Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/zRtUJWqbtr_OULHZ557ejyVCg1w.roa
File:                     zRtUJWqbtr_OULHZ557ejyVCg1w.roa (raw, json)
Hash identifier:          kGRLbt+Kntj9fB5C2AlAiQSnoAybmGnL7k4GtRVNDV8=
Subject key identifier:   CD:1B:54:25:6A:9B:B6:BF:CE:50:B1:D9:E7:9E:DE:8F:25:42:83:5C
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       09AB4BC7
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/zRtUJWqbtr_OULHZ557ejyVCg1w.roa
Signing time:             Fri 18 Mar 2022 17:34:38 +0000
ROA not before:           Fri 18 Mar 2022 17:34:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        77.83.255.0/24 maxlen: 24
                          2.58.84.0/22 maxlen: 24
                          77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162220999 (0x9ab4bc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar 18 17:34:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd1b54256a9bb6bfce50b1d9e79ede8f2542835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:2f:2e:bc:dc:e8:96:7f:91:a2:35:da:e4:
                    71:f5:9c:d3:37:77:ed:7b:fc:d6:20:30:9a:fa:62:
                    b5:59:3a:9b:d3:cc:c0:3e:5e:33:62:0e:29:7e:ce:
                    fb:63:7f:1a:2a:3b:bb:42:9c:d9:78:92:d8:2f:7a:
                    eb:df:ce:31:fa:bf:15:d1:4d:83:c3:c7:c3:e4:c5:
                    d1:9c:24:41:48:23:b5:06:8e:68:42:8a:f0:d9:23:
                    a6:50:c5:e4:60:49:f7:0e:2c:71:13:3e:60:61:15:
                    12:46:14:ae:d5:6b:14:d8:53:2d:e9:74:b5:9a:53:
                    fb:1a:94:1c:28:aa:53:e7:f9:26:dc:2e:b5:83:0f:
                    37:a8:06:d7:6e:f1:e8:0e:dc:ff:58:ca:4b:7d:fd:
                    5b:4f:8a:7b:8e:63:31:be:46:01:6d:c5:24:c9:24:
                    1f:23:b2:29:a7:b9:c8:f5:d0:2d:06:2e:9d:d4:0d:
                    15:40:37:95:d7:44:c1:ef:f1:cf:78:87:5f:d9:28:
                    f7:37:5a:ff:23:41:69:99:01:3c:65:ab:1e:1b:41:
                    93:20:07:b9:ca:a3:a1:a4:c1:e5:2c:4a:3d:0d:90:
                    64:83:06:a3:3a:e6:17:37:23:eb:e6:75:05:21:b7:
                    14:15:29:a2:20:de:02:42:a2:8c:1d:4b:73:f5:57:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1B:54:25:6A:9B:B6:BF:CE:50:B1:D9:E7:9E:DE:8F:25:42:83:5C
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/zRtUJWqbtr_OULHZ557ejyVCg1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.84.0/22
                  77.83.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:5c:3a:93:38:96:60:e7:61:a8:e6:4e:a9:c3:03:b7:4e:
         32:7c:5a:02:72:21:47:6b:40:c0:5b:2c:cf:d9:a4:79:14:22:
         db:75:9e:2b:76:37:1d:6b:47:d8:32:54:a8:31:37:fc:99:fb:
         f2:7a:22:3a:c1:ea:af:31:c6:6b:86:d1:d0:43:57:39:73:ea:
         92:ac:28:66:6d:4d:a6:88:80:73:8f:d9:fb:68:a7:c4:ba:8e:
         96:6e:c7:23:21:4e:e6:4b:0c:22:fa:9e:87:f6:7d:07:c2:ca:
         9a:cf:b6:19:35:db:9d:d2:49:2e:48:99:8c:9b:1f:7d:67:76:
         71:57:ed:10:40:f1:6e:eb:76:72:cd:54:41:e5:01:c5:ec:9e:
         ef:85:da:0c:7b:79:46:1b:6a:90:a3:f5:6b:52:25:17:d6:f7:
         81:6b:46:4e:b8:15:80:aa:d4:9c:80:95:9e:fd:98:93:a9:24:
         d0:25:bf:49:fc:4a:03:f4:f4:2c:90:64:86:f2:30:8e:b0:b0:
         62:6a:09:c2:18:f3:dd:08:29:a5:39:b9:32:f0:df:96:3d:92:
         51:32:40:44:09:d6:88:4a:55:38:70:90:f9:85:9e:d5:82:64:
         7c:ef:9f:f1:c2:09:be:fa:f4:cb:ac:3c:6b:39:62:8d:2f:06:
         e9:7a:9d:45
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECatLxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MmZhNzY1YTM5MzM2OWM5NmQ4ZDgzNmYyM2Y3NmU2NzQ4OWM3ZGRlMB4XDTIyMDMx
ODE3MzQzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2QxYjU0MjU2YTli
YjZiZmNlNTBiMWQ5ZTc5ZWRlOGYyNTQyODM1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8aLy683OiWf5GiNdrkcfWc0zd37Xv81iAwmvpitVk6m9PM
wD5eM2IOKX7O+2N/Gio7u0Kc2XiS2C9669/OMfq/FdFNg8PHw+TF0ZwkQUgjtQaO
aEKK8NkjplDF5GBJ9w4scRM+YGEVEkYUrtVrFNhTLel0tZpT+xqUHCiqU+f5Jtwu
tYMPN6gG127x6A7c/1jKS339W0+Ke45jMb5GAW3FJMkkHyOyKae5yPXQLQYundQN
FUA3lddEwe/xz3iHX9ko9zda/yNBaZkBPGWrHhtBkyAHucqjoaTB5SxKPQ2QZIMG
ozrmFzcj6+Z1BSG3FBUpoiDeAkKijB1Lc/VXXSUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTNG1Qlapu2v85Qsdnnnt6PJUKDXDAfBgNVHSMEGDAWgBRi+nZaOTNpyW2N
g28j925nSJx93jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1l2cDJXamt6YWNsdGpZTnZJX2R1WjBpY2ZkNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvYWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8x
L3pSdFVKV3FidHJfT1VMSFo1NTdlanlWQ2cxdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
YWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8xL1l2cDJXamt6YWNs
dGpZTnZJX2R1WjBpY2ZkNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAgI6VAMEAU1T/jANBgkqhkiG9w0B
AQsFAAOCAQEAcPpcOpM4lmDnYajmTqnDA7dOMnxaAnIhR2tAwFssz9mkeRQi23We
K3Y3HWtH2DJUqDE3/Jn78noiOsHqrzHGa4bR0ENXOXPqkqwoZm1NpoiAc4/Z+2in
xLqOlm7HIyFO5ksMIvqeh/Z9B8LKms+2GTXbndJJLkiZjJsffWd2cVftEEDxbut2
cs1UQeUBxeye74XaDHt5RhtqkKP1a1IlF9b3gWtGTrgVgKrUnICVnv2Yk6kk0CW/
SfxKA/T0LJBkhvIwjrCwYmoJwhjz3QgppTm5MvDflj2SUTJARAnWiEpVOHCQ+YWe
1YJkfO+f8cIJvvr0y6w8azlijS8G6XqdRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org