Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/3vkOygcqzrsricxI190RFZXi3yo.roa
File:                     3vkOygcqzrsricxI190RFZXi3yo.roa (raw, json)
Hash identifier:          ef4uUb3DV04x+LvpnUvK2zq4NckewiEcl5YU3Se8lOo=
Subject key identifier:   DE:F9:0E:CA:07:2A:CE:BB:2B:89:CC:48:D7:DD:11:15:95:E2:DF:2A
Certificate issuer:       /CN=57c113ecbb9ab3c6256b67b08530f589f1d7aa74
Certificate serial:       018684A1160F13FE7118CEF2E3C9F4BBB9AD
Authority key identifier: 57:C1:13:EC:BB:9A:B3:C6:25:6B:67:B0:85:30:F5:89:F1:D7:AA:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ET7Luas8Yla2ewhTD1ifHXqnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/3vkOygcqzrsricxI190RFZXi3yo.roa
Signing time:             Fri 24 Feb 2023 18:13:14 +0000
ROA not before:           Fri 24 Feb 2023 18:13:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        62.233.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:84:a1:16:0f:13:fe:71:18:ce:f2:e3:c9:f4:bb:b9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c113ecbb9ab3c6256b67b08530f589f1d7aa74
        Validity
            Not Before: Feb 24 18:13:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=def90eca072acebb2b89cc48d7dd111595e2df2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cd:4e:8f:76:fc:15:82:a4:5b:5c:7f:2e:9d:
                    04:20:e5:be:87:33:98:57:75:11:65:93:0c:e1:fb:
                    86:a8:fd:ad:b4:59:25:95:1e:8a:ef:cb:bd:5c:5a:
                    2c:91:bf:81:fe:d0:9d:46:13:40:9b:2a:1d:ec:6a:
                    22:a8:f7:26:ee:af:42:e1:e7:a8:e9:4f:d8:6c:f0:
                    f2:61:51:63:44:38:ab:b8:db:b8:a9:6f:1e:ea:ca:
                    aa:c3:73:f1:82:5a:62:f0:5c:02:fc:9b:7a:a2:cd:
                    1e:58:e3:01:f7:2b:80:8c:5a:e6:00:69:06:24:de:
                    fc:ce:80:87:bb:af:12:e6:5c:2a:33:39:6b:6c:bd:
                    91:7e:5c:0d:f7:76:b7:be:c5:6d:52:65:72:cd:4a:
                    30:c4:00:35:f9:f5:ca:c3:fd:d2:ca:b6:9a:9b:ad:
                    85:95:09:32:9f:08:b3:0c:6c:57:2b:f6:d6:5d:a9:
                    de:8b:76:8f:86:e7:f1:a5:92:90:cd:1e:ad:39:c6:
                    96:a6:12:56:97:f4:be:ac:42:46:ae:79:d3:eb:9f:
                    7d:0d:48:8d:28:8c:f0:78:19:e5:e4:46:d0:02:39:
                    5b:93:59:87:d7:35:fd:33:7b:4d:ba:56:f6:44:bf:
                    b8:32:6c:2e:a5:37:90:d6:ff:25:5d:24:a8:9f:cc:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F9:0E:CA:07:2A:CE:BB:2B:89:CC:48:D7:DD:11:15:95:E2:DF:2A
            X509v3 Authority Key Identifier:
                keyid:57:C1:13:EC:BB:9A:B3:C6:25:6B:67:B0:85:30:F5:89:F1:D7:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ET7Luas8Yla2ewhTD1ifHXqnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/3vkOygcqzrsricxI190RFZXi3yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/V8ET7Luas8Yla2ewhTD1ifHXqnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:37:7e:5c:b5:21:4b:ee:c1:10:69:46:64:19:cd:c5:09:
         da:b5:6b:73:2c:c3:43:b1:32:fd:3f:0d:f6:99:6a:fe:0f:3f:
         3f:c3:0b:ab:0d:1b:4f:84:9a:ca:e8:57:f2:21:ad:3f:57:2e:
         5e:5d:23:18:e8:5a:93:88:a4:8a:19:eb:f9:32:d7:bf:60:32:
         8c:53:51:7e:dc:b4:12:1c:54:2f:2d:b3:7a:a7:7e:c1:18:0b:
         a8:fd:7e:5d:7a:a3:c6:5c:06:c9:1d:43:4d:11:39:1d:77:30:
         16:4a:f4:a2:83:7b:75:60:e3:18:16:8a:73:5d:aa:b8:62:e0:
         d2:80:c4:29:de:b3:40:60:6c:fb:b4:5a:5b:2b:a7:74:35:5a:
         99:bd:33:d8:bc:df:0b:ed:c3:5f:93:8e:fa:c8:c4:b6:a7:55:
         0a:75:0b:6d:cf:18:01:89:bd:0b:5b:a7:a4:1e:40:16:bd:7e:
         a0:9f:1e:96:40:c9:e6:49:46:1b:b2:9c:e3:41:ed:86:de:30:
         3c:8f:58:39:f7:26:46:a1:69:c4:1d:eb:ef:5a:32:91:8b:1e:
         b4:e2:42:0a:86:fe:b6:04:e5:ef:c3:3c:28:2e:d1:47:67:b8:
         f5:23:57:a6:af:66:6d:6c:65:52:03:5c:5a:6b:89:0b:2c:b1:
         c4:1e:ca:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:33 2024 by rpki-client on console-ams.rpki-client.org