:37:37:7f:
         42:e6:a3:af:2b:ae:fa:a0:0e:1a:98:d0:25:12:1b:75:e5:90:
         7a:1f:53:33:42:f7:4f:7c:e0:15:db:5d:99:55:3d:84:3a:4b:
         ca:74:ba:06:3d:51:13:cf:63:f7:a4:9a:41:b0:20:cd:34:58:
         0a:c5:77:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBjn69DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQy
NjA0NTA1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWUwM2VjNzY2MzY2
ODM0M2JmY2NlNWZiMmRmNGMyZDNmN2VmN2I4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBwglxy8aoCRWAQG24YiSmHgrriJAGP3ogQJZzLoEJrcbEP
/hbc55b+37+HIOTlXqbEw3iTy8VAnz4eMJtg/fIjpkSbdV3MCxMCT9YTBlAan66q
UpsJS48kEMNsaoJV9sh5NLVrMHqlUl/4GwFeYPlxYmMBElyh3wPDZ9ZG9oFktHVB
ykjz7fRJicJNnZM5nT++ixEjLAQ62mw3SLoItjI+UTGRScOzsdFr4wfx2QyWmrAx
B+iTKdxd2BIHxyRsv3FuDhSdhZxdst30cYSEf3yzPYpzQfM/SDtcrQy34ZJQrZh5
Qi7BLpMRQQe8ZQ6+uQbrvmZ9T7OtO20ernU36pECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQeA+x2Y2aDQ7/M5fst9MLT9+97hjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0hnUHNkbU5tZzBPX3pPWDdMZlRDMF9mdmU0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAmDiBYOyegqIr4VOnSB6eg98zv8uM9qwc1kgMm2CdBL6P0jHBe6BMq1wdmgmp
lKMeSxN9J9MvuOlNo/STnOcbJDOrFsgtOiwxX/ZD9Bsk7zxHN3sUGqCl29VbUfqA
OzLGbCcUDWTYJ4BtQBBeje5eOa9q1CYvdwXg/rmINR2cenT+x1oMnsT7WM6ge9XF
bxnJGm7uGmIXnGoG2sk0LZSpueyj1zbGElAJ2Vc5YNFf4q5ssD45xViH3OWAlSHq
zUnvUmnFNzd/Quajryuu+qAOGpjQJRIbdeWQeh9TM0L3T3zgFdtdmVU9hDpLynS6
Bj1RE89j96SaQbAgzTRYCsV34w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org