Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/Y-L_F24OFRNMaIKcTPwO1HrNrPA.roa
File:                     Y-L_F24OFRNMaIKcTPwO1HrNrPA.roa (raw, json)
Hash identifier:          7RGUSPeq+3/M2Al3v9dTq0j2T129Dtk4q6TQ5GubvN4=
Subject key identifier:   63:E2:FF:17:6E:0E:15:13:4C:68:82:9C:4C:FC:0E:D4:7A:CD:AC:F0
Certificate issuer:       /CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Certificate serial:       010E8A
Authority key identifier: B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/Y-L_F24OFRNMaIKcTPwO1HrNrPA.roa
Signing time:             Sun 06 Mar 2022 07:57:19 +0000
ROA not before:           Sun 06 Mar 2022 07:57:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201106
IP address blocks:        146.19.114.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69258 (0x10e8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
        Validity
            Not Before: Mar  6 07:57:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63e2ff176e0e15134c68829c4cfc0ed47acdacf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:af:dc:18:a1:30:41:16:bf:7c:71:40:41:
                    16:17:f1:de:57:8a:ad:8d:7e:91:b4:c5:25:83:57:
                    ce:d1:b2:72:86:ed:3b:71:13:4a:ed:98:46:e9:9d:
                    5b:14:e9:42:99:ef:0a:8f:d1:ba:c2:1e:bb:71:ea:
                    ab:64:fa:cb:4b:2d:7a:9e:ac:ab:92:b7:b1:47:61:
                    0d:f0:15:85:ee:c2:8f:61:a7:b1:6a:fe:cd:41:e3:
                    4d:97:98:75:cf:f0:5d:6f:fb:05:ee:be:f1:ec:a8:
                    6e:ca:db:57:c9:a8:8f:94:86:1c:14:53:dd:5e:47:
                    36:73:28:9f:72:46:da:8b:63:63:80:a2:c4:5a:f9:
                    ac:c9:30:ea:24:21:20:fd:06:93:86:b3:5f:87:38:
                    e5:c7:23:cf:f8:e2:17:f0:b2:0c:ed:da:aa:4f:4f:
                    f8:02:ea:34:c6:da:e3:4e:51:3e:7d:64:ff:b0:5f:
                    a8:74:50:dc:cc:ae:6b:cb:4f:6c:c9:ce:06:9d:83:
                    b7:bd:4f:f5:46:b2:ca:f6:dd:23:6e:58:cb:ef:6c:
                    1c:b4:96:95:43:2c:8d:6b:4a:2d:7c:26:43:a0:45:
                    dc:6e:57:e7:88:11:7c:75:96:2e:61:db:08:d2:b0:
                    1c:ac:70:bb:21:b8:e5:13:a0:db:a4:e7:73:da:84:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E2:FF:17:6E:0E:15:13:4C:68:82:9C:4C:FC:0E:D4:7A:CD:AC:F0
            X509v3 Authority Key Identifier:
                keyid:B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/Y-L_F24OFRNMaIKcTPwO1HrNrPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:de:b5:8e:0d:06:fa:ca:7e:5f:f7:43:77:08:ba:fb:ab:
         a9:a9:55:99:a1:08:36:3a:0d:bf:09:f1:e1:8f:3a:ec:9f:9a:
         27:60:04:70:d8:52:b1:30:b5:dd:5e:6e:03:86:dd:e3:ef:82:
         8f:e0:a2:b6:be:21:16:7e:b3:5c:15:35:80:64:62:87:11:0b:
         ca:5d:c8:19:c3:e6:43:b1:3a:5d:26:f0:82:10:b0:0b:53:1a:
         cb:f0:49:13:ce:10:d0:95:92:c0:15:38:61:dc:2e:a2:7f:e7:
         e4:b0:52:3c:66:62:87:ff:f1:50:35:c7:59:1b:7c:1c:21:99:
         0c:99:1a:8c:ec:8c:d0:63:63:6f:98:f3:5c:3e:dd:77:e6:05:
         0a:dd:5b:58:2d:43:ef:88:82:af:dc:65:00:c1:d1:85:10:ab:
         55:46:1f:d7:95:89:b0:91:d1:06:72:d5:14:64:06:63:1e:b1:
         cb:3b:ba:85:52:5b:65:28:00:e8:84:f1:c9:94:8f:38:4d:a2:
         61:12:eb:18:78:5a:20:34:6a:3c:da:4f:2e:e3:4a:4a:65:26:
         57:16:ea:d4:ba:58:79:d6:c6:38:b9:e1:8c:2c:df:4f:bb:14:
         2c:9c:b7:4c:10:15:c3:09:e2:da:95:0a:b2:cc:9f:b9:91:66:
         28:17:30:a3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAQ6KMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIy
MDdiNzk4NDdkMjJlZTg1NmRkNWRhY2Y0YWI5ZTkwZTI0ZGU2ZTQwHhcNMjIwMzA2
MDc1NzE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2M2UyZmYxNzZlMGUx
NTEzNGM2ODgyOWM0Y2ZjMGVkNDdhY2RhY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyxOv3BihMEEWv3xxQEEWF/HeV4qtjX6RtMUlg1fO0bJyhu07
cRNK7ZhG6Z1bFOlCme8Kj9G6wh67ceqrZPrLSy16nqyrkrexR2EN8BWF7sKPYaex
av7NQeNNl5h1z/Bdb/sF7r7x7KhuyttXyaiPlIYcFFPdXkc2cyifckbai2NjgKLE
WvmsyTDqJCEg/QaThrNfhzjlxyPP+OIX8LIM7dqqT0/4Auo0xtrjTlE+fWT/sF+o
dFDczK5ry09syc4GnYO3vU/1RrLK9t0jbljL72wctJaVQyyNa0otfCZDoEXcblfn
iBF8dZYuYdsI0rAcrHC7IbjlE6DbpOdz2oQ1ZQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGPi/xduDhUTTGiCnEz8DtR6zazwMB8GA1UdIwQYMBaAFLIHt5hH0i7oVt1d
rPSrnpDiTebkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
c2dlM21FZlNMdWhXM1YyczlLdWVrT0pONXVRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mYy9mODcwNmQtNDIwNy00NDM5LWI1Y2MtMDg0YTk0ZjljMzkwLzEv
WS1MX0YyNE9GUk5NYUlLY1RQd08xSHJOclBBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9m
ODcwNmQtNDIwNy00NDM5LWI1Y2MtMDg0YTk0ZjljMzkwLzEvc2dlM21FZlNMdWhX
M1YyczlLdWVrT0pONXVRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNyMA0GCSqGSIb3DQEBCwUAA4IB
AQAajd61jg0G+sp+X/dDdwi6+6upqVWZoQg2Og2/CfHhjzrsn5onYARw2FKxMLXd
Xm4Dht3j74KP4KK2viEWfrNcFTWAZGKHEQvKXcgZw+ZDsTpdJvCCELALUxrL8EkT
zhDQlZLAFThh3C6if+fksFI8ZmKH//FQNcdZG3wcIZkMmRqM7IzQY2NvmPNcPt13
5gUK3VtYLUPviIKv3GUAwdGFEKtVRh/XlYmwkdEGctUUZAZjHrHLO7qFUltlKADo
hPHJlI84TaJhEusYeFogNGo82k8u40pKZSZXFurUulh51sY4ueGMLN9PuxQsnLdM
EBXDCeLalQqyzJ+5kWYoFzCj
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:50 2024 by rpki-client on console-fra.rpki-client.org