Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ljLCfCixlAmUI3qqhy_AgnOtJPE.roa
File:                     ljLCfCixlAmUI3qqhy_AgnOtJPE.roa (raw, json)
Hash identifier:          gLMtmTr9/e3pSvKJAHLDJQaPAbexYhiWnpcWsoPnE1Y=
Subject key identifier:   96:32:C2:7C:28:B1:94:09:94:23:7A:AA:87:2F:C0:82:73:AD:24:F1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01827887380646D94C910DD45C362CDC555D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ljLCfCixlAmUI3qqhy_AgnOtJPE.roa
Signing time:             Sun 07 Aug 2022 13:38:23 +0000
ROA not before:           Sun 07 Aug 2022 13:38:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a06:a005:5a4::/48 maxlen: 48
                          2a06:a005:437::/48 maxlen: 48
                          2a06:a005:a15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:78:87:38:06:46:d9:4c:91:0d:d4:5c:36:2c:dc:55:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  7 13:38:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9632c27c28b1940994237aaa872fc08273ad24f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:52:d4:7e:77:77:42:2d:24:4b:23:cd:da:
                    ec:a1:e8:37:fe:55:20:9e:00:1e:9d:5f:07:56:89:
                    fa:9f:57:cd:08:92:68:0d:8e:0c:5a:91:16:d7:17:
                    63:90:4e:b4:d9:32:51:17:3b:21:d2:7f:6a:d5:7a:
                    eb:ef:f8:5f:36:34:a8:c9:50:ac:ec:e6:71:28:e8:
                    51:6e:08:3f:1e:4a:be:b0:b8:2b:5f:4b:d1:9c:f5:
                    97:4d:9e:bc:fa:20:b9:75:82:23:73:ea:71:54:18:
                    12:e5:52:80:05:39:62:55:eb:97:52:f6:40:06:41:
                    72:f7:a4:05:a6:f7:61:a2:50:7c:25:2f:85:65:8e:
                    e7:2b:39:9d:2c:2d:ed:23:75:df:df:75:f9:0b:d1:
                    96:38:72:79:2a:4e:c1:17:a5:f2:3a:43:cd:ea:14:
                    ff:39:31:2f:66:fc:62:db:18:55:d2:49:50:5d:a3:
                    7a:3c:5e:5d:fb:ef:7a:1d:ab:4f:0c:18:17:0b:5c:
                    20:4d:84:14:b4:9b:05:18:df:e5:57:aa:5a:3f:7b:
                    80:b1:3f:84:c9:c8:41:f0:90:f4:bb:7f:8e:40:af:
                    39:63:85:2d:da:79:9e:bf:04:78:dc:b8:0f:b6:ad:
                    5c:83:8f:2d:6b:d4:e5:16:6b:12:3e:2c:db:31:b8:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:32:C2:7C:28:B1:94:09:94:23:7A:AA:87:2F:C0:82:73:AD:24:F1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ljLCfCixlAmUI3qqhy_AgnOtJPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a06:a005:5a4::/48
                  2a06:a005:a15::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:56:d4:e0:61:c0:79:1e:4f:68:5e:79:44:1f:71:85:9d:0b:
         f9:ed:eb:e5:30:0e:d3:1c:d9:c0:08:0f:59:0a:33:7c:b2:af:
         74:5a:a6:33:a9:b6:57:15:7b:0e:ef:26:23:8e:68:ec:15:84:
         fe:7c:48:a1:6e:63:64:9e:6b:af:2d:7a:33:2a:21:c5:a3:bd:
         f7:53:94:d4:40:63:2b:6f:0a:f2:d1:5c:aa:5a:eb:73:a8:b7:
         d2:8a:22:64:d4:64:7c:09:f8:68:1e:98:85:69:5c:c7:19:36:
         98:c5:c4:8c:c2:c1:ea:0c:28:fd:4e:47:79:44:76:14:dc:67:
         3d:26:af:83:8b:7c:68:ea:de:f1:99:56:b4:57:93:e1:12:a8:
         22:af:7a:95:44:8c:4d:0d:e6:c4:7c:47:75:01:26:47:f8:ab:
         25:8b:db:a3:ba:d7:8a:e9:9f:6c:67:54:fc:68:77:06:23:6d:
         19:d3:f7:9f:53:66:89:74:95:91:98:77:dc:21:3f:75:57:2d:
         f8:5c:48:b7:d7:ee:91:db:f9:a6:1f:16:6c:10:53:ca:2e:ec:
         e3:b8:82:e2:8d:7c:06:b6:03:c4:e3:9e:48:18:c4:a8:97:39:
         d3:ae:82:8b:9d:39:be:a4:d1:3f:c1:f4:26:41:e2:69:ab:05:
         ff:6e:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net