Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/FboUPWI7VlwHpmVQF1amUTfjlmA.roa
File:                     FboUPWI7VlwHpmVQF1amUTfjlmA.roa (raw, json)
Hash identifier:          hF2tYTyPCtsGIPz+GbrmD0/S6+oy8jItsOyGRvhRLl4=
Subject key identifier:   15:BA:14:3D:62:3B:56:5C:07:A6:65:50:17:56:A6:51:37:E3:96:60
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       018404C644A64DF4DD01B137DA4010F12F5D
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/FboUPWI7VlwHpmVQF1amUTfjlmA.roa
Signing time:             Sun 23 Oct 2022 12:16:53 +0000
ROA not before:           Sun 23 Oct 2022 12:16:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     983
IP address blocks:        77.37.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:04:c6:44:a6:4d:f4:dd:01:b1:37:da:40:10:f1:2f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Oct 23 12:16:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15ba143d623b565c07a665501756a65137e39660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:e9:90:2e:91:77:9a:22:22:87:8e:c1:1b:
                    08:3d:9b:11:3c:59:42:e3:cf:ac:a0:8e:7d:4a:8f:
                    cc:e6:e2:1e:cd:5b:b4:40:ab:e1:6e:37:8c:f8:73:
                    df:5b:11:6d:1b:14:a8:45:4b:1d:ae:cf:ab:9f:99:
                    82:92:4a:9a:d6:10:71:e1:f0:03:08:30:a3:ec:32:
                    36:00:c4:86:77:a7:e1:3c:02:00:e3:c7:3e:21:d0:
                    40:0f:f5:09:58:2a:6c:ef:9d:df:c9:4a:b9:50:73:
                    98:06:52:48:a2:d6:24:b4:83:27:2f:9c:bb:4e:41:
                    a4:96:32:a5:8b:ed:cd:85:f1:fe:4c:13:a7:47:07:
                    1d:5e:02:84:ba:3f:12:72:75:6f:cd:3e:e3:29:af:
                    ec:e5:7a:48:13:f6:04:fb:93:c7:7f:44:da:a5:a3:
                    c4:4c:b6:a9:61:5e:35:de:0b:fa:bb:8b:e2:15:04:
                    2b:61:2d:64:ab:65:74:65:10:86:c8:0e:b1:18:d4:
                    33:5f:c0:03:69:cb:f4:81:fe:9f:97:30:0b:5c:56:
                    85:ed:f4:98:89:9c:72:44:b5:07:8c:66:a1:83:b2:
                    7c:c8:f3:07:be:1a:63:db:22:16:15:af:87:2e:86:
                    b5:9d:43:9b:fa:58:35:c7:49:dc:db:33:80:7d:21:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BA:14:3D:62:3B:56:5C:07:A6:65:50:17:56:A6:51:37:E3:96:60
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/FboUPWI7VlwHpmVQF1amUTfjlmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:c0:f0:1e:af:a5:17:8d:69:28:b7:bf:e0:9f:12:32:c7:
         05:c5:06:93:02:7a:4e:aa:85:a2:7b:98:e5:a3:6d:31:66:9d:
         46:b6:0d:3e:fb:90:aa:b5:39:21:4e:69:b5:4a:98:00:ab:27:
         45:a4:55:d0:03:7b:35:1a:90:56:25:88:ef:ce:14:54:b8:a4:
         90:5a:36:7b:e9:23:aa:e7:17:52:0a:b5:af:75:30:bb:b8:8d:
         87:a5:b4:cb:33:2b:7d:bb:57:0d:5d:d0:ce:94:a4:4b:4c:7f:
         fd:d1:63:c7:a8:4a:09:16:96:5b:51:29:29:f7:ab:eb:e1:14:
         0b:55:8c:62:87:20:cb:72:9d:07:0f:b2:b2:66:57:a2:44:3b:
         c1:c5:69:74:d0:8f:b8:88:2a:9f:1e:d1:de:61:8a:ac:3c:4c:
         fa:6c:2e:0d:5a:5a:4e:f8:99:84:07:c9:0f:81:11:d5:67:9a:
         ee:5d:18:53:3b:2a:bb:54:18:13:0e:9a:9d:29:8d:ff:ee:5e:
         7f:b0:d6:04:b7:31:5a:8e:98:06:08:16:69:0e:6d:c6:b4:43:
         b2:b3:42:77:2f:1c:c1:d6:22:83:1a:cb:5b:68:18:3c:69:a0:
         03:23:3c:7d:6a:a6:33:14:07:91:0a:2d:d3:98:d4:fb:4b:36:
         9c:7a:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net