Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/N14fh-1vj0OS_ZrUexmCfIJnoSI.roa
File:                     N14fh-1vj0OS_ZrUexmCfIJnoSI.roa (raw, json)
Hash identifier:          K8Dy4IWGH8QIWsAK14iwK3NbpMJATbEQpnUaIFi6QBw=
Subject key identifier:   37:5E:1F:87:ED:6F:8F:43:92:FD:9A:D4:7B:19:82:7C:82:67:A1:22
Certificate issuer:       /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial:       01F33E80
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/N14fh-1vj0OS_ZrUexmCfIJnoSI.roa
Signing time:             Wed 13 Apr 2022 10:34:48 +0000
ROA not before:           Wed 13 Apr 2022 10:34:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50391
IP address blocks:        213.5.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32718464 (0x1f33e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
        Validity
            Not Before: Apr 13 10:34:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=375e1f87ed6f8f4392fd9ad47b19827c8267a122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:0d:f2:eb:e3:d8:12:62:5b:24:b3:a2:a7:
                    6c:be:5b:a2:91:2a:97:b1:48:7a:6f:01:b3:98:a4:
                    ee:a8:d4:24:b6:27:18:fe:93:34:63:86:d0:9d:af:
                    96:26:af:1e:66:93:20:00:a8:31:9b:a0:3d:99:f9:
                    48:23:c2:22:35:bf:b7:02:d2:62:30:11:0b:1e:ae:
                    e5:5d:8a:b0:0c:74:c2:c9:b2:1b:88:d5:6e:67:64:
                    20:64:36:2e:2f:68:ec:26:a0:aa:9b:1a:80:83:c2:
                    a2:c5:98:a3:f2:1b:92:b8:f1:3b:b3:d1:b0:94:72:
                    ac:e7:41:e8:c2:9a:5d:af:7f:2e:d5:03:0c:3c:4b:
                    17:30:64:ae:3c:e3:1f:f2:35:f1:26:67:3a:ec:f5:
                    45:5d:7d:cc:35:c7:39:35:bb:1b:f1:68:8e:e0:8c:
                    4e:1e:10:f6:2b:62:a8:2c:33:82:c8:19:34:f8:97:
                    4d:2f:b0:6c:92:fc:3e:2b:29:f8:d4:2b:4a:54:7c:
                    e9:8e:a4:f4:fe:3d:72:c8:da:22:19:59:2a:e7:04:
                    9d:d4:72:75:58:4c:82:34:7a:82:44:a1:af:68:e7:
                    e9:45:45:c3:06:b2:74:51:9f:18:52:46:5d:94:cc:
                    47:2d:82:ad:0b:e0:16:8e:9a:1b:21:f6:9f:a0:db:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5E:1F:87:ED:6F:8F:43:92:FD:9A:D4:7B:19:82:7C:82:67:A1:22
            X509v3 Authority Key Identifier:
                keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/N14fh-1vj0OS_ZrUexmCfIJnoSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.5.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:fa:19:00:f6:f7:a9:85:4c:9f:cc:a1:5a:ec:6c:1c:f8:
         44:2b:d3:cd:b3:41:03:13:86:5b:52:27:5b:b4:3d:d3:f9:ba:
         b7:49:f4:5b:4b:d9:bc:38:77:90:ff:52:d6:a2:aa:a3:11:1f:
         64:42:71:16:24:8f:17:89:c1:31:02:32:30:4e:03:f8:e7:35:
         13:9c:cc:c4:aa:f3:cc:0a:7b:26:ec:27:05:18:63:65:6f:48:
         ed:36:01:b0:2e:fb:c0:83:29:3e:05:c6:bd:60:f4:70:d4:b8:
         06:aa:d4:fa:7a:b7:ee:21:d6:36:54:15:23:19:1b:ed:64:04:
         ec:76:72:87:3d:96:2b:a3:33:39:d8:55:dc:51:10:7e:c8:ff:
         6e:a3:5c:1f:41:ff:ba:6a:3f:ae:e4:54:50:6a:13:4b:e4:ca:
         7f:16:4f:78:b0:8e:e0:bc:1e:4a:58:8e:c2:9d:a6:ae:e1:2e:
         d1:c6:95:43:c3:a0:74:c2:c0:93:8d:ef:51:d8:4a:14:17:79:
         85:83:75:bc:47:3c:e4:fc:89:a6:eb:62:97:6b:43:09:c6:a8:
         5c:88:a1:e8:77:20:5c:90:2f:d0:52:d1:f6:b4:f9:98:e9:8e:
         93:6e:a5:19:7b:64:56:a0:02:04:90:08:76:c3:43:da:8e:43:
         20:c6:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net