Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N3ZLJomYzJ3OIDUoSWgJDH2RHDE.roa
File:                     N3ZLJomYzJ3OIDUoSWgJDH2RHDE.roa (raw, json)
Hash identifier:          ncjRgzsTn+2yevVZoJe3UdFCZT1YwZrzEwGeZ0E6O8o=
Subject key identifier:   37:76:4B:26:89:98:CC:9D:CE:20:35:28:49:68:09:0C:7D:91:1C:31
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       086E6725
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N3ZLJomYzJ3OIDUoSWgJDH2RHDE.roa
Signing time:             Mon 13 Jun 2022 04:51:02 +0000
ROA not before:           Mon 13 Jun 2022 04:51:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141453093 (0x86e6725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 13 04:51:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37764b268998cc9dce2035284968090c7d911c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:e2:a7:ec:9e:ae:e0:7d:74:e9:cb:7c:f5:
                    88:bf:bf:d0:79:e0:8c:ea:8c:fe:81:92:5c:6c:46:
                    e5:a9:dc:37:db:0c:0b:bf:ce:a5:a6:2e:0e:37:26:
                    ce:e2:6c:4c:1e:90:c0:62:3b:78:12:2d:31:03:20:
                    65:d8:ac:a1:a6:57:14:32:31:bb:16:73:92:85:3a:
                    6d:f1:a4:6d:e5:82:c6:15:49:94:50:d5:b6:1c:d5:
                    47:b9:4f:3d:01:1d:d9:bf:93:1e:c5:78:a7:92:95:
                    3a:e3:15:23:6a:5c:7f:79:cc:ec:48:3d:4b:b6:df:
                    e0:88:cf:d5:f0:c2:7e:4f:e5:59:8d:9e:d2:a4:64:
                    aa:c4:6c:6a:43:7e:99:f2:0a:27:a4:89:c8:df:e2:
                    2b:9a:a7:f3:21:55:a4:f7:69:ed:7a:15:06:da:c5:
                    9f:e9:1a:bb:20:9d:3f:da:72:eb:e9:7e:4f:a3:7e:
                    f4:fd:86:94:4c:c0:df:ce:a2:e0:dc:40:e6:d3:3d:
                    68:39:ad:06:2c:83:21:e7:ff:dd:52:a0:8f:d5:7a:
                    7e:04:28:e7:e1:b7:96:4c:c8:11:03:62:94:2b:0d:
                    d6:ea:27:c0:cc:b5:c0:47:2b:aa:fd:e6:f2:20:82:
                    f6:71:07:94:37:e6:27:6b:ec:63:ea:08:de:7b:71:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:4B:26:89:98:CC:9D:CE:20:35:28:49:68:09:0C:7D:91:1C:31
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N3ZLJomYzJ3OIDUoSWgJDH2RHDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:38:63:67:ab:11:34:f9:e2:44:f8:2c:06:20:31:45:6d:
         27:b8:17:e0:49:59:11:4b:a6:2b:96:56:e1:95:b5:36:80:b4:
         b1:2c:6e:44:7e:36:df:40:0d:2a:45:e6:ff:26:47:c0:3d:c8:
         ef:70:c8:70:e8:c5:56:60:db:87:d4:9a:d7:78:35:3e:35:a1:
         48:f4:d1:50:5d:14:de:12:71:7c:00:9b:1b:14:fb:a0:09:b2:
         fe:2e:ca:fc:2d:c8:77:b0:09:2d:78:3a:88:2b:88:af:51:3f:
         61:5a:32:4f:80:0c:60:18:72:12:96:72:6a:bb:3f:f2:54:40:
         a8:7b:77:8f:70:1d:b7:80:c2:e9:87:84:6a:a4:24:63:2d:69:
         39:34:aa:fd:f7:0e:bd:19:90:ac:dc:31:d5:77:84:64:ef:ab:
         3b:60:9d:9c:36:a7:d9:cd:bd:1a:ab:8e:92:6d:64:63:13:27:
         8b:a2:b1:ba:fc:1f:63:2f:22:32:78:e7:c7:bb:21:9d:dd:8c:
         dc:f2:17:29:15:bc:54:04:20:e0:50:8c:b6:5d:23:2b:19:21:
         d3:df:5a:59:3e:9b:01:27:40:ca:64:64:2c:89:1a:5b:f3:ca:
         ae:9f:c8:14:b2:49:02:53:13:51:8f:62:0b:4a:f1:d4:75:ad:
         ff:75:9c:52
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECG5nJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
MzA0NTEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc3NjRiMjY4OTk4
Y2M5ZGNlMjAzNTI4NDk2ODA5MGM3ZDkxMWMzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFu4qfsnq7gfXTpy3z1iL+/0HngjOqM/oGSXGxG5ancN9sM
C7/OpaYuDjcmzuJsTB6QwGI7eBItMQMgZdisoaZXFDIxuxZzkoU6bfGkbeWCxhVJ
lFDVthzVR7lPPQEd2b+THsV4p5KVOuMVI2pcf3nM7Eg9S7bf4IjP1fDCfk/lWY2e
0qRkqsRsakN+mfIKJ6SJyN/iK5qn8yFVpPdp7XoVBtrFn+kauyCdP9py6+l+T6N+
9P2GlEzA386i4NxA5tM9aDmtBiyDIef/3VKgj9V6fgQo5+G3lkzIEQNilCsN1uon
wMy1wEcrqv3m8iCC9nEHlDfmJ2vsY+oI3ntxkS0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ3dksmiZjMnc4gNShJaAkMfZEcMTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L04zWkxKb21ZekozT0lEVW9TV2dKREgyUkhERS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAb5A4Y2erETT54kT4LAYgMUVtJ7gX4ElZEUumK5ZW4ZW1NoC0sSxuRH4230AN
KkXm/yZHwD3I73DIcOjFVmDbh9Sa13g1PjWhSPTRUF0U3hJxfACbGxT7oAmy/i7K
/C3Id7AJLXg6iCuIr1E/YVoyT4AMYBhyEpZyars/8lRAqHt3j3Adt4DC6YeEaqQk
Yy1pOTSq/fcOvRmQrNwx1XeEZO+rO2CdnDan2c29GquOkm1kYxMni6KxuvwfYy8i
Mnjnx7shnd2M3PIXKRW8VAQg4FCMtl0jKxkh099aWT6bASdAymRkLIkaW/PKrp/I
FLJJAlMTUY9iC0rx1HWt/3WcUg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org