Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RjQugukp3OwqG1zm-HACvc76PP4.roa
File:                     RjQugukp3OwqG1zm-HACvc76PP4.roa (raw, json)
Hash identifier:          tZpRHEMGZAVCn4Iz1gcAKotgkFKbjANYHp1wKcTt6gU=
Subject key identifier:   46:34:2E:82:E9:29:DC:EC:2A:1B:5C:E6:F8:70:02:BD:CE:FA:3C:FE
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06C1DDA1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RjQugukp3OwqG1zm-HACvc76PP4.roa
Signing time:             Wed 11 May 2022 02:49:02 +0000
ROA not before:           Wed 11 May 2022 02:49:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113368481 (0x6c1dda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 11 02:49:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46342e82e929dcec2a1b5ce6f87002bdcefa3cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:77:8e:bc:50:23:0f:51:13:9d:61:62:83:
                    a2:35:a4:48:f8:ae:89:5a:02:e6:e3:43:27:08:40:
                    e9:7e:dc:ae:2a:18:e4:1b:25:9b:ea:3d:7b:81:30:
                    dd:11:61:52:6e:f8:18:b9:f2:e5:29:0d:25:e1:2f:
                    c3:1d:28:7c:7b:0a:00:38:d1:99:bf:6e:4a:11:6a:
                    13:8f:64:d4:aa:dc:1d:e9:e9:08:0b:e9:cc:a3:18:
                    8f:eb:c4:a1:1f:32:a5:a1:91:30:14:eb:83:9d:02:
                    99:3c:16:93:6b:2e:af:b5:52:e7:b1:b6:08:a6:3e:
                    15:a3:2f:68:84:bf:23:fd:bb:b0:38:08:53:fc:46:
                    4b:6e:66:3b:b2:7d:2a:d4:45:81:05:80:e5:1d:be:
                    5d:e8:b6:4e:f4:6c:76:d9:95:f2:bc:f7:67:26:06:
                    45:26:b6:8f:d9:bc:90:1c:6f:58:38:6f:8b:f1:2c:
                    48:9d:e1:44:e9:70:d5:9b:33:2b:e7:6d:24:3f:a2:
                    1f:5b:25:a0:f5:cb:ae:e6:37:d7:fd:0a:42:15:87:
                    0c:fa:ba:33:c7:d0:dc:ec:be:0f:d4:19:f1:6f:5e:
                    a3:d9:9c:8f:4c:3f:fe:a4:55:a7:2f:4d:a9:95:d2:
                    ba:ff:08:88:ed:fc:da:b3:a5:8a:64:a7:f8:57:7d:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:34:2E:82:E9:29:DC:EC:2A:1B:5C:E6:F8:70:02:BD:CE:FA:3C:FE
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RjQugukp3OwqG1zm-HACvc76PP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:6e:16:99:42:39:b6:f8:55:9d:67:0e:61:9f:5a:23:1f:
         e2:6b:24:05:2e:9a:70:b7:23:b7:87:f6:09:04:c7:71:13:0a:
         cd:d4:90:a4:f0:0e:f9:17:50:cc:7d:6c:97:17:52:0f:a2:0b:
         a0:94:09:6f:c4:2d:9d:12:fa:fa:03:08:c4:c7:2c:1e:a5:af:
         4f:dc:43:fb:a4:d3:66:17:6a:79:f5:fe:60:d4:bc:3e:6b:b0:
         73:6b:36:a4:0a:5f:a5:74:8a:80:66:f8:86:83:89:f0:14:a9:
         f8:1e:15:75:f2:8e:93:23:b7:72:47:f6:c9:df:08:e3:5e:47:
         2c:31:a5:06:f6:5e:1f:36:b8:7b:e5:eb:45:27:4b:51:93:c0:
         73:8a:62:f1:bd:84:59:16:fc:fe:6e:2e:c6:c4:d8:62:97:94:
         35:8c:d9:62:64:a8:31:ba:9a:af:84:78:07:b0:2d:bb:34:b9:
         56:fd:c3:c2:2a:b4:72:39:74:53:e3:19:a7:21:a8:b4:7f:d4:
         a3:93:c0:81:61:0d:cb:94:0f:02:04:24:5e:6c:29:ac:6f:1a:
         b4:66:e7:e6:21:5a:71:47:4c:45:1e:65:1f:c6:66:40:a3:26:
         83:52:8d:50:45:71:5c:11:d9:4c:8a:9a:cd:e1:5d:7e:dc:ea:
         ec:50:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org