Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bkkgLQCk8NYSt40M1AhH7xrgKvc.roa
File:                     bkkgLQCk8NYSt40M1AhH7xrgKvc.roa (raw, json)
Hash identifier:          P4hcH1efr9gVxBNGr8kZKovGsaiH7sxjqW1pRL7bms0=
Subject key identifier:   6E:49:20:2D:00:A4:F0:D6:12:B7:8D:0C:D4:08:47:EF:1A:E0:2A:F7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08AAE438
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bkkgLQCk8NYSt40M1AhH7xrgKvc.roa
Signing time:             Fri 17 Jun 2022 12:40:44 +0000
ROA not before:           Fri 17 Jun 2022 12:40:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145417272 (0x8aae438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 17 12:40:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e49202d00a4f0d612b78d0cd40847ef1ae02af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:29:19:94:7d:11:3d:96:50:ea:4a:73:5a:
                    62:e4:7a:2e:cb:9e:52:e5:f6:07:3f:be:20:26:82:
                    54:57:ab:31:1c:4e:d0:a9:c8:f5:d8:56:a6:02:61:
                    72:6b:ec:bf:0c:44:b9:8f:53:83:6a:01:bc:87:33:
                    7e:42:17:b0:57:af:8d:67:57:31:b6:e2:d5:a2:e4:
                    9c:6f:3e:35:07:8b:31:f9:cb:f6:01:96:68:f7:0d:
                    ee:c2:37:29:9c:1d:64:1d:6c:92:db:32:e3:bc:32:
                    ec:1f:26:84:d6:9e:60:d6:d3:ae:dc:0c:ed:1c:03:
                    17:03:7b:15:a6:08:7b:c0:a2:1f:1c:38:4a:84:78:
                    e7:84:ea:0e:aa:05:42:e4:15:8d:00:d5:d6:37:aa:
                    cd:53:dd:8e:44:1b:1b:91:3f:d2:c8:54:42:a5:92:
                    0e:ba:d1:bc:86:4a:6a:b1:3f:4c:d4:f7:95:d8:e8:
                    d0:9a:fc:9a:d8:99:92:8d:25:1d:e2:6f:a3:89:09:
                    a8:0f:bd:f2:f7:81:bb:3b:6d:f9:50:68:1b:cc:22:
                    a6:f0:35:10:53:e2:97:8a:42:cc:20:4e:50:67:7f:
                    d7:ae:39:9d:e3:ad:2d:fd:af:23:e1:43:d7:26:5d:
                    96:a0:ed:60:56:05:63:4b:5a:47:fc:24:c8:ac:10:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:49:20:2D:00:A4:F0:D6:12:B7:8D:0C:D4:08:47:EF:1A:E0:2A:F7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bkkgLQCk8NYSt40M1AhH7xrgKvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:40:af:e2:ff:40:f4:6f:fe:72:6d:23:ed:e3:f2:4a:28:94:
         41:f1:f7:eb:67:96:f4:b5:b3:ae:9a:8a:f2:a3:0e:0f:6c:41:
         c2:64:2c:f3:60:e8:01:23:8a:68:97:af:de:b0:dd:ce:f2:96:
         f0:7b:52:0d:d3:f9:36:3e:6f:87:a3:8c:9e:77:24:ee:55:4b:
         83:69:e8:7b:87:0d:7d:4c:af:b8:af:b7:44:d5:0e:89:31:e4:
         85:1c:5d:5e:2f:4d:89:ae:d3:aa:76:84:71:46:21:e1:ea:d7:
         b9:21:82:42:10:e1:f1:51:93:77:69:55:6e:3e:24:a1:3a:a2:
         10:ad:97:3a:e7:f3:03:71:75:bc:60:33:4e:e2:24:fc:3b:24:
         b0:b4:7f:99:a7:d7:ec:18:08:45:f0:ab:72:07:ce:16:16:0d:
         59:ca:67:00:21:5a:62:ca:77:51:4e:a5:d1:92:0d:09:b9:46:
         f2:68:62:44:d4:47:d3:31:23:76:14:10:c8:e8:9a:e2:42:c8:
         d2:c1:7e:08:bf:23:81:e4:3f:13:c7:65:86:d2:76:8b:53:80:
         26:a2:2c:69:76:e4:22:70:ca:b7:4d:88:66:53:83:40:fd:ce:
         73:71:e9:f1:8a:16:a5:0d:e5:89:32:1f:df:fe:bf:b5:20:01:
         20:73:20:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECKrkODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
NzEyNDA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmU0OTIwMmQwMGE0
ZjBkNjEyYjc4ZDBjZDQwODQ3ZWYxYWUwMmFmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGVKRmUfRE9llDqSnNaYuR6LsueUuX2Bz++ICaCVFerMRxO
0KnI9dhWpgJhcmvsvwxEuY9Tg2oBvIczfkIXsFevjWdXMbbi1aLknG8+NQeLMfnL
9gGWaPcN7sI3KZwdZB1sktsy47wy7B8mhNaeYNbTrtwM7RwDFwN7FaYIe8CiHxw4
SoR454TqDqoFQuQVjQDV1jeqzVPdjkQbG5E/0shUQqWSDrrRvIZKarE/TNT3ldjo
0Jr8mtiZko0lHeJvo4kJqA+98veBuztt+VBoG8wipvA1EFPil4pCzCBOUGd/1645
neOtLf2vI+FD1yZdlqDtYFYFY0taR/wkyKwQ+V0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRuSSAtAKTw1hK3jQzUCEfvGuAq9zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2Jra2dMUUNrOE5ZU3Q0ME0xQWhIN3hyZ0t2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBWQK/i/0D0b/5ybSPt4/JKKJRB8ffrZ5b0tbOu
moryow4PbEHCZCzzYOgBI4pol6/esN3O8pbwe1IN0/k2Pm+Ho4yedyTuVUuDaeh7
hw19TK+4r7dE1Q6JMeSFHF1eL02JrtOqdoRxRiHh6te5IYJCEOHxUZN3aVVuPiSh
OqIQrZc65/MDcXW8YDNO4iT8OySwtH+Zp9fsGAhF8KtyB84WFg1ZymcAIVpiyndR
TqXRkg0JuUbyaGJE1EfTMSN2FBDI6JriQsjSwX4IvyOB5D8Tx2WG0naLU4Amoixp
duQicMq3TYhmU4NA/c5zcenxihalDeWJMh/f/r+1IAEgcyAP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org