Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/hiIDi91e6nmPIy9tGbXeIPprqbM.roa
File:                     hiIDi91e6nmPIy9tGbXeIPprqbM.roa (raw, json)
Hash identifier:          kVDSE7uXYf6TkWkrrqv2Xz1mhzog9/E+PH8nBRLnvY8=
Subject key identifier:   86:22:03:8B:DD:5E:EA:79:8F:23:2F:6D:19:B5:DE:20:FA:6B:A9:B3
Certificate issuer:       /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial:       195C4091
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/hiIDi91e6nmPIy9tGbXeIPprqbM.roa
Signing time:             Thu 12 May 2022 10:18:02 +0000
ROA not before:           Thu 12 May 2022 10:18:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25393
IP address blocks:        78.27.224.0/19 maxlen: 19
                          195.177.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425476241 (0x195c4091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
        Validity
            Not Before: May 12 10:18:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8622038bdd5eea798f232f6d19b5de20fa6ba9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e7:a3:5f:96:6a:df:31:cd:f7:90:16:41:70:
                    c4:e6:4b:68:d8:68:57:c5:fe:fc:2e:49:d2:61:67:
                    3e:e5:94:e0:9f:16:aa:1a:10:0e:37:fd:77:4c:83:
                    9d:b0:04:a8:57:f6:a9:ed:cd:23:4c:3c:65:80:c4:
                    6d:83:88:bc:21:80:a1:2d:24:95:48:b8:f2:dc:07:
                    b9:0c:5a:b0:8e:36:a8:5a:24:6c:ee:79:eb:fa:0b:
                    ed:6c:45:b7:55:6e:d7:98:9e:f0:86:19:fa:94:2c:
                    cd:ef:f5:1e:e0:4a:2d:c9:24:50:79:8c:44:d8:60:
                    84:f8:16:4b:f3:53:f5:5b:38:43:30:12:7c:a3:8f:
                    1e:ac:4f:b9:9f:15:89:4b:d5:78:d9:aa:35:4b:9b:
                    ff:21:f3:14:a1:d8:d2:4e:68:d6:60:59:77:37:06:
                    0e:d2:3e:8f:9e:54:61:f0:b1:5b:43:df:5c:5e:a1:
                    79:10:5c:ab:82:d5:72:ad:9c:19:6e:8e:6c:43:95:
                    ac:47:22:03:5d:a3:fd:73:bc:4f:e4:41:29:3d:b4:
                    06:7b:a0:ac:9c:51:e7:6b:4d:4e:4b:28:80:8f:85:
                    3e:de:d5:47:08:4d:6a:59:85:6f:58:6d:2e:78:a5:
                    74:3e:35:6b:6e:a6:08:54:09:ce:6d:e0:6e:7c:de:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:22:03:8B:DD:5E:EA:79:8F:23:2F:6D:19:B5:DE:20:FA:6B:A9:B3
            X509v3 Authority Key Identifier:
                keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/hiIDi91e6nmPIy9tGbXeIPprqbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.27.224.0/19
                  195.177.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:61:61:b7:12:82:1d:fe:e6:da:6d:a2:76:bf:e2:47:6e:5d:
         31:58:cc:cf:8f:49:f8:7c:36:c8:fe:7a:d9:12:68:30:26:f9:
         ea:9f:d1:68:60:41:ff:8f:a9:36:1f:4b:a0:ee:28:93:0f:52:
         de:79:78:0d:16:3a:88:86:83:94:9f:78:16:2e:88:c7:2b:78:
         e2:92:74:96:51:65:98:3c:09:f9:3a:87:a2:f2:47:7b:6c:60:
         d9:31:91:9e:bd:64:b6:4c:49:38:3f:ba:b6:11:30:df:9a:a4:
         e3:3c:ef:04:e0:13:15:fb:6b:bc:87:4d:52:49:d9:ef:ab:4c:
         c0:14:e5:5b:cf:d1:1f:45:f1:18:f0:b1:f3:08:43:38:2d:ee:
         35:ed:01:b1:a2:67:22:21:13:90:8e:ac:c8:90:b6:c9:7a:96:
         74:69:1b:5e:1f:6d:a0:6c:8b:fc:22:f2:fc:d5:9d:42:22:d2:
         c5:35:c6:2b:92:6a:8f:c6:02:32:1c:72:56:8a:3c:3d:29:c4:
         db:6b:db:ea:bb:67:26:94:a9:93:c1:39:9b:8c:6b:eb:16:c8:
         5b:36:a4:35:60:43:32:7b:ae:a7:b4:a3:5f:28:b4:2b:67:d4:
         72:7a:a3:fc:7d:9c:ca:2e:be:06:aa:30:ff:e1:f6:ae:b3:c4:
         58:b1:bc:5c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGVxAkTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NmRiMWVhZjE3OTJhMmNkNTI4OWRjN2ZjNTI0MmVhMzUyNDUxMzRlMB4XDTIyMDUx
MjEwMTgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODYyMjAzOGJkZDVl
ZWE3OThmMjMyZjZkMTliNWRlMjBmYTZiYTliMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLno1+Wat8xzfeQFkFwxOZLaNhoV8X+/C5J0mFnPuWU4J8W
qhoQDjf9d0yDnbAEqFf2qe3NI0w8ZYDEbYOIvCGAoS0klUi48twHuQxasI42qFok
bO556/oL7WxFt1Vu15ie8IYZ+pQsze/1HuBKLckkUHmMRNhghPgWS/NT9Vs4QzAS
fKOPHqxPuZ8ViUvVeNmqNUub/yHzFKHY0k5o1mBZdzcGDtI+j55UYfCxW0PfXF6h
eRBcq4LVcq2cGW6ObEOVrEciA12j/XO8T+RBKT20BnugrJxR52tNTksogI+FPt7V
RwhNalmFb1htLnildD41a26mCFQJzm3gbnzeRqcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSGIgOL3V7qeY8jL20Ztd4g+mupszAfBgNVHSMEGDAWgBRW2x6vF5KizVKJ
3H/FJC6jUkUTTjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Z0c2VyeGVTb3MxU2lkeF94U1F1bzFKRkUwNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvYjRiZDVhLTlkNjYtNDcxYy05YTBhLTQzNjFjOGMzN2QyOS8x
L2hpSURpOTFlNm5tUEl5OXRHYlhlSVBwcnFiTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
YjRiZDVhLTlkNjYtNDcxYy05YTBhLTQzNjFjOGMzN2QyOS8xL1Z0c2VyeGVTb3Mx
U2lkeF94U1F1bzFKRkUwNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBU4b4AMEAsOxdDANBgkqhkiG9w0B
AQsFAAOCAQEAyWFhtxKCHf7m2m2idr/iR25dMVjMz49J+Hw2yP562RJoMCb56p/R
aGBB/4+pNh9LoO4okw9S3nl4DRY6iIaDlJ94Fi6Ixyt44pJ0llFlmDwJ+TqHovJH
e2xg2TGRnr1ktkxJOD+6thEw35qk4zzvBOATFftrvIdNUknZ76tMwBTlW8/RH0Xx
GPCx8whDOC3uNe0BsaJnIiETkI6syJC2yXqWdGkbXh9toGyL/CLy/NWdQiLSxTXG
K5Jqj8YCMhxyVoo8PSnE22vb6rtnJpSpk8E5m4xr6xbIWzakNWBDMnuup7SjXyi0
K2fUcnqj/H2cyi6+Bqow/+H2rrPEWLG8XA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org