Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8-PkHmEq_f6-8nRbpaM68JOh4c.roa
File:                     u8-PkHmEq_f6-8nRbpaM68JOh4c.roa (raw, json)
Hash identifier:          /fXVh3Gqrvxaedf16L78kbVI4fXpzyIUUHfL8mBI6z0=
Subject key identifier:   BB:CF:8F:90:79:84:AB:F7:FA:FB:C9:D1:6E:96:8C:EB:C2:4E:87:87
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       080903E5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8-PkHmEq_f6-8nRbpaM68JOh4c.roa
Signing time:             Sun 05 Jun 2022 03:41:27 +0000
ROA not before:           Sun 05 Jun 2022 03:41:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134808549 (0x80903e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  5 03:41:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bbcf8f907984abf7fafbc9d16e968cebc24e8787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:e7:2b:e4:70:d4:57:62:30:e2:b4:55:92:
                    ff:e2:47:62:ba:18:7c:1f:d5:b1:4b:0f:dd:35:8a:
                    78:7b:89:74:f1:f3:b7:65:66:58:14:83:6e:6a:21:
                    91:17:c0:cd:32:53:b6:0c:4a:95:bd:e6:f3:af:7e:
                    61:49:32:f7:33:76:41:ee:96:3e:66:19:b2:9e:94:
                    6f:45:02:d3:6e:10:b5:41:5d:e2:0b:b7:5b:f0:b0:
                    43:e1:f0:22:f8:05:2e:e4:68:e5:52:8d:54:8f:92:
                    cf:d7:63:ea:80:49:e9:bf:f0:3f:46:ad:4f:0c:47:
                    b9:26:60:6d:15:8a:12:d4:fc:30:54:e2:bc:b8:d4:
                    9a:98:c0:69:e4:87:1a:f9:21:fc:57:91:36:db:dc:
                    53:0d:64:0e:21:e7:69:0f:67:02:b2:83:2b:54:e7:
                    06:70:dd:e9:04:4a:ad:06:19:99:11:96:6b:c5:27:
                    8e:51:62:6d:3c:7f:ed:91:cb:d9:c2:19:f2:76:6f:
                    37:8b:31:59:de:0b:61:3f:1c:2e:50:03:eb:9c:3d:
                    14:28:7d:dd:ee:dd:6a:35:46:49:1c:57:58:88:61:
                    d2:ab:99:d1:09:5b:9d:7a:2d:b3:47:04:1e:a9:a5:
                    ea:6a:4e:37:bb:5c:73:3a:1d:29:24:17:eb:40:70:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:8F:90:79:84:AB:F7:FA:FB:C9:D1:6E:96:8C:EB:C2:4E:87:87
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8-PkHmEq_f6-8nRbpaM68JOh4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:23:5c:cd:50:c2:65:78:c1:d9:d6:ee:37:e3:44:9f:f5:16:
         6f:05:20:d2:04:3c:76:4a:a1:16:3f:a7:23:0f:b4:1e:5f:da:
         9c:17:33:2e:5a:81:3f:ff:3a:39:67:f1:ba:49:d0:06:c4:59:
         15:b9:55:ff:46:ec:c3:70:44:1d:ae:75:2b:82:e5:4e:36:f8:
         20:7b:54:31:c3:7a:8e:4e:f2:19:2d:1a:2e:f5:ca:c4:f3:a0:
         11:c5:c0:2f:09:b4:5b:cf:6d:6e:1c:6e:36:de:dd:13:3b:1d:
         9f:8b:fd:d2:1c:8e:03:c7:b4:78:56:c1:8e:e4:d7:b7:53:bd:
         98:6f:66:74:85:03:85:f3:17:0b:e2:2a:77:85:77:7a:ae:6a:
         c6:69:fe:29:d5:62:dc:4d:4f:8d:1d:1f:b6:eb:93:1f:98:a7:
         e0:b5:26:06:40:71:73:e5:f1:11:29:67:bf:ee:13:88:00:aa:
         aa:f6:d2:51:29:9a:ea:19:7c:3a:a1:61:67:f3:46:2e:3e:31:
         3f:d3:c3:d6:5a:17:23:c3:a7:68:3f:e6:18:57:b9:3c:b8:eb:
         64:77:c7:71:ee:b2:54:5b:27:05:51:72:ff:4d:3d:e4:ec:33:
         da:c2:37:59:99:81:91:03:9b:79:b3:09:50:12:7b:01:35:d3:
         c6:7b:3d:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECAkD5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYw
NTAzNDEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmJjZjhmOTA3OTg0
YWJmN2ZhZmJjOWQxNmU5NjhjZWJjMjRlODc4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCS5yvkcNRXYjDitFWS/+JHYroYfB/VsUsP3TWKeHuJdPHz
t2VmWBSDbmohkRfAzTJTtgxKlb3m869+YUky9zN2Qe6WPmYZsp6Ub0UC024QtUFd
4gu3W/CwQ+HwIvgFLuRo5VKNVI+Sz9dj6oBJ6b/wP0atTwxHuSZgbRWKEtT8MFTi
vLjUmpjAaeSHGvkh/FeRNtvcUw1kDiHnaQ9nArKDK1TnBnDd6QRKrQYZmRGWa8Un
jlFibTx/7ZHL2cIZ8nZvN4sxWd4LYT8cLlAD65w9FCh93e7dajVGSRxXWIhh0quZ
0QlbnXots0cEHqml6mpON7tcczodKSQX60Bw07cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS7z4+QeYSr9/r7ydFulozrwk6HhzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3U4LVBrSG1FcV9mNi04blJicGFNNjhKT2g0Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAECNczVDCZXjB2dbuN+NEn/UWbwUg0gQ8dkqhFj+nIw+0Hl/anBczLlqBP/86
OWfxuknQBsRZFblV/0bsw3BEHa51K4LlTjb4IHtUMcN6jk7yGS0aLvXKxPOgEcXA
Lwm0W89tbhxuNt7dEzsdn4v90hyOA8e0eFbBjuTXt1O9mG9mdIUDhfMXC+Iqd4V3
eq5qxmn+KdVi3E1PjR0ftuuTH5in4LUmBkBxc+XxESlnv+4TiACqqvbSUSma6hl8
OqFhZ/NGLj4xP9PD1loXI8OnaD/mGFe5PLjrZHfHce6yVFsnBVFy/0095Owz2sI3
WZmBkQObebMJUBJ7ATXTxns9RA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org