Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/Fxh-jtDxryu8oLe3on5eZyXgCao.roa
File:                     Fxh-jtDxryu8oLe3on5eZyXgCao.roa (raw, json)
Hash identifier:          vlh9NJtBNcBhcSB7McnVwmjbvpKqzRnXzoYqwpUfkIY=
Subject key identifier:   17:18:7E:8E:D0:F1:AF:2B:BC:A0:B7:B7:A2:7E:5E:67:25:E0:09:AA
Certificate issuer:       /CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
Certificate serial:       055AB7BE
Authority key identifier: FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/Fxh-jtDxryu8oLe3on5eZyXgCao.roa
Signing time:             Sat 01 Jan 2022 05:06:33 +0000
ROA not before:           Sat 01 Jan 2022 05:06:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43851
IP address blocks:        176.116.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89831358 (0x55ab7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
        Validity
            Not Before: Jan  1 05:06:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17187e8ed0f1af2bbca0b7b7a27e5e6725e009aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:14:9a:ff:cc:a8:85:a9:9b:43:5e:56:56:
                    d7:06:5e:f8:23:c2:39:ee:b5:a4:28:cd:72:25:1b:
                    69:0a:fd:23:47:f8:4a:26:b8:b7:18:c3:6b:79:2e:
                    a4:1b:84:29:d9:9e:7a:2a:9b:30:d7:02:35:bc:fb:
                    d4:a8:ce:68:58:d7:d6:c2:32:aa:58:a0:a3:52:32:
                    a1:d1:e4:87:72:21:7a:d1:53:d2:65:d2:45:69:3d:
                    c9:d5:4b:9c:ef:d9:62:a5:aa:e2:4d:2c:55:8c:0c:
                    cd:31:02:5d:3d:42:70:92:24:89:07:72:77:bb:f0:
                    d5:5b:00:71:ed:b2:44:51:75:54:57:bc:d0:92:e9:
                    70:f6:8b:19:3c:01:02:ae:31:25:26:ca:fa:27:b3:
                    5e:46:15:79:44:bc:67:6b:83:a9:54:00:5a:3b:b0:
                    95:34:3f:64:de:b6:ce:2c:f8:61:ad:7c:06:1f:01:
                    b9:7b:e3:36:12:0f:ef:a8:b5:bd:b2:48:60:4a:0d:
                    96:17:39:ea:5e:8d:1e:4b:a7:dc:87:e6:ed:36:17:
                    a0:2e:aa:13:67:3e:63:13:d0:46:d3:d4:fe:47:87:
                    12:20:2b:fa:50:a1:73:66:7b:79:eb:52:0b:5a:ac:
                    ea:e5:ea:8f:5a:8f:6c:76:82:3d:94:f6:f4:50:bb:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:7E:8E:D0:F1:AF:2B:BC:A0:B7:B7:A2:7E:5E:67:25:E0:09:AA
            X509v3 Authority Key Identifier:
                keyid:FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/Fxh-jtDxryu8oLe3on5eZyXgCao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/__TJXHvHqKfLnLtzGcgbCsqkaV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:28:f7:cc:a1:09:46:e3:8a:34:ea:a9:5d:75:05:90:a7:1f:
         02:38:97:dd:0d:9d:c9:b0:85:8f:88:7d:6d:4d:5c:47:dc:48:
         b2:d4:86:06:7b:53:81:41:f2:66:d5:63:cd:02:a0:29:db:63:
         33:40:e2:f5:d7:81:f3:c6:52:41:66:e4:21:3d:55:03:e8:33:
         9d:86:e1:a8:14:aa:07:d8:fb:9e:b9:a2:78:a8:14:dc:68:e5:
         f0:89:92:ff:4f:a0:81:f3:0b:35:65:ca:7f:13:a9:07:66:a9:
         9b:80:a2:74:e6:d3:dd:8b:c1:aa:34:50:91:ec:33:03:bc:63:
         4a:18:6e:eb:51:fe:80:10:e9:f9:29:2a:32:52:ff:d3:5f:5c:
         f6:de:67:38:51:62:ba:ef:6c:76:07:52:f0:12:fc:b8:9b:99:
         12:44:d7:9d:31:69:cb:7a:9e:b3:38:7a:f6:0d:a6:64:d2:93:
         02:54:2c:47:31:4f:59:c2:b2:b0:b3:ae:23:a3:24:bd:aa:fb:
         20:e8:00:10:5f:d1:d6:fd:0b:6d:29:41:74:1c:f3:e6:03:00:
         fb:91:15:be:39:09:76:ec:ec:eb:af:fb:78:4e:27:54:3a:ef:
         8e:d3:71:ca:c2:98:10:a3:9f:dd:76:11:49:fa:41:13:8b:95:
         77:22:55:09
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBVq3vjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZmY0Yzk1YzdiYzdhOGE3Y2I5Y2JiNzMxOWM4MWIwYWNhYTQ2OTVlMB4XDTIyMDEw
MTA1MDYzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTcxODdlOGVkMGYx
YWYyYmJjYTBiN2I3YTI3ZTVlNjcyNWUwMDlhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANxPFJr/zKiFqZtDXlZW1wZe+CPCOe61pCjNciUbaQr9I0f4
Sia4txjDa3kupBuEKdmeeiqbMNcCNbz71KjOaFjX1sIyqligo1IyodHkh3IhetFT
0mXSRWk9ydVLnO/ZYqWq4k0sVYwMzTECXT1CcJIkiQdyd7vw1VsAce2yRFF1VFe8
0JLpcPaLGTwBAq4xJSbK+iezXkYVeUS8Z2uDqVQAWjuwlTQ/ZN62ziz4Ya18Bh8B
uXvjNhIP76i1vbJIYEoNlhc56l6NHkun3Ifm7TYXoC6qE2c+YxPQRtPU/keHEiAr
+lChc2Z7eetSC1qs6uXqj1qPbHaCPZT29FC70/kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXGH6O0PGvK7ygt7eifl5nJeAJqjAfBgNVHSMEGDAWgBT/9Mlce8eop8uc
u3MZyBsKyqRpXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19fVEpYSHZIcUtmTG5MdHpHY2diQ3Nxa2FWNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvN2M4Y2ExLTMxYTktNDJlMC04MGFlLTFlNmZiM2E3NmE2YS8x
L0Z4aC1qdER4cnl1OG9MZTNvbjVlWnlYZ0Nhby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
N2M4Y2ExLTMxYTktNDJlMC04MGFlLTFlNmZiM2E3NmE2YS8xL19fVEpYSHZIcUtm
TG5MdHpHY2diQ3Nxa2FWNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB0fjANBgkqhkiG9w0BAQsFAAOC
AQEAeCj3zKEJRuOKNOqpXXUFkKcfAjiX3Q2dybCFj4h9bU1cR9xIstSGBntTgUHy
ZtVjzQKgKdtjM0Di9deB88ZSQWbkIT1VA+gznYbhqBSqB9j7nrmieKgU3Gjl8ImS
/0+ggfMLNWXKfxOpB2apm4CidObT3YvBqjRQkewzA7xjShhu61H+gBDp+SkqMlL/
019c9t5nOFFiuu9sdgdS8BL8uJuZEkTXnTFpy3qeszh69g2mZNKTAlQsRzFPWcKy
sLOuI6Mkvar7IOgAEF/R1v0LbSlBdBzz5gMA+5EVvjkJduzs66/7eE4nVDrvjtNx
ysKYEKOf3XYRSfpBE4uVdyJVCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:59 2024 by rpki-client on console-ams.rpki-client.org