Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e184c-79f0-44a1-8898-01a3d82835a5/1/1-OuLjOv_uYIdIMaDmzmyODq--Vk.roa
File:                     1-OuLjOv_uYIdIMaDmzmyODq--Vk.roa (raw, json)
Hash identifier:          UaVawHV25VYQ+R/i5p+RcXbFg5WeGswptzg3IVo9mHE=
Subject key identifier:   F8:EB:8B:8C:EB:FF:B9:82:1D:20:C6:83:9B:39:B2:38:3A:BE:F9:59
Certificate issuer:       /CN=678ecfed974d5610812bd46c085885e179280666
Certificate serial:       08F69015
Authority key identifier: 67:8E:CF:ED:97:4D:56:10:81:2B:D4:6C:08:58:85:E1:79:28:06:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z47P7ZdNVhCBK9RsCFiF4XkoBmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e184c-79f0-44a1-8898-01a3d82835a5/1/1-OuLjOv_uYIdIMaDmzmyODq--Vk.roa
Signing time:             Sat 01 Jan 2022 15:04:18 +0000
ROA not before:           Sat 01 Jan 2022 15:04:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199366
IP address blocks:        2.56.62.0/24 maxlen: 24
                          2.56.61.0/24 maxlen: 24
                          2.56.63.0/24 maxlen: 24
                          2.56.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150376469 (0x8f69015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678ecfed974d5610812bd46c085885e179280666
        Validity
            Not Before: Jan  1 15:04:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8eb8b8cebffb9821d20c6839b39b2383abef959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:07:33:a2:13:98:1e:cd:a5:b9:c7:32:c6:
                    89:06:41:3d:9c:93:b8:fa:cd:17:d0:ce:d3:35:87:
                    96:77:e5:63:a3:34:c9:33:4b:82:c0:56:76:52:46:
                    8b:ad:96:90:1f:30:e3:1a:5b:e5:8c:46:72:93:a9:
                    1d:22:f1:25:0c:5c:85:21:83:69:3e:6b:09:a7:e1:
                    fd:3a:0b:7e:20:77:1a:ec:ec:e3:c7:1e:ec:64:38:
                    f8:ef:8f:9a:4d:92:e9:18:38:c9:ec:3d:4f:41:74:
                    eb:aa:0d:2a:7f:3c:0e:92:78:8e:31:48:09:4c:9e:
                    40:96:ee:61:cf:f1:69:33:8f:f3:aa:89:aa:c9:b5:
                    79:7c:12:90:ed:64:c3:f0:ed:cc:88:92:bc:81:c3:
                    83:d0:d8:6f:4c:61:43:fc:53:5b:7d:2e:f7:f5:d2:
                    41:8b:57:19:53:5b:1d:e0:be:38:28:cf:01:c8:08:
                    80:7c:d5:27:21:09:cd:ec:ef:14:f6:7c:05:48:10:
                    10:00:7e:9d:bf:6b:6d:2c:f0:ad:97:bf:d1:8b:2e:
                    a8:b3:e6:d6:f8:40:56:b8:6c:49:b7:ab:4e:dd:ba:
                    72:3b:73:36:3f:c1:02:d9:a0:4f:49:fb:b7:62:08:
                    cd:93:6f:30:b4:dd:b1:cf:eb:af:f4:c3:7a:b1:03:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EB:8B:8C:EB:FF:B9:82:1D:20:C6:83:9B:39:B2:38:3A:BE:F9:59
            X509v3 Authority Key Identifier:
                keyid:67:8E:CF:ED:97:4D:56:10:81:2B:D4:6C:08:58:85:E1:79:28:06:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z47P7ZdNVhCBK9RsCFiF4XkoBmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e184c-79f0-44a1-8898-01a3d82835a5/1/1-OuLjOv_uYIdIMaDmzmyODq--Vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e184c-79f0-44a1-8898-01a3d82835a5/1/Z47P7ZdNVhCBK9RsCFiF4XkoBmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:db:68:3f:31:d3:be:8c:2c:ad:8b:98:17:43:2a:04:80:
         d7:94:71:e6:82:22:5b:19:64:09:38:14:2d:b6:10:7b:4b:65:
         c5:73:1e:e7:42:52:70:79:c4:18:ef:20:c8:ec:95:fe:66:56:
         e5:ed:83:8d:06:da:1b:79:34:3a:60:d1:6b:c5:50:c5:4c:21:
         1d:a1:73:b1:06:c1:f8:3f:47:3f:f0:88:7e:c9:9b:e2:47:92:
         f7:7e:a5:00:de:5a:47:13:55:90:75:68:1d:aa:05:d4:ed:95:
         81:9e:62:19:fb:1b:6c:f3:24:47:af:c8:e8:7f:c6:27:2c:7b:
         f3:34:4f:d1:40:b0:28:27:f3:4b:be:a0:e2:c2:6d:69:27:5f:
         fe:0f:c6:94:e6:c7:d3:c4:a0:9e:6e:95:e4:9d:12:88:a8:26:
         a8:4c:aa:3c:c7:ff:0b:a4:52:40:0e:96:fe:78:0a:34:1d:92:
         4b:49:9d:eb:97:90:b8:42:8d:2c:91:17:0c:c9:0e:77:47:0b:
         18:ab:f7:79:11:1c:1b:62:97:0f:39:17:bc:7b:20:43:5d:f6:
         1c:78:da:62:52:40:06:f0:64:b8:fc:3e:dd:87:38:16:ad:2b:
         11:6b:cf:d8:bc:f0:e1:02:d8:02:2e:2f:c3:25:0f:c8:ff:98:
         c8:27:0b:44
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECPaQFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzhlY2ZlZDk3NGQ1NjEwODEyYmQ0NmMwODU4ODVlMTc5MjgwNjY2MB4XDTIyMDEw
MTE1MDQxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjhlYjhiOGNlYmZm
Yjk4MjFkMjBjNjgzOWIzOWIyMzgzYWJlZjk1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/eBzOiE5gezaW5xzLGiQZBPZyTuPrNF9DO0zWHlnflY6M0
yTNLgsBWdlJGi62WkB8w4xpb5YxGcpOpHSLxJQxchSGDaT5rCafh/ToLfiB3Guzs
48ce7GQ4+O+Pmk2S6Rg4yew9T0F066oNKn88DpJ4jjFICUyeQJbuYc/xaTOP86qJ
qsm1eXwSkO1kw/DtzIiSvIHDg9DYb0xhQ/xTW30u9/XSQYtXGVNbHeC+OCjPAcgI
gHzVJyEJzezvFPZ8BUgQEAB+nb9rbSzwrZe/0YsuqLPm1vhAVrhsSberTt26cjtz
Nj/BAtmgT0n7t2IIzZNvMLTdsc/rr/TDerEDhTMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT464uM6/+5gh0gxoObObI4Or75WTAfBgNVHSMEGDAWgBRnjs/tl01WEIEr
1GwIWIXheSgGZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o0N1A3WmROVmhDQks5UnNDRmlGNFhrb0JtWS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvN2UxODRjLTc5ZjAtNDRhMS04ODk4LTAxYTNkODI4MzVhNS8x
LzEtT3VMak92X3VZSWRJTWFEbXpteU9EcS0tVmsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0
LzdlMTg0Yy03OWYwLTQ0YTEtODg5OC0wMWEzZDgyODM1YTUvMS9aNDdQN1pkTlZo
Q0JLOVJzQ0ZpRjRYa29CbVkuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAICODwwDQYJKoZIhvcNAQELBQAD
ggEBABfU22g/MdO+jCyti5gXQyoEgNeUceaCIlsZZAk4FC22EHtLZcVzHudCUnB5
xBjvIMjslf5mVuXtg40G2ht5NDpg0WvFUMVMIR2hc7EGwfg/Rz/wiH7Jm+JHkvd+
pQDeWkcTVZB1aB2qBdTtlYGeYhn7G2zzJEevyOh/xicse/M0T9FAsCgn80u+oOLC
bWknX/4PxpTmx9PEoJ5uleSdEoioJqhMqjzH/wukUkAOlv54CjQdkktJneuXkLhC
jSyRFwzJDndHCxir93kRHBtilw85F7x7IENd9hx42mJSQAbwZLj8Pt2HOBatKxFr
z9i88OEC2AIuL8MlD8j/mMgnC0Q=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:12 2023 by rpki-client on console.sobornost.net