Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/FBeBS636Vs6q8FdwP2QkjjzJTFM.roa
File:                     FBeBS636Vs6q8FdwP2QkjjzJTFM.roa (raw, json)
Hash identifier:          FDKf4yqSYKI7CKcA6uBMWwRXkiWwYLhK0+0u1Q6PT5A=
Subject key identifier:   14:17:81:4B:AD:FA:56:CE:AA:F0:57:70:3F:64:24:8E:3C:C9:4C:53
Certificate issuer:       /CN=c28b7e9b1c317d351e37623661a38c693e2df291
Certificate serial:       01857295A44A2592C8A3CDB3DAB00839E365
Authority key identifier: C2:8B:7E:9B:1C:31:7D:35:1E:37:62:36:61:A3:8C:69:3E:2D:F2:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wot-mxwxfTUeN2I2YaOMaT4t8pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/FBeBS636Vs6q8FdwP2QkjjzJTFM.roa
Signing time:             Mon 02 Jan 2023 13:04:47 +0000
ROA not before:           Mon 02 Jan 2023 13:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200436
IP address blocks:        62.3.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:95:a4:4a:25:92:c8:a3:cd:b3:da:b0:08:39:e3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28b7e9b1c317d351e37623661a38c693e2df291
        Validity
            Not Before: Jan  2 13:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1417814badfa56ceaaf057703f64248e3cc94c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:d9:4d:10:bb:26:21:68:3d:27:01:5d:6a:
                    5c:a2:1c:33:ef:38:01:14:f2:44:ec:90:29:ac:c3:
                    1c:e7:7e:b4:05:10:f3:14:41:10:e2:f8:4a:48:e8:
                    10:b0:b8:fd:96:b0:d7:0a:c2:ad:26:c2:b9:39:d2:
                    65:54:e5:0f:c7:4e:a2:2c:93:f3:10:38:9a:fc:c3:
                    3a:3d:13:c7:f0:49:28:65:4e:96:6f:86:27:4b:1c:
                    61:50:ea:96:71:3e:b7:07:ce:7c:97:1c:ce:8e:2f:
                    cf:86:81:40:75:22:c0:d0:a1:2b:60:87:6a:44:1d:
                    ec:b6:22:41:26:a6:c0:0c:ec:cd:f9:03:bc:e0:ef:
                    9b:12:dc:9e:e9:1e:f5:33:9b:7e:6f:46:9d:46:02:
                    d3:11:ec:3f:46:11:be:b2:cf:79:9c:b7:d9:18:fc:
                    4e:17:d7:ec:81:8c:bb:e1:61:75:32:44:b4:b6:8b:
                    4c:29:b1:12:5b:4c:b0:a6:38:21:db:58:c5:90:87:
                    40:4d:f3:48:cc:da:31:62:ee:40:d3:05:cb:a4:6e:
                    1d:21:99:aa:ab:e4:a3:fd:de:3b:05:93:21:14:e7:
                    01:70:d3:d9:fc:79:cd:0d:94:74:bf:63:73:c4:e0:
                    01:c5:72:d2:55:07:96:33:7d:01:66:1e:4f:3d:47:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:17:81:4B:AD:FA:56:CE:AA:F0:57:70:3F:64:24:8E:3C:C9:4C:53
            X509v3 Authority Key Identifier:
                keyid:C2:8B:7E:9B:1C:31:7D:35:1E:37:62:36:61:A3:8C:69:3E:2D:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wot-mxwxfTUeN2I2YaOMaT4t8pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/FBeBS636Vs6q8FdwP2QkjjzJTFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/wot-mxwxfTUeN2I2YaOMaT4t8pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:7b:6e:cb:c0:01:cf:07:6b:d7:a5:c5:63:ae:7d:3f:70:07:
         86:ac:8f:2e:85:27:0b:98:6a:d8:93:06:af:0f:f1:6f:ca:93:
         93:52:d1:b7:8f:33:1d:e2:90:0b:8d:69:6e:be:13:ba:cd:7b:
         26:b4:41:6c:4c:a7:e0:43:a9:3c:ec:70:14:f4:71:71:bd:fc:
         00:80:59:9e:b5:06:7f:78:16:c5:16:b4:72:84:15:c0:ff:9c:
         54:8b:c1:9c:c8:cf:33:b3:9a:08:95:e9:94:25:cb:bb:d3:fa:
         5c:c3:ef:fb:3b:3d:f6:78:f7:8a:ce:72:29:ba:47:dc:a6:51:
         68:aa:53:ff:46:af:f2:91:5c:5d:7b:68:c4:dd:da:b4:13:98:
         67:85:47:dd:f0:c0:5d:db:10:19:41:b0:c0:9c:70:b1:b4:7b:
         b6:c8:a3:82:95:4d:fe:ab:f8:0c:52:a2:75:63:11:c6:5a:db:
         af:b9:04:64:bf:b2:91:55:7b:e0:34:f5:89:89:d8:c8:37:9a:
         29:57:e8:71:1c:6d:30:20:e6:2b:30:00:d8:e2:b2:c1:a8:7f:
         ec:39:8e:f7:6b:6d:80:47:10:c1:47:64:c2:97:5e:72:86:fd:
         01:25:c2:f3:ed:85:67:e4:65:22:9e:73:38:61:e6:d8:3b:28:
         c9:78:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:05 2024 by rpki-client on console-ams.rpki-client.org