Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/WNqdc-JSxtJp_GRquPx0p-1zh84.roa
File:                     WNqdc-JSxtJp_GRquPx0p-1zh84.roa (raw, json)
Hash identifier:          yF6UGJmhKG+tHRY1nZrpRKSIZCNwg+IKrCsd4f/ySUg=
Subject key identifier:   58:DA:9D:73:E2:52:C6:D2:69:FC:64:6A:B8:FC:74:A7:ED:73:87:CE
Certificate issuer:       /CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Certificate serial:       0187BA0CEBBAACA0275EB1ACA0391FE63F64
Authority key identifier: A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/WNqdc-JSxtJp_GRquPx0p-1zh84.roa
Signing time:             Tue 25 Apr 2023 20:13:41 +0000
ROA not before:           Tue 25 Apr 2023 20:13:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7411
IP address blocks:        178.212.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ba:0c:eb:ba:ac:a0:27:5e:b1:ac:a0:39:1f:e6:3f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
        Validity
            Not Before: Apr 25 20:13:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58da9d73e252c6d269fc646ab8fc74a7ed7387ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:00:fa:1e:09:eb:3c:6d:92:bb:a8:85:f2:
                    18:65:a8:85:df:77:2d:6f:dd:89:31:bb:8e:31:10:
                    cd:95:66:5a:c7:07:a3:4d:c1:41:56:c9:f8:02:1a:
                    65:cd:80:b8:e7:01:35:d4:ba:45:e0:bf:c6:b8:f9:
                    4d:26:5e:6b:83:30:d5:5d:14:86:3c:14:5c:ce:c3:
                    ff:be:54:66:11:8a:3d:44:c2:25:b5:5d:ee:79:dd:
                    6e:31:91:c3:86:d1:ec:a8:4e:2e:06:0e:be:b1:20:
                    a7:77:f8:af:f1:f9:af:d8:dd:e9:2b:a2:75:ec:66:
                    af:70:2b:44:77:79:9e:31:e9:9c:0b:c8:59:9e:fa:
                    36:f1:de:d3:35:f5:c8:63:91:48:49:e5:49:12:b7:
                    82:62:f1:b8:20:f7:51:96:12:b9:73:04:d7:93:94:
                    91:22:22:0e:14:0e:f7:fe:b0:dd:76:47:01:e1:2c:
                    5f:fb:a4:5c:24:4f:e3:45:0c:ac:97:91:24:8d:81:
                    f2:23:e1:9b:5e:d7:43:fb:b5:d3:44:5d:3e:55:02:
                    71:f9:03:57:bc:c0:c0:97:c2:95:d1:1d:5a:3d:3b:
                    91:85:e5:bd:09:3e:32:ef:50:4b:bd:bb:f2:d8:4e:
                    d7:3d:eb:48:4d:86:1e:f2:2f:fa:45:94:e2:c5:d5:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DA:9D:73:E2:52:C6:D2:69:FC:64:6A:B8:FC:74:A7:ED:73:87:CE
            X509v3 Authority Key Identifier:
                keyid:A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/WNqdc-JSxtJp_GRquPx0p-1zh84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/qR8eV3yh27jgXA9WpvZ4sepA2M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:54:6d:87:31:88:80:6e:c1:55:98:4d:97:78:15:6c:5f:a6:
         56:0b:ac:5b:32:71:8e:3b:1b:e9:46:bf:cc:a0:27:d3:61:a5:
         58:f4:c6:f5:7e:d5:ed:e1:f4:e9:29:ab:5f:8c:ec:19:6e:5a:
         aa:1a:96:a2:e8:f0:dd:65:7b:80:da:04:3f:6e:20:6d:a4:98:
         82:53:a8:04:b7:2b:29:29:2c:f3:16:3d:f4:8f:58:77:77:86:
         33:79:5f:dd:31:1f:3b:69:87:a7:60:fb:c8:61:62:1f:31:fa:
         16:b7:6b:ba:ba:8c:9d:d9:4e:16:ff:c8:14:d3:e7:28:64:b0:
         21:74:ab:da:7f:ad:3c:b4:29:52:f3:2c:57:ff:60:d2:64:7d:
         51:71:ea:f8:1b:0f:67:ce:a3:79:22:08:45:f9:18:0e:44:f4:
         96:30:01:4c:39:45:a9:06:44:c2:83:1e:4a:03:e6:fa:74:0f:
         cd:1d:fc:7e:72:96:23:93:45:1e:ef:86:f2:97:07:ed:a8:93:
         f4:91:c7:be:2b:97:70:b0:36:9f:bd:e6:5d:a0:73:ab:c1:d4:
         66:90:9a:cb:3b:a5:36:b2:be:08:04:74:ac:81:ca:30:11:25:
         0f:7e:24:9d:32:6c:6e:a0:43:a3:f1:6d:66:4f:7e:93:df:f6:
         ff:41:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:31 2024 by rpki-client on console-ams.rpki-client.org