Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/5pPao6PVMuS0MiVLFII1ODuEt7k.roa
File:                     5pPao6PVMuS0MiVLFII1ODuEt7k.roa (raw, json)
Hash identifier:          uAodWO+RCu5eHJYDQQEdHR75FNNLs51BioSyb6yvS1A=
Subject key identifier:   E6:93:DA:A3:A3:D5:32:E4:B4:32:25:4B:14:82:35:38:3B:84:B7:B9
Certificate issuer:       /CN=c9db05794792cae4ce3e6a53eb17e39eeb56a924
Certificate serial:       0181F46A8DE8D048FC812948B14D26185852
Authority key identifier: C9:DB:05:79:47:92:CA:E4:CE:3E:6A:53:EB:17:E3:9E:EB:56:A9:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydsFeUeSyuTOPmpT6xfjnutWqSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/5pPao6PVMuS0MiVLFII1ODuEt7k.roa
Signing time:             Tue 12 Jul 2022 21:57:12 +0000
ROA not before:           Tue 12 Jul 2022 21:57:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        146.19.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:6a:8d:e8:d0:48:fc:81:29:48:b1:4d:26:18:58:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9db05794792cae4ce3e6a53eb17e39eeb56a924
        Validity
            Not Before: Jul 12 21:57:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e693daa3a3d532e4b432254b148235383b84b7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:cc:2b:75:ed:47:1b:98:5a:f0:09:71:bd:
                    4c:9c:58:d5:12:d2:40:78:c7:b5:c1:47:6f:77:b3:
                    f1:61:54:84:5a:ea:04:01:26:56:0b:d1:42:a3:3d:
                    2b:2d:5c:0a:52:29:e2:93:35:77:7f:cc:bc:ac:8f:
                    68:25:71:10:2d:43:a9:b5:3f:83:08:97:37:b4:fd:
                    a7:85:72:1f:77:2e:42:7e:35:53:ac:0d:d2:de:61:
                    22:2e:22:08:44:5f:ce:17:6f:a4:2f:79:be:59:49:
                    82:59:e0:de:4b:bf:50:80:c6:54:44:d4:50:e3:46:
                    5a:6a:18:d9:ca:26:cf:c0:70:d7:9c:f4:7e:29:5e:
                    cf:1a:24:6a:8b:03:10:0e:88:51:72:6e:5f:77:2b:
                    81:41:2d:40:30:a7:b1:23:ac:6c:97:79:5e:1d:aa:
                    43:e1:6a:8f:91:d8:ff:6d:9e:a5:a4:90:f5:28:d9:
                    2c:2a:62:40:89:92:db:5e:32:ba:4c:ad:b0:ee:25:
                    75:95:79:ef:7a:6f:d9:e7:4d:35:fe:a4:74:0c:c0:
                    82:48:04:95:9c:96:c2:00:b8:aa:a3:e4:b4:f3:ba:
                    e4:08:40:23:f2:9e:f6:2f:dc:58:c9:25:b3:44:50:
                    ed:d8:21:df:92:2a:e9:7d:24:e7:b1:44:00:e0:8c:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:DA:A3:A3:D5:32:E4:B4:32:25:4B:14:82:35:38:3B:84:B7:B9
            X509v3 Authority Key Identifier:
                keyid:C9:DB:05:79:47:92:CA:E4:CE:3E:6A:53:EB:17:E3:9E:EB:56:A9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydsFeUeSyuTOPmpT6xfjnutWqSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/5pPao6PVMuS0MiVLFII1ODuEt7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1c3c50-a9f6-4987-b648-11e0d779df3b/1/ydsFeUeSyuTOPmpT6xfjnutWqSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:11:8b:f9:21:f8:8c:eb:e2:99:bf:30:0a:d2:32:a2:9e:70:
         c1:3f:62:19:38:95:49:9b:72:31:8c:40:08:a5:9e:9a:6c:91:
         0b:14:13:89:e5:ba:12:8e:38:b8:34:77:a5:b0:09:9f:2d:b7:
         e9:32:1e:44:3c:89:6c:e8:2d:58:71:8d:3a:a4:70:84:74:87:
         35:d5:36:ca:e8:b3:07:b8:8e:cf:b6:b3:e7:67:fe:6b:3e:9f:
         29:64:04:1c:dd:1f:95:d8:45:35:55:f9:02:bc:c1:ca:95:35:
         62:80:9c:0a:c2:bc:a9:05:bd:32:da:5d:e7:42:ac:79:ac:0a:
         09:73:18:14:51:5f:50:69:f2:85:f2:94:ed:4b:71:bf:fc:4e:
         fc:8a:5f:e8:be:08:e0:1a:c3:ba:3e:3b:91:4c:ba:20:ee:27:
         b5:03:73:92:4f:97:0d:65:e7:81:18:54:de:e6:49:35:33:cd:
         2e:69:3d:c9:c0:f8:24:f6:40:2f:31:72:f5:a7:53:66:aa:2b:
         dc:4f:c0:59:d4:fb:41:5d:d5:9c:63:d9:54:5b:a7:e4:3a:6a:
         88:f2:d4:fc:ee:bd:ae:5e:a1:cb:eb:f1:b8:45:f9:1c:3c:ae:
         b8:01:5f:a8:eb:da:bf:b2:bb:75:30:7c:c9:b2:ed:76:6a:05:
         56:eb:a4:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH0ao3o0Ej8gSlIsU0mGFhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGIwNTc5NDc5MmNhZTRjZTNlNmE1M2ViMTdlMzllZWI1
NmE5MjQwHhcNMjIwNzEyMjE1NzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjkzZGFhM2EzZDUzMmU0YjQzMjI1NGIxNDgyMzUzODNiODRiN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEzMK3XtRxuYWvAJcb1MnFjVEtJA
eMe1wUdvd7PxYVSEWuoEASZWC9FCoz0rLVwKUinikzV3f8y8rI9oJXEQLUOptT+D
CJc3tP2nhXIfdy5CfjVTrA3S3mEiLiIIRF/OF2+kL3m+WUmCWeDeS79QgMZURNRQ
40ZaahjZyibPwHDXnPR+KV7PGiRqiwMQDohRcm5fdyuBQS1AMKexI6xsl3leHapD
4WqPkdj/bZ6lpJD1KNksKmJAiZLbXjK6TK2w7iV1lXnvem/Z5001/qR0DMCCSASV
nJbCALiqo+S087rkCEAj8p72L9xYySWzRFDt2CHfkirpfSTnsUQA4IyeGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaT2qOj1TLktDIlSxSCNTg7hLe5MB8GA1UdIwQY
MBaAFMnbBXlHksrkzj5qU+sX457rVqkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRzRmVVZVN5dVRPUG1wVDZ4ZmpudXRXcVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xYzNjNTAtYTlmNi00OTg3LWI2NDgt
MTFlMGQ3NzlkZjNiLzEvNXBQYW82UFZNdVMwTWlWTEZJSTFPRHVFdDdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xYzNjNTAtYTlmNi00OTg3LWI2NDgtMTFlMGQ3NzlkZjNi
LzEveWRzRmVVZVN5dVRPUG1wVDZ4ZmpudXRXcVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhO7MA0G
CSqGSIb3DQEBCwUAA4IBAQAZEYv5IfiM6+KZvzAK0jKinnDBP2IZOJVJm3IxjEAI
pZ6abJELFBOJ5boSjji4NHelsAmfLbfpMh5EPIls6C1YcY06pHCEdIc11TbK6LMH
uI7PtrPnZ/5rPp8pZAQc3R+V2EU1VfkCvMHKlTVigJwKwrypBb0y2l3nQqx5rAoJ
cxgUUV9QafKF8pTtS3G//E78il/ovgjgGsO6PjuRTLog7ie1A3OST5cNZeeBGFTe
5kk1M80uaT3JwPgk9kAvMXL1p1NmqivcT8BZ1PtBXdWcY9lUW6fkOmqI8tT87r2u
XqHL6/G4RfkcPK64AV+o69q/srt1MHzJsu12agVW66R7
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org