Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/LA-9Jk38doeT2rmMGAcXjZpQ5AA.roa
File:                     LA-9Jk38doeT2rmMGAcXjZpQ5AA.roa (raw, json)
Hash identifier:          ANeXjndXt9JbYMBuIo957qNI/7uQtO+OyOJbjnMSHVI=
Subject key identifier:   2C:0F:BD:26:4D:FC:76:87:93:DA:B9:8C:18:07:17:8D:9A:50:E4:00
Certificate issuer:       /CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Certificate serial:       01BC8B42
Authority key identifier: 1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/LA-9Jk38doeT2rmMGAcXjZpQ5AA.roa
Signing time:             Mon 13 Jun 2022 05:49:07 +0000
ROA not before:           Mon 13 Jun 2022 05:49:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212921
IP address blocks:        193.239.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29133634 (0x1bc8b42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
        Validity
            Not Before: Jun 13 05:49:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c0fbd264dfc768793dab98c1807178d9a50e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:43:00:7d:ae:13:53:0a:c0:2f:df:a6:b6:8d:
                    74:c2:ea:32:1a:45:35:b4:86:b5:c1:23:30:d4:53:
                    7f:a9:fe:8c:31:4f:27:13:22:d5:a3:c5:d3:0b:f0:
                    58:0e:d8:81:dd:3c:1d:0e:7b:56:30:4b:3a:eb:fa:
                    46:b4:a2:75:9d:55:af:3d:e2:de:a9:3b:ac:76:24:
                    dc:3a:bd:50:41:bd:72:a0:cc:77:6b:f7:28:37:c2:
                    76:f2:f0:94:84:6f:5c:22:85:31:06:a5:6b:c6:e7:
                    bd:b3:fe:23:0b:d0:29:f9:21:f6:ce:dc:74:5d:42:
                    91:85:7f:da:dc:45:62:fd:bb:6b:bd:54:b2:75:1a:
                    aa:44:51:7e:4d:36:b9:18:8a:64:e8:bf:02:19:d4:
                    eb:96:8b:7d:ba:17:58:09:5e:d6:a3:5c:d1:f9:78:
                    cc:ea:6f:7f:8e:88:74:2f:fe:6d:9c:b6:01:c7:37:
                    85:b6:e4:34:cf:3b:17:f6:8e:97:79:45:cd:c6:28:
                    f8:7b:d8:16:98:23:27:6a:f8:de:57:76:21:6e:65:
                    03:39:90:df:14:55:a3:2d:87:60:67:cc:7b:44:87:
                    96:e2:e5:c5:25:ba:17:50:45:d1:cc:ec:a6:99:a0:
                    45:e7:03:43:77:08:7b:35:6c:6b:9f:07:1c:77:8f:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0F:BD:26:4D:FC:76:87:93:DA:B9:8C:18:07:17:8D:9A:50:E4:00
            X509v3 Authority Key Identifier:
                keyid:1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/LA-9Jk38doeT2rmMGAcXjZpQ5AA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/Hx0EgHUE3L4auA74TYblFMV-fo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:ce:d9:c1:5d:79:64:ee:17:a1:b2:4e:e8:25:21:68:0b:
         4c:25:96:d9:d7:80:d0:5d:d8:62:11:c7:71:cc:db:b5:94:bc:
         0e:12:bb:25:4b:61:29:ce:13:09:1e:c0:2c:12:4a:65:ff:d9:
         7e:6a:c2:59:44:25:7b:bc:56:f8:8d:00:5a:85:75:a3:1d:21:
         3a:2c:6d:3b:80:6b:b0:0f:2a:79:89:c4:fc:19:1e:1f:b9:b6:
         bb:0d:8d:32:40:ce:26:7f:c2:2d:df:b4:b3:7c:4b:0f:5f:f3:
         01:45:fd:90:b3:be:49:d6:10:d1:a5:40:de:46:8d:94:3e:2e:
         bb:6c:ab:59:bc:d5:be:8e:bb:27:2b:32:6e:03:0d:43:e9:40:
         28:00:ca:18:90:e1:8a:3f:12:f0:f6:f3:f8:58:6d:de:e2:a2:
         7a:e6:bb:36:02:30:15:23:99:79:1a:eb:97:24:f5:30:98:1d:
         e5:4d:82:9e:5d:48:0a:77:d3:ca:94:be:46:4d:8a:bf:d3:8e:
         d8:2a:bb:a6:02:52:fa:42:69:13:7e:a3:94:c9:e3:5d:c8:18:
         0c:e0:04:da:68:22:40:f6:1f:d9:90:c6:b1:24:14:44:6f:6c:
         28:ef:72:2d:0a:ad:9e:70:f4:48:fe:ce:77:0a:51:bd:8f:b7:
         85:82:00:09
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAbyLQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjFkMDQ4MDc1MDRkY2JlMWFiODBlZjg0ZDg2ZTUxNGM1N2U3ZThkMB4XDTIyMDYx
MzA1NDkwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmMwZmJkMjY0ZGZj
NzY4NzkzZGFiOThjMTgwNzE3OGQ5YTUwZTQwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVDAH2uE1MKwC/fpraNdMLqMhpFNbSGtcEjMNRTf6n+jDFP
JxMi1aPF0wvwWA7Ygd08HQ57VjBLOuv6RrSidZ1Vrz3i3qk7rHYk3Dq9UEG9cqDM
d2v3KDfCdvLwlIRvXCKFMQala8bnvbP+IwvQKfkh9s7cdF1CkYV/2txFYv27a71U
snUaqkRRfk02uRiKZOi/AhnU65aLfboXWAle1qNc0fl4zOpvf46IdC/+bZy2Acc3
hbbkNM87F/aOl3lFzcYo+HvYFpgjJ2r43ld2IW5lAzmQ3xRVoy2HYGfMe0SHluLl
xSW6F1BF0czsppmgRecDQ3cIezVsa58HHHePEhsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQsD70mTfx2h5PauYwYBxeNmlDkADAfBgNVHSMEGDAWgBQfHQSAdQTcvhq4
DvhNhuUUxX5+jTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0h4MEVnSFVFM0w0YXVBNzRUWWJsRk1WLWZvMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvNDJhYzUyLWJhNjYtNDhhMi1hMDdhLWI2MzY5ODhlYWQ0ZC8x
L0xBLTlKazM4ZG9lVDJybU1HQWNYalpwUTVBQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
NDJhYzUyLWJhNjYtNDhhMi1hMDdhLWI2MzY5ODhlYWQ0ZC8xL0h4MEVnSFVFM0w0
YXVBNzRUWWJsRk1WLWZvMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHvljANBgkqhkiG9w0BAQsFAAOC
AQEAosfO2cFdeWTuF6GyTuglIWgLTCWW2deA0F3YYhHHcczbtZS8DhK7JUthKc4T
CR7ALBJKZf/ZfmrCWUQle7xW+I0AWoV1ox0hOixtO4BrsA8qeYnE/BkeH7m2uw2N
MkDOJn/CLd+0s3xLD1/zAUX9kLO+SdYQ0aVA3kaNlD4uu2yrWbzVvo67JysybgMN
Q+lAKADKGJDhij8S8Pbz+Fht3uKieua7NgIwFSOZeRrrlyT1MJgd5U2Cnl1ICnfT
ypS+Rk2Kv9OO2Cq7pgJS+kJpE36jlMnjXcgYDOAE2mgiQPYf2ZDGsSQURG9sKO9y
LQqtnnD0SP7OdwpRvY+3hYIACQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:54 2025 by rpki-client