Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/jy0nWDN8BoZag4wwXH1HnVqOvgw.roa
File:                     jy0nWDN8BoZag4wwXH1HnVqOvgw.roa (raw, json)
Hash identifier:          lKIdG74Vc0hv956WDYFQJhV3YlrMSDpt5tmpWfeTqdc=
Subject key identifier:   8F:2D:27:58:33:7C:06:86:5A:83:8C:30:5C:7D:47:9D:5A:8E:BE:0C
Certificate issuer:       /CN=9de09a41cd7bed771d77205487e7a1823a0c03a2
Certificate serial:       0182B4F3D9067FF836BDD7913B17497A665E
Authority key identifier: 9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neCaQc177XcddyBUh-ehgjoMA6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/jy0nWDN8BoZag4wwXH1HnVqOvgw.roa
Signing time:             Fri 19 Aug 2022 07:14:15 +0000
ROA not before:           Fri 19 Aug 2022 07:14:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52000
IP address blocks:        91.246.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b4:f3:d9:06:7f:f8:36:bd:d7:91:3b:17:49:7a:66:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de09a41cd7bed771d77205487e7a1823a0c03a2
        Validity
            Not Before: Aug 19 07:14:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f2d2758337c06865a838c305c7d479d5a8ebe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:13:62:39:91:db:af:6a:74:8e:5b:9e:99:11:
                    ac:c3:44:3e:9d:ae:00:dc:0b:bf:49:d0:a3:98:5e:
                    c6:10:c9:ee:14:57:fa:17:96:b7:d2:44:a8:89:00:
                    48:a3:a7:c2:d2:e7:6b:da:ac:ae:4f:dd:de:74:ae:
                    d6:3a:ca:92:c1:3e:e7:78:67:f4:ee:6b:20:83:b8:
                    c3:04:d2:fb:b3:c1:5c:6a:21:ac:ce:6d:ea:ed:d9:
                    33:71:8c:6b:0b:3d:0d:70:e2:97:ba:b2:c4:18:b3:
                    69:9a:32:6e:13:5c:3a:91:c2:47:ba:71:a0:5b:8e:
                    51:d7:3a:62:90:a1:19:7a:0c:13:41:ad:a9:54:ac:
                    ec:88:11:5e:c0:2d:95:2c:7e:15:cf:db:7d:31:a3:
                    aa:57:fd:8a:23:f2:2d:9f:74:46:9f:d9:16:2a:fa:
                    8f:99:52:8b:18:4a:ca:3d:da:32:3c:88:4a:1d:cb:
                    75:7a:b4:f7:fa:25:5f:67:fe:9a:fc:ad:48:8f:1a:
                    93:f0:64:a2:99:b7:a4:2b:c6:ec:dc:ed:e8:20:6d:
                    32:12:8f:e9:2c:54:4a:f6:c1:44:64:df:a1:81:54:
                    e0:43:bb:5a:94:3a:16:7c:eb:7a:fc:eb:10:28:85:
                    33:73:7a:17:a1:42:6d:b1:84:2e:1d:df:6b:52:0d:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:27:58:33:7C:06:86:5A:83:8C:30:5C:7D:47:9D:5A:8E:BE:0C
            X509v3 Authority Key Identifier:
                keyid:9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neCaQc177XcddyBUh-ehgjoMA6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/jy0nWDN8BoZag4wwXH1HnVqOvgw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/neCaQc177XcddyBUh-ehgjoMA6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:5c:c0:2f:73:fe:9f:c1:cc:57:1a:86:42:1e:9f:54:71:22:
         87:01:6d:bc:48:fa:3d:03:90:30:2f:ee:f3:94:df:5f:02:e4:
         76:92:1e:65:d5:b9:0b:68:b5:43:2e:07:23:b0:be:5f:11:15:
         e6:90:50:e9:4c:89:90:10:16:f7:9a:2b:1f:57:37:4a:54:c5:
         9e:2e:ab:83:f9:ed:89:07:bf:6d:dc:21:90:9d:99:82:14:e6:
         f8:62:ab:cb:5c:85:8b:b6:58:a0:e3:b5:70:86:d6:ac:bb:9a:
         9b:22:44:fb:d0:73:71:31:4e:19:2f:d6:b2:30:df:f0:28:aa:
         a7:bf:0e:56:8e:79:8a:5f:bb:40:99:be:20:fc:00:a6:c2:83:
         c6:98:17:83:9d:d5:d4:5f:4d:ad:20:f1:5f:6d:72:7f:1d:d8:
         ca:ef:41:73:a3:d9:d3:5e:82:f8:89:5b:0a:a2:a1:96:98:19:
         34:ec:c5:31:1b:d6:42:8a:85:83:71:2a:4e:86:f0:6b:91:c0:
         bd:5b:01:ee:45:e5:f7:dd:3f:1a:1c:be:72:97:4b:f7:59:94:
         76:6e:9f:cc:f8:f3:f0:90:fa:e5:85:91:fd:e8:63:a8:db:06:
         18:56:a6:94:ac:8b:63:e3:a2:52:9e:2c:33:2a:a1:50:a9:68:
         bf:cc:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net