Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LYwsSnpXP1dYYt6cRXW27Lovx0c.roa
File:                     LYwsSnpXP1dYYt6cRXW27Lovx0c.roa (raw, json)
Hash identifier:          uHGCarxLOeABAB1HD2O8Q3XBf2qoVXP+dmg8Mu10HqE=
Subject key identifier:   2D:8C:2C:4A:7A:57:3F:57:58:62:DE:9C:45:75:B6:EC:BA:2F:C7:47
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06D20EEA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LYwsSnpXP1dYYt6cRXW27Lovx0c.roa
Signing time:             Thu 12 May 2022 05:45:02 +0000
ROA not before:           Thu 12 May 2022 05:45:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114429674 (0x6d20eea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 12 05:45:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d8c2c4a7a573f575862de9c4575b6ecba2fc747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:aa:03:bf:19:97:99:a1:76:ec:12:10:c8:
                    95:fa:72:75:3f:ae:1e:16:05:72:a0:de:60:c9:9e:
                    a2:22:ba:f6:65:fd:b1:15:0c:d5:b7:4f:15:53:1c:
                    64:52:0d:e8:67:e2:11:3d:76:51:ca:c0:f6:ee:42:
                    69:dd:6d:fc:93:0f:dc:23:31:07:f6:d4:75:c9:c4:
                    11:9e:96:ef:40:46:f9:e4:fe:49:39:3a:33:bb:f8:
                    26:01:c3:7f:64:8e:4f:c6:10:20:1b:40:87:ab:8e:
                    c3:a6:70:70:42:4e:d7:41:27:06:99:36:f1:12:f0:
                    a1:37:ac:c5:01:94:bd:4f:8d:d4:06:d9:bf:b9:c9:
                    72:e8:1c:b5:24:77:ec:10:52:27:48:73:bd:03:8f:
                    ca:f9:9d:4a:f2:46:45:90:01:b2:0d:b0:a4:d4:de:
                    78:08:f6:ba:4f:29:b5:b4:b5:2c:bf:04:2d:47:dd:
                    f8:d3:2a:2d:f5:76:71:9c:c9:21:9c:ae:ef:db:97:
                    e5:93:04:07:f8:f5:f9:33:29:56:43:37:59:30:bc:
                    62:30:25:c2:03:64:ea:87:47:d5:ca:ca:1d:f6:76:
                    1c:8a:29:ed:5d:66:1c:06:4a:af:a2:05:66:8a:32:
                    36:38:46:e7:9c:a0:06:ea:df:21:fe:66:a0:82:d5:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:2C:4A:7A:57:3F:57:58:62:DE:9C:45:75:B6:EC:BA:2F:C7:47
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LYwsSnpXP1dYYt6cRXW27Lovx0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:28:c8:6b:27:cc:b0:29:4f:49:fd:9b:8f:2f:06:c9:d9:e9:
         84:f6:93:e7:92:eb:d2:00:56:2b:2f:7f:d0:01:3a:6e:c7:b7:
         2b:74:13:5c:00:af:8c:31:e8:07:c4:7c:f9:f0:0f:01:0a:af:
         5c:b1:85:54:93:34:1a:c0:35:9a:b5:73:b9:8b:d2:5e:2e:c3:
         26:e6:a9:b4:26:2f:45:b9:b5:07:48:91:73:3b:8a:14:2c:7d:
         96:64:cf:51:87:47:40:d4:d9:13:94:1d:e5:ee:f1:ee:b2:df:
         92:22:b3:c5:c1:cc:86:ce:f9:73:6b:0c:38:67:d7:a9:4d:85:
         8a:ac:fe:0b:e1:19:06:e3:e0:9a:9a:5b:fb:20:bf:80:f4:1d:
         87:b6:32:11:94:9c:0e:fb:8c:da:37:a6:28:89:5f:58:51:75:
         61:76:cf:df:07:2d:4b:35:5f:05:61:ae:3b:6f:1a:88:3c:9c:
         34:ed:28:96:19:3e:0d:cf:79:e9:ad:3b:c9:46:20:6a:b2:79:
         80:a3:9a:c5:56:bf:e2:19:fb:b8:d4:50:34:c8:49:5e:03:69:
         96:4e:27:ba:51:e5:4c:67:ae:4c:6d:fa:a8:26:a1:c8:d5:d7:
         f1:3b:89:fe:40:ee:be:62:6f:c4:2f:03:3d:79:1c:4f:5d:a5:
         b6:a1:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org