Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/BRySlzTcYuwOnLWhhyVR0fN3cQo.roa
File:                     BRySlzTcYuwOnLWhhyVR0fN3cQo.roa (raw, json)
Hash identifier:          P12IPm3cknLHPyrXZGw1r1RhlD8oXI70hu7mtjrKBR0=
Subject key identifier:   05:1C:92:97:34:DC:62:EC:0E:9C:B5:A1:87:25:51:D1:F3:77:71:0A
Certificate issuer:       /CN=7e7a411f7b84d6a30241793dd386376dcf4ebeaf
Certificate serial:       08362F5C
Authority key identifier: 7E:7A:41:1F:7B:84:D6:A3:02:41:79:3D:D3:86:37:6D:CF:4E:BE:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnpBH3uE1qMCQXk904Y3bc9Ovq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/BRySlzTcYuwOnLWhhyVR0fN3cQo.roa
Signing time:             Wed 12 Jan 2022 12:32:35 +0000
ROA not before:           Wed 12 Jan 2022 12:32:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3212
IP address blocks:        92.53.128.0/19 maxlen: 19
                          2a00:1c80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137768796 (0x8362f5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7a411f7b84d6a30241793dd386376dcf4ebeaf
        Validity
            Not Before: Jan 12 12:32:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=051c929734dc62ec0e9cb5a1872551d1f377710a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:5d:cd:6d:bb:70:41:44:4c:94:6d:31:e9:
                    1b:eb:89:bf:e1:76:e5:ba:26:33:05:6e:01:98:fd:
                    ad:32:d0:55:43:d3:bf:42:fd:e3:40:1b:cd:c3:91:
                    22:79:d1:67:09:05:7c:40:ea:6b:e2:1b:f9:d2:f4:
                    74:63:91:f5:ab:c1:7c:43:09:ce:67:17:ae:38:d6:
                    06:72:7b:82:33:b4:d2:a4:bc:ca:d3:c4:2a:4f:93:
                    99:1e:89:7c:9f:75:1a:94:a0:e2:b5:a1:cd:fe:28:
                    d0:06:26:3d:93:b8:a5:fd:75:0a:15:28:2b:f7:41:
                    80:d9:c2:d8:22:12:91:7c:98:df:d2:04:27:31:f1:
                    c9:7c:d4:a4:ed:57:d4:bb:25:89:bd:5a:0b:1c:b1:
                    43:0e:b8:9c:74:87:83:ff:91:d0:f6:f8:fd:e1:8a:
                    37:bb:c9:ec:1c:dc:5f:e9:1d:6a:54:a1:7e:4c:99:
                    4e:55:b3:c3:2c:dd:dd:3b:02:f0:35:71:3c:e0:12:
                    fb:3c:72:86:19:a4:39:35:a2:89:9d:ec:3a:b5:6b:
                    55:2c:23:21:00:2f:8b:92:a5:6e:5e:6a:55:d1:86:
                    00:d6:79:ac:7e:51:0e:61:d0:42:86:87:e6:70:4a:
                    cb:64:7c:e2:c3:7e:a8:ac:9a:61:ed:5a:ad:dc:ae:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:92:97:34:DC:62:EC:0E:9C:B5:A1:87:25:51:D1:F3:77:71:0A
            X509v3 Authority Key Identifier:
                keyid:7E:7A:41:1F:7B:84:D6:A3:02:41:79:3D:D3:86:37:6D:CF:4E:BE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnpBH3uE1qMCQXk904Y3bc9Ovq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/BRySlzTcYuwOnLWhhyVR0fN3cQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/fnpBH3uE1qMCQXk904Y3bc9Ovq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.128.0/19
                IPv6:
                  2a00:1c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         88:43:ef:db:fd:57:22:5f:0d:37:ca:c4:17:b9:b8:0a:22:b9:
         c5:70:22:8b:8b:4d:60:a3:44:54:ee:da:84:2e:d5:fa:dd:17:
         53:0d:fd:99:4f:01:d5:59:dc:d2:d3:73:83:54:ae:fb:21:b0:
         e0:30:99:4a:76:fa:02:53:06:5c:2e:01:95:91:1e:5c:c7:ed:
         78:11:39:87:68:8b:4e:7b:36:02:67:d8:1d:c5:08:c5:bf:ef:
         58:3c:ac:f0:2b:f8:b6:bf:b9:f6:33:a0:5f:85:3c:19:33:00:
         01:a3:99:92:40:1f:b4:62:79:5f:f0:e0:ed:21:50:1d:a7:c1:
         b5:15:3e:49:15:8c:33:13:3a:67:af:36:c6:00:5e:8d:5d:1f:
         81:28:87:4d:2f:7b:14:a4:28:79:c5:02:34:9a:6c:e9:39:b6:
         5a:04:c0:b7:47:f0:d1:61:58:aa:46:c9:e6:29:8b:c4:0b:db:
         94:1b:1d:eb:3c:01:2e:7f:bd:15:37:4b:5d:6d:d6:dc:f9:77:
         a4:91:1f:6c:7d:1f:30:f0:3f:7a:bb:02:d3:2b:d4:a9:27:e2:
         8f:f9:c8:e3:3c:8f:61:1f:8d:ac:81:bd:17:3c:e0:df:07:55:
         56:ca:6d:b3:0e:6e:62:6f:a1:13:b4:4f:1e:68:9a:7f:18:c0:
         0b:80:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org