Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/M3e5EO315_k26WSG1X19V7r0dQg.roa
File:                     M3e5EO315_k26WSG1X19V7r0dQg.roa (raw, json)
Hash identifier:          sjcAY7DJXBBj5RBaFfvM4kHn2nDTXPCPdNuPAg5U8pI=
Subject key identifier:   33:77:B9:10:ED:F5:E7:F9:36:E9:64:86:D5:7D:7D:57:BA:F4:75:08
Certificate issuer:       /CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Certificate serial:       018572834A358AB4F26B6FEB8A2E8A431901
Authority key identifier: A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/M3e5EO315_k26WSG1X19V7r0dQg.roa
Signing time:             Mon 02 Jan 2023 12:44:44 +0000
ROA not before:           Mon 02 Jan 2023 12:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        178.212.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:83:4a:35:8a:b4:f2:6b:6f:eb:8a:2e:8a:43:19:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
        Validity
            Not Before: Jan  2 12:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3377b910edf5e7f936e96486d57d7d57baf47508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:ac:d0:cb:f8:f5:56:4c:5f:4b:b2:6e:3e:
                    f0:f3:44:0b:20:66:44:bb:d9:e5:07:e4:7b:ef:6c:
                    79:86:ef:d8:ed:d9:ee:86:8c:ea:dc:b7:80:97:75:
                    cd:e5:f6:fd:67:11:ce:a0:b0:98:be:35:f7:e8:c0:
                    80:25:85:d1:cf:af:10:fa:35:a0:ca:d9:4d:1b:db:
                    f2:3b:cc:66:3a:9e:93:60:e9:a0:05:31:ce:63:26:
                    fa:82:94:7d:13:c9:73:10:87:19:17:c2:00:bc:dd:
                    b1:75:78:62:86:0f:e0:c1:27:cc:31:7d:2f:d8:ff:
                    53:fa:2c:54:db:05:46:e6:03:4c:18:4f:0d:26:66:
                    c3:c0:a7:e5:c7:cd:c6:f4:39:0f:7d:01:eb:2c:0f:
                    81:c5:6e:80:b6:d3:e9:16:cd:60:38:77:65:21:b4:
                    26:3b:68:90:6d:04:3f:74:75:31:ec:a1:48:d7:26:
                    ad:84:77:99:a1:67:09:c2:42:e9:5d:27:fe:cc:95:
                    40:61:f6:e8:a5:ca:cb:85:74:b4:8a:90:5a:57:78:
                    c0:91:57:8e:82:84:48:e4:b0:11:0e:53:36:b9:1c:
                    0a:fe:ce:66:4e:89:f1:55:42:e1:f8:7e:ad:70:69:
                    63:70:f1:9a:fc:90:7c:9e:74:0a:d0:c0:1a:14:3b:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:B9:10:ED:F5:E7:F9:36:E9:64:86:D5:7D:7D:57:BA:F4:75:08
            X509v3 Authority Key Identifier:
                keyid:A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/M3e5EO315_k26WSG1X19V7r0dQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/qR8eV3yh27jgXA9WpvZ4sepA2M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:28:8b:a1:17:3a:39:a0:f3:b9:af:71:a0:06:c5:78:0e:
         fb:49:4f:93:9d:f1:4f:e4:6f:d8:4c:cc:7f:16:48:06:b6:76:
         d4:66:2c:88:56:cb:7c:24:46:90:9b:51:83:9d:35:94:df:72:
         fb:80:8c:97:83:61:bf:2b:09:64:c5:63:4b:69:41:45:50:a6:
         7f:75:da:d8:39:cc:e1:fa:a4:f5:51:60:73:b4:b7:e9:24:07:
         c7:a8:35:c9:7f:bf:59:02:22:11:bd:62:9a:c6:df:9e:65:c9:
         39:38:15:ed:0b:4f:0a:4b:aa:53:1c:d9:ba:5a:fc:7a:be:99:
         e0:ab:ee:69:8b:14:40:49:cb:28:1e:ed:5f:0e:66:92:0b:35:
         0b:51:9c:28:20:0f:60:51:81:4e:a6:77:0d:b9:f8:61:8a:80:
         35:10:48:f6:a9:4a:51:c5:fb:87:84:d0:35:db:88:57:44:94:
         f3:a4:64:10:e6:db:ce:92:85:25:9f:50:8a:94:6d:e1:e5:22:
         d0:90:61:01:3d:31:df:1f:84:c2:f9:43:d3:50:ee:9a:d6:88:
         72:d2:25:54:be:7b:51:cd:02:48:04:d2:9d:93:e9:f7:cc:9d:
         a5:21:16:92:46:27:08:6d:b2:bc:53:c9:36:43:eb:44:cd:07:
         cc:c4:8e:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyg0o1irTya2/rii6KQxkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MWYxZTU3N2NhMWRiYjhlMDVjMGY1NmE2ZjY3OGIxZWE0
MGQ4Y2UwHhcNMjMwMTAyMTI0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzc3YjkxMGVkZjVlN2Y5MzZlOTY0ODZkNTdkN2Q1N2JhZjQ3NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJKs0Mv49VZMX0uybj7w80QLIGZE
u9nlB+R772x5hu/Y7dnuhozq3LeAl3XN5fb9ZxHOoLCYvjX36MCAJYXRz68Q+jWg
ytlNG9vyO8xmOp6TYOmgBTHOYyb6gpR9E8lzEIcZF8IAvN2xdXhihg/gwSfMMX0v
2P9T+ixU2wVG5gNMGE8NJmbDwKflx83G9DkPfQHrLA+BxW6AttPpFs1gOHdlIbQm
O2iQbQQ/dHUx7KFI1yathHeZoWcJwkLpXSf+zJVAYfbopcrLhXS0ipBaV3jAkVeO
goRI5LARDlM2uRwK/s5mTonxVULh+H6tcGljcPGa/JB8nnQK0MAaFDtSzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDN3uRDt9ef5NulkhtV9fVe69HUIMB8GA1UdIwQY
MBaAFKkfHld8odu44FwPVqb2eLHqQNjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVI4ZVYzeWgyN2pnWEE5V3B2WjRzZXBBMk00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wNDlhMTItZmU5Yi00YzMyLWI2M2Mt
ZWY0Njc0NTYyNTY2LzEvTTNlNUVPMzE1X2syNldTRzFYMTlWN3IwZFFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wNDlhMTItZmU5Yi00YzMyLWI2M2MtZWY0Njc0NTYyNTY2
LzEvcVI4ZVYzeWgyN2pnWEE5V3B2WjRzZXBBMk00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstTgMA0G
CSqGSIb3DQEBCwUAA4IBAQAegSiLoRc6OaDzua9xoAbFeA77SU+TnfFP5G/YTMx/
FkgGtnbUZiyIVst8JEaQm1GDnTWU33L7gIyXg2G/KwlkxWNLaUFFUKZ/ddrYOczh
+qT1UWBztLfpJAfHqDXJf79ZAiIRvWKaxt+eZck5OBXtC08KS6pTHNm6Wvx6vpng
q+5pixRAScsoHu1fDmaSCzULUZwoIA9gUYFOpncNufhhioA1EEj2qUpRxfuHhNA1
24hXRJTzpGQQ5tvOkoUln1CKlG3h5SLQkGEBPTHfH4TC+UPTUO6a1ohy0iVUvntR
zQJIBNKdk+n3zJ2lIRaSRicIbbK8U8k2Q+tEzQfMxI7Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:55 2024 by rpki-client on console-fra.rpki-client.org