Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/J31ufBMG3rLCNZScq_91ooJsb58.roa
File:                     J31ufBMG3rLCNZScq_91ooJsb58.roa (raw, json)
Hash identifier:          +uBM3YKxBem86js/NyGqXjclyJtChirIDcWtZLssBno=
Subject key identifier:   27:7D:6E:7C:13:06:DE:B2:C2:35:94:9C:AB:FF:75:A2:82:6C:6F:9F
Certificate issuer:       /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial:       0777E067
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/J31ufBMG3rLCNZScq_91ooJsb58.roa
Signing time:             Tue 31 May 2022 10:27:58 +0000
ROA not before:           Tue 31 May 2022 10:27:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        91.217.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125296743 (0x777e067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
        Validity
            Not Before: May 31 10:27:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=277d6e7c1306deb2c235949cabff75a2826c6f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:5a:44:b6:ff:ec:00:72:4a:14:31:fe:91:
                    4b:29:ec:05:4c:94:82:15:b8:84:c5:99:7f:e0:fa:
                    49:fa:24:69:63:ff:cc:72:c2:23:45:e9:83:f9:b4:
                    2f:2d:7a:17:11:3b:c3:1e:a2:39:90:0a:1c:f4:ee:
                    d3:bf:25:1b:d9:40:fd:e0:7e:b3:33:fd:37:fb:a4:
                    94:e3:0a:e5:7c:1c:da:23:11:c3:42:47:93:00:09:
                    36:c3:e7:3d:d6:93:16:fd:1e:63:ec:a0:a7:bd:cf:
                    79:ec:91:45:9e:6b:37:1f:3f:71:aa:77:00:bb:c2:
                    dd:84:57:67:df:46:c6:c7:09:d0:ef:60:5c:61:f2:
                    9c:8b:0e:0f:27:a7:ed:27:71:76:67:29:ea:66:c8:
                    98:6a:91:18:6d:e9:71:ff:d0:37:50:7a:4a:e9:38:
                    b2:72:fc:1d:06:73:cc:bc:a1:1a:cd:a1:0f:0b:50:
                    13:cc:f3:60:45:b2:83:d2:bf:49:f6:4d:e3:9a:ab:
                    26:7c:09:88:95:40:50:96:19:33:97:d7:6b:45:75:
                    6a:93:d9:6d:3a:c6:f9:89:e2:f7:df:e4:d9:4b:ef:
                    01:de:11:dd:18:85:5c:84:ac:28:93:d2:32:f4:96:
                    8a:a0:42:f9:8b:3f:22:97:09:b1:f2:f4:b8:c3:60:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7D:6E:7C:13:06:DE:B2:C2:35:94:9C:AB:FF:75:A2:82:6C:6F:9F
            X509v3 Authority Key Identifier:
                keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/J31ufBMG3rLCNZScq_91ooJsb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:07:9f:2b:41:de:b9:7d:c0:8c:64:3e:d4:c4:97:89:25:
         26:9f:28:da:05:05:59:8d:07:01:17:43:23:62:ab:33:19:ad:
         fc:98:21:5a:11:a2:91:e7:61:15:f6:c3:23:69:95:26:e9:a6:
         cc:0c:65:a0:b4:54:a0:3e:0c:71:08:f9:55:a9:f9:06:0e:d2:
         a3:71:2b:bd:c0:6d:4d:2a:8e:b5:ce:17:de:b2:9d:b5:95:ac:
         93:5b:28:65:88:01:32:76:3e:0c:a5:a8:1d:a8:b9:d6:63:75:
         6f:07:4d:4d:00:51:35:90:96:76:b8:8a:1e:e3:a8:3b:65:03:
         39:e5:e4:e1:e4:7e:72:49:c8:9f:45:e6:37:4b:d2:a7:1d:41:
         44:d9:df:89:ee:d5:13:ba:9c:84:c3:d3:42:03:b4:f2:3d:1d:
         b7:8d:7c:f8:b1:81:08:b6:06:24:06:67:c4:c4:72:ee:18:e6:
         52:7f:25:9d:bb:2f:82:ba:9a:3d:86:7b:a8:ae:1b:13:6d:60:
         6b:9f:7f:c4:c2:16:81:4d:4a:7b:06:11:60:77:da:ca:7e:6b:
         82:1b:a1:cc:72:24:75:04:26:15:f1:0f:a4:df:0b:26:7a:0d:
         b4:da:4c:93:85:ff:0b:1e:24:92:97:4d:2e:53:d2:a0:ac:c2:
         b4:fa:5f:3c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB3fgZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODM5NWZiOGY0NTI0YjhhNmY5NDViYmZhOTM4YjhmNjE2OTQwNTJmMB4XDTIyMDUz
MTEwMjc1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjc3ZDZlN2MxMzA2
ZGViMmMyMzU5NDljYWJmZjc1YTI4MjZjNmY5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANQ5WkS2/+wAckoUMf6RSynsBUyUghW4hMWZf+D6SfokaWP/
zHLCI0Xpg/m0Ly16FxE7wx6iOZAKHPTu078lG9lA/eB+szP9N/uklOMK5Xwc2iMR
w0JHkwAJNsPnPdaTFv0eY+ygp73PeeyRRZ5rNx8/cap3ALvC3YRXZ99GxscJ0O9g
XGHynIsODyen7Sdxdmcp6mbImGqRGG3pcf/QN1B6Suk4snL8HQZzzLyhGs2hDwtQ
E8zzYEWyg9K/SfZN45qrJnwJiJVAUJYZM5fXa0V1apPZbTrG+Yni99/k2UvvAd4R
3RiFXISsKJPSMvSWiqBC+Ys/IpcJsfL0uMNgZuUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQnfW58EwbessI1lJyr/3WigmxvnzAfBgNVHSMEGDAWgBRoOV+49FJLim+U
W7+pOLj2FpQFLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FEbGZ1UFJTUzRwdmxGdV9xVGk0OWhhVUJTOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvMWEzZDVjLWU0OWEtNGQ0ZC1hNzBkLWI2ZDQyN2EzYjEwNi8x
L0ozMXVmQk1HM3JMQ05aU2NxXzkxb29Kc2I1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
MWEzZDVjLWU0OWEtNGQ0ZC1hNzBkLWI2ZDQyN2EzYjEwNi8xL2FEbGZ1UFJTUzRw
dmxGdV9xVGk0OWhhVUJTOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvZBjANBgkqhkiG9w0BAQsFAAOC
AQEAqFoHnytB3rl9wIxkPtTEl4klJp8o2gUFWY0HARdDI2KrMxmt/JghWhGikedh
FfbDI2mVJummzAxloLRUoD4McQj5Van5Bg7So3ErvcBtTSqOtc4X3rKdtZWsk1so
ZYgBMnY+DKWoHai51mN1bwdNTQBRNZCWdriKHuOoO2UDOeXk4eR+cknIn0XmN0vS
px1BRNnfie7VE7qchMPTQgO08j0dt418+LGBCLYGJAZnxMRy7hjmUn8lnbsvgrqa
PYZ7qK4bE21ga59/xMIWgU1KewYRYHfayn5rghuhzHIkdQQmFfEPpN8LJnoNtNpM
k4X/Cx4kkpdNLlPSoKzCtPpfPA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net