Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/uwbsY5Wqn_DU6kOr3IQRAHMYWCU.roa
File:                     uwbsY5Wqn_DU6kOr3IQRAHMYWCU.roa (raw, json)
Hash identifier:          4CKbEASrliMtxyGUD5lj9cskKR9OwbPCgCJwz0tSxP4=
Subject key identifier:   BB:06:EC:63:95:AA:9F:F0:D4:EA:43:AB:DC:84:11:00:73:18:58:25
Certificate issuer:       /CN=b01ffbf22e37c7ae42c03f6e63f32172399cfe07
Certificate serial:       018CC50082561AC7007AEFB6050FD2A3F152
Authority key identifier: B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sB_78i43x65CwD9uY_Mhcjmc_gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/uwbsY5Wqn_DU6kOr3IQRAHMYWCU.roa
Signing time:             Mon 01 Jan 2024 12:29:54 +0000
ROA not before:           Mon 01 Jan 2024 12:29:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39855
IP address blocks:        45.92.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:82:56:1a:c7:00:7a:ef:b6:05:0f:d2:a3:f1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b01ffbf22e37c7ae42c03f6e63f32172399cfe07
        Validity
            Not Before: Jan  1 12:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bb06ec6395aa9ff0d4ea43abdc84110073185825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:8e:bd:2b:61:3c:22:9d:c5:92:27:60:6a:
                    72:bf:b4:0a:17:00:ec:3c:2c:b5:75:b1:79:36:67:
                    cd:4e:e6:ac:a3:e4:a1:ae:c7:da:99:f2:76:84:2d:
                    fd:d2:76:ee:5c:c2:9c:a3:d9:dc:09:86:0c:49:65:
                    7e:42:e1:d2:5d:08:03:44:01:c1:74:38:f7:85:ef:
                    7f:b9:81:2b:70:24:77:20:d3:4a:31:b2:82:aa:cb:
                    ff:b3:bf:aa:11:c5:3e:67:63:d9:05:fd:b4:4a:6c:
                    d2:1c:29:fe:f5:39:29:11:e1:ea:ad:35:a6:24:b1:
                    65:44:c2:a2:3d:a4:ec:a2:7b:8d:b1:f6:39:40:de:
                    be:0c:62:bd:9e:4c:e0:36:7e:b3:a6:5e:4d:cd:b6:
                    8b:52:24:46:a6:cf:65:6f:21:8c:bb:b0:43:ce:39:
                    46:d8:e6:a4:90:c2:36:79:c5:ad:bb:ff:ab:f6:42:
                    cb:ad:a5:d1:a7:0a:1f:13:82:85:8f:60:94:1a:be:
                    48:01:c3:37:b7:11:3d:dc:b0:7c:d0:96:16:a6:6e:
                    f3:ee:58:e7:d3:c3:86:71:cb:75:1e:a7:55:7d:72:
                    91:02:b5:a9:4d:2d:20:8d:77:e0:2a:0a:7d:48:46:
                    18:37:1a:a1:6c:63:b6:26:5f:d0:88:83:2b:47:d7:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:06:EC:63:95:AA:9F:F0:D4:EA:43:AB:DC:84:11:00:73:18:58:25
            X509v3 Authority Key Identifier:
                keyid:B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sB_78i43x65CwD9uY_Mhcjmc_gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/uwbsY5Wqn_DU6kOr3IQRAHMYWCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:92:09:8c:2a:09:4a:da:bf:cd:81:2e:7e:3a:ff:e1:72:d0:
         78:64:6b:79:c6:f9:4d:50:ed:c7:3e:99:07:2d:71:a2:37:8b:
         41:05:ea:d7:b1:ce:92:cb:dc:ce:fd:ae:6c:e9:95:31:84:f3:
         bf:33:18:bf:7c:3e:43:32:51:1e:55:d8:c6:01:07:e4:b5:a1:
         05:ab:cc:84:00:f5:e2:1e:e7:d6:aa:8a:d9:b0:de:d5:24:5c:
         4a:13:b7:93:b5:32:5b:3c:2e:11:07:87:b9:35:d4:f5:35:29:
         87:b6:51:8a:2b:9c:ee:25:15:71:c9:2d:cc:2f:ea:b6:ff:1c:
         f2:cb:64:91:8a:51:9e:4c:8a:6f:3e:4c:c9:46:93:bc:09:24:
         53:6f:25:01:1f:55:4e:ac:1b:8c:f2:07:8c:53:e2:71:43:c4:
         7d:40:a3:ef:42:8e:4a:ed:37:2a:33:b2:5b:ff:d7:12:dd:37:
         c0:e8:e6:ba:aa:e2:99:15:ed:0e:db:fa:d5:d6:cf:86:3a:57:
         e5:82:e3:e8:1b:cf:ce:79:bb:c8:79:66:fb:e8:40:a0:fc:f5:
         ae:5d:f0:ea:4d:7d:64:6c:9c:16:c5:bf:ea:ca:37:b3:dd:b6:
         ec:50:0d:21:59:b6:8d:86:68:c9:f8:59:fc:e8:e0:77:fd:15:
         45:9d:8d:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAIJWGscAeu+2BQ/So/FSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMWZmYmYyMmUzN2M3YWU0MmMwM2Y2ZTYzZjMyMTcyMzk5
Y2ZlMDcwHhcNMjQwMTAxMTIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjA2ZWM2Mzk1YWE5ZmYwZDRlYTQzYWJkYzg0MTEwMDczMTg1ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGOvSthPCKdxZInYGpyv7QKFwDs
PCy1dbF5NmfNTuaso+ShrsfamfJ2hC390nbuXMKco9ncCYYMSWV+QuHSXQgDRAHB
dDj3he9/uYErcCR3INNKMbKCqsv/s7+qEcU+Z2PZBf20SmzSHCn+9TkpEeHqrTWm
JLFlRMKiPaTsonuNsfY5QN6+DGK9nkzgNn6zpl5NzbaLUiRGps9lbyGMu7BDzjlG
2OakkMI2ecWtu/+r9kLLraXRpwofE4KFj2CUGr5IAcM3txE93LB80JYWpm7z7ljn
08OGcct1HqdVfXKRArWpTS0gjXfgKgp9SEYYNxqhbGO2Jl/QiIMrR9druwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsG7GOVqp/w1OpDq9yEEQBzGFglMB8GA1UdIwQY
MBaAFLAf+/IuN8euQsA/bmPzIXI5nP4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JfNzhpNDN4NjVDd0Q5dVlfTWhjam1jX2djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMmRmNDUtZjRiNy00ZWM2LTg2MTIt
NGFiMDM2Y2FjMmRiLzEvdXdic1k1V3FuX0RVNmtPcjNJUVJBSE1ZV0NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hMmRmNDUtZjRiNy00ZWM2LTg2MTItNGFiMDM2Y2FjMmRi
LzEvc0JfNzhpNDN4NjVDd0Q5dVlfTWhjam1jX2djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVxMMA0G
CSqGSIb3DQEBCwUAA4IBAQCHkgmMKglK2r/NgS5+Ov/hctB4ZGt5xvlNUO3HPpkH
LXGiN4tBBerXsc6Sy9zO/a5s6ZUxhPO/Mxi/fD5DMlEeVdjGAQfktaEFq8yEAPXi
HufWqorZsN7VJFxKE7eTtTJbPC4RB4e5NdT1NSmHtlGKK5zuJRVxyS3ML+q2/xzy
y2SRilGeTIpvPkzJRpO8CSRTbyUBH1VOrBuM8geMU+JxQ8R9QKPvQo5K7TcqM7Jb
/9cS3TfA6Oa6quKZFe0O2/rV1s+GOlflguPoG8/OebvIeWb76ECg/PWuXfDqTX1k
bJwWxb/qyjez3bbsUA0hWbaNhmjJ+Fn86OB3/RVFnY2x
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:06 2024 by rpki-client on console.sobornost.net