Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kgwIESqhFnEuowa8OGmRe8lnLRk.roa
File:                     kgwIESqhFnEuowa8OGmRe8lnLRk.roa (raw, json)
Hash identifier:          bEFXdtDdW4PEg//19o//Wtz7x8xGOQbIS7AjlEIx520=
Subject key identifier:   92:0C:08:11:2A:A1:16:71:2E:A3:06:BC:38:69:91:7B:C9:67:2D:19
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0709E8AE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kgwIESqhFnEuowa8OGmRe8lnLRk.roa
Signing time:             Tue 17 May 2022 04:40:29 +0000
ROA not before:           Tue 17 May 2022 04:40:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118089902 (0x709e8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 17 04:40:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=920c08112aa116712ea306bc3869917bc9672d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:04:90:8c:18:2c:84:dc:95:71:70:83:18:
                    7e:a5:d3:85:fc:3c:21:b8:7e:af:f7:fa:1c:a9:6b:
                    98:9c:de:74:95:bb:35:82:22:d8:4a:0d:11:b8:7b:
                    3f:d6:85:27:58:d1:6e:91:eb:3a:8e:51:a0:ea:e0:
                    eb:65:0a:3d:75:d7:16:78:39:0c:1b:a3:c5:f2:f8:
                    93:63:d2:11:05:93:8a:55:90:28:eb:d6:27:6d:09:
                    01:40:2e:79:eb:b0:a4:01:62:13:dd:1d:3c:32:b2:
                    bd:00:35:a2:3a:cf:2b:10:1a:b7:ef:e0:92:98:51:
                    7e:7b:64:23:6b:3f:37:eb:56:2b:c2:6d:fa:10:74:
                    98:e9:b5:fc:ae:89:9a:d2:ea:d0:c9:48:9e:9d:c8:
                    7b:fa:48:b9:ea:a4:9b:4b:33:b3:ce:01:3e:51:52:
                    71:4a:72:33:1d:11:ec:32:c6:99:01:8e:b7:e1:09:
                    8a:7a:c7:22:e6:22:61:89:c6:f7:b8:ad:31:83:3b:
                    b0:b1:57:7a:06:a3:81:9e:99:7b:cc:73:2f:e6:f3:
                    f7:4f:10:41:6c:16:e5:2f:52:38:ab:12:88:91:18:
                    38:d2:c5:95:67:73:78:65:ff:0d:02:67:2a:3e:e0:
                    c9:82:97:a3:06:43:b1:c6:06:50:cd:2c:ce:77:87:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:08:11:2A:A1:16:71:2E:A3:06:BC:38:69:91:7B:C9:67:2D:19
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kgwIESqhFnEuowa8OGmRe8lnLRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d7:77:01:01:dd:f2:50:a0:4b:c1:24:a2:7e:c8:a3:33:4c:
         13:d9:1a:87:88:84:bb:3e:91:7d:9a:e2:5c:1a:32:1f:7c:e2:
         74:c9:00:99:14:4a:bb:49:a7:20:44:a5:3b:8a:e1:c6:8d:1c:
         ac:63:80:cd:be:36:ce:bf:5e:28:ac:fa:a3:10:7c:79:e2:4e:
         b4:88:3c:27:f8:35:be:71:34:8d:d9:89:7c:23:39:bb:13:90:
         5b:2c:44:39:5b:f2:07:74:ae:91:f6:94:80:14:f7:95:bc:57:
         7b:6f:ad:3e:78:58:72:53:a8:75:2b:e3:5e:d5:fa:a4:32:bb:
         76:d9:32:2e:58:b0:28:05:5a:0f:b8:be:bb:32:b1:cf:80:17:
         df:82:aa:eb:6d:53:78:64:6e:10:a0:d3:a2:bf:02:3f:19:41:
         31:41:8b:f3:20:ba:ac:75:3e:95:8d:62:5b:03:3f:cf:a3:0c:
         f4:bf:cf:66:3e:49:68:57:21:e1:34:0b:00:c6:ca:bc:d9:7a:
         53:0e:77:a7:e1:a0:a6:77:5e:65:cf:28:77:7c:ee:e0:7d:03:
         f6:16:8b:cf:4e:b1:60:3d:03:de:62:20:d7:70:bf:a9:53:e7:
         9c:f4:b7:d7:63:54:f7:50:b0:cf:3b:ab:9d:00:5b:46:b1:a2:
         ff:56:99:9c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBwnorjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
NzA0NDAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTIwYzA4MTEyYWEx
MTY3MTJlYTMwNmJjMzg2OTkxN2JjOTY3MmQxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9mBJCMGCyE3JVxcIMYfqXThfw8Ibh+r/f6HKlrmJzedJW7
NYIi2EoNEbh7P9aFJ1jRbpHrOo5RoOrg62UKPXXXFng5DBujxfL4k2PSEQWTilWQ
KOvWJ20JAUAueeuwpAFiE90dPDKyvQA1ojrPKxAat+/gkphRfntkI2s/N+tWK8Jt
+hB0mOm1/K6JmtLq0MlInp3Ie/pIueqkm0szs84BPlFScUpyMx0R7DLGmQGOt+EJ
inrHIuYiYYnG97itMYM7sLFXegajgZ6Ze8xzL+bz908QQWwW5S9SOKsSiJEYONLF
lWdzeGX/DQJnKj7gyYKXowZDscYGUM0szneHxvECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSSDAgRKqEWcS6jBrw4aZF7yWctGTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2tnd0lFU3FoRm5FdW93YThPR21SZThsbkxSay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAoNd3AQHd8lCgS8Ekon7IozNME9kah4iEuz6RfZriXBoyH3zidMkAmRRKu0mn
IESlO4rhxo0crGOAzb42zr9eKKz6oxB8eeJOtIg8J/g1vnE0jdmJfCM5uxOQWyxE
OVvyB3SukfaUgBT3lbxXe2+tPnhYclOodSvjXtX6pDK7dtkyLliwKAVaD7i+uzKx
z4AX34Kq621TeGRuEKDTor8CPxlBMUGL8yC6rHU+lY1iWwM/z6MM9L/PZj5JaFch
4TQLAMbKvNl6Uw53p+GgpndeZc8od3zu4H0D9haLz06xYD0D3mIg13C/qVPnnPS3
12NU91CwzzurnQBbRrGi/1aZnA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org