Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/_JYxCR92SutK9fjXmVFSecGLNQw.roa
File:                     _JYxCR92SutK9fjXmVFSecGLNQw.roa (raw, json)
Hash identifier:          eC2Jb5Frx2QqEQqGoJfijXdP8R8BFyrFct9eQ4Cg49I=
Subject key identifier:   FC:96:31:09:1F:76:4A:EB:4A:F5:F8:D7:99:51:52:79:C1:8B:35:0C
Certificate issuer:       /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial:       018CB5996570F1C480EB2410B8F40512694D
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/_JYxCR92SutK9fjXmVFSecGLNQw.roa
Signing time:             Fri 29 Dec 2023 12:42:58 +0000
ROA not before:           Fri 29 Dec 2023 12:42:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206995
IP address blocks:        45.80.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b5:99:65:70:f1:c4:80:eb:24:10:b8:f4:05:12:69:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
        Validity
            Not Before: Dec 29 12:42:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc9631091f764aeb4af5f8d799515279c18b350c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:4f:75:aa:85:29:aa:94:8c:b6:a2:2e:f7:
                    5f:5c:0e:53:d8:57:b9:d9:d7:21:c8:6b:a9:85:73:
                    ca:fd:9c:aa:b5:f0:d7:59:7c:bb:a0:e0:5c:4f:fd:
                    d3:3b:01:a5:14:0e:4d:86:eb:9e:4f:df:de:29:c3:
                    b9:56:e9:11:fb:9f:25:3e:1b:ba:c3:f4:d9:75:ce:
                    ae:cd:8a:5e:97:c1:83:0f:97:78:63:f1:c6:b3:f4:
                    b7:7a:0a:12:5c:18:7c:43:7e:47:33:88:7c:79:be:
                    65:27:9a:f1:22:03:5e:4a:ae:b3:1a:8e:51:03:72:
                    15:e4:12:2d:e4:f9:4d:be:d6:85:a3:81:5a:48:2b:
                    20:76:69:93:83:c0:83:75:84:22:6e:e7:d9:d4:21:
                    77:93:c1:0b:96:d0:43:3f:70:df:bf:d7:79:5a:26:
                    64:7a:73:38:85:9e:3f:2c:fb:2b:d4:f6:a4:59:dd:
                    b1:4a:d0:66:65:90:84:d2:54:aa:17:99:5d:91:d0:
                    08:fc:b1:b2:9f:02:e5:d1:e7:bf:4f:5e:f3:66:1c:
                    45:e4:b0:1c:c4:e8:c3:bf:a1:67:e4:e8:9d:2d:8a:
                    c5:27:51:7c:15:e6:72:93:94:66:b6:6a:f4:57:3d:
                    ca:1f:63:96:24:31:8a:d3:da:d0:63:fa:95:0d:ec:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:96:31:09:1F:76:4A:EB:4A:F5:F8:D7:99:51:52:79:C1:8B:35:0C
            X509v3 Authority Key Identifier:
                keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/_JYxCR92SutK9fjXmVFSecGLNQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ae:29:cd:e1:e2:00:e1:85:95:fa:a0:06:83:e4:8a:ac:9e:
         47:82:7b:df:b7:07:dd:71:f8:07:87:77:31:19:bc:b4:62:fb:
         17:37:a4:7a:08:58:8c:e2:73:db:1c:3f:cb:d6:93:15:68:ee:
         0f:3e:22:c0:b3:ae:5a:19:ee:3d:ea:0d:11:0d:70:35:b5:08:
         cb:16:f4:02:06:e8:c6:c6:88:95:da:f3:c8:2a:92:1f:2f:16:
         2f:be:16:9e:8d:0a:ed:9a:05:d3:52:c1:4a:20:de:69:8c:5d:
         9a:c6:5d:c7:20:28:2d:e2:21:2d:a2:29:5f:90:80:b9:95:76:
         4a:80:cd:1a:aa:06:6d:a0:f7:ad:b7:3f:1b:aa:71:21:3f:21:
         a4:5f:85:ff:c1:21:4e:d9:ea:29:b6:77:9c:2e:2f:da:34:ed:
         fb:99:d4:64:26:14:52:8f:21:65:12:a6:7d:a6:37:b7:ee:44:
         1d:e1:89:82:9d:de:be:43:e2:24:1d:b5:31:82:b7:a9:6a:ab:
         26:55:3e:74:74:d5:10:cf:64:a2:2e:03:fc:f4:71:17:fc:7a:
         6b:a2:6e:7c:60:94:91:5b:7f:14:ae:a5:f9:2e:6f:20:46:e3:
         b0:f5:ac:0b:b7:66:25:76:fc:b5:2b:35:74:42:27:a9:2c:9d:
         e6:9f:f2:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYy1mWVw8cSA6yQQuPQFEmlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTg4OTM0YTBiMGQ2NDhkYWY5NGRkOWU2MjlkM2RkMjJl
ZDVhYmYwHhcNMjMxMjI5MTI0MjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzk2MzEwOTFmNzY0YWViNGFmNWY4ZDc5OTUxNTI3OWMxOGIzNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZNPdaqFKaqUjLaiLvdfXA5T2Fe5
2dchyGuphXPK/ZyqtfDXWXy7oOBcT/3TOwGlFA5NhuueT9/eKcO5VukR+58lPhu6
w/TZdc6uzYpel8GDD5d4Y/HGs/S3egoSXBh8Q35HM4h8eb5lJ5rxIgNeSq6zGo5R
A3IV5BIt5PlNvtaFo4FaSCsgdmmTg8CDdYQibufZ1CF3k8ELltBDP3Dfv9d5WiZk
enM4hZ4/LPsr1PakWd2xStBmZZCE0lSqF5ldkdAI/LGynwLl0ee/T17zZhxF5LAc
xOjDv6Fn5OidLYrFJ1F8FeZyk5Rmtmr0Vz3KH2OWJDGK09rQY/qVDew7OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPyWMQkfdkrrSvX415lRUnnBizUMMB8GA1UdIwQY
MBaAFHNYiTSgsNZI2vlN2eYp090i7Vq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQt
N2Q0YzBiN2Q3ODYxLzEvX0pZeENSOTJTdXRLOWZqWG1WRlNlY0dMTlF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQtN2Q0YzBiN2Q3ODYx
LzEvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVCvMA0G
CSqGSIb3DQEBCwUAA4IBAQCdrinN4eIA4YWV+qAGg+SKrJ5HgnvftwfdcfgHh3cx
Gby0YvsXN6R6CFiM4nPbHD/L1pMVaO4PPiLAs65aGe496g0RDXA1tQjLFvQCBujG
xoiV2vPIKpIfLxYvvhaejQrtmgXTUsFKIN5pjF2axl3HICgt4iEtoilfkIC5lXZK
gM0aqgZtoPettz8bqnEhPyGkX4X/wSFO2eoptnecLi/aNO37mdRkJhRSjyFlEqZ9
pje37kQd4YmCnd6+Q+IkHbUxgrepaqsmVT50dNUQz2SiLgP89HEX/Hprom58YJSR
W38UrqX5Lm8gRuOw9awLt2Yldvy1KzV0QiepLJ3mn/Lm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org