Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/pyS4qSkM3CT79QWHmZCdRTjkNRo.roa
File:                     pyS4qSkM3CT79QWHmZCdRTjkNRo.roa (raw, json)
Hash identifier:          T5RIva8TdAhgGxcfqtiecDr+vYaCYQaH9bzN6L1hrds=
Subject key identifier:   A7:24:B8:A9:29:0C:DC:24:FB:F5:05:87:99:90:9D:45:38:E4:35:1A
Certificate issuer:       /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial:       018CC348979694EF3DC70551FEDFA81C7675
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/pyS4qSkM3CT79QWHmZCdRTjkNRo.roa
Signing time:             Mon 01 Jan 2024 04:29:23 +0000
ROA not before:           Mon 01 Jan 2024 04:29:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204463
IP address blocks:        176.98.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:97:96:94:ef:3d:c7:05:51:fe:df:a8:1c:76:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
        Validity
            Not Before: Jan  1 04:29:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a724b8a9290cdc24fbf5058799909d4538e4351a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:b2:3f:db:55:19:78:b2:40:3f:e7:01:14:
                    a0:af:67:a9:85:da:26:d8:8a:b3:d6:4e:57:e0:5f:
                    b0:18:31:ce:88:be:79:a0:bb:bf:3f:87:c7:41:8d:
                    3b:32:ef:ce:5b:60:86:61:93:fa:16:8a:2c:b8:08:
                    cb:0d:9b:87:84:8f:0d:b1:3a:04:fd:40:15:42:50:
                    cd:7d:97:91:85:10:06:7e:9e:b1:6c:48:c0:ec:7c:
                    7a:0b:5e:d6:cb:27:c5:e8:45:e8:28:56:22:4d:b3:
                    37:49:22:f7:ad:36:30:9a:13:90:dc:c3:76:c0:cd:
                    a9:48:c4:d6:15:94:12:3c:8f:79:88:a4:96:5b:b5:
                    be:cd:90:07:c7:1b:92:d0:92:e9:6a:3d:bb:ed:9e:
                    eb:b1:28:ea:a7:71:97:ac:64:88:0b:42:90:be:fe:
                    96:3b:9b:d9:fc:77:2b:7d:17:b0:61:07:80:67:28:
                    48:01:48:8e:e6:d5:23:b7:31:f7:9c:05:f3:b2:44:
                    e3:6e:e9:b7:ba:12:4a:73:b1:68:34:96:46:61:d3:
                    b4:01:46:2d:c6:28:48:f2:2f:07:7d:21:2d:9a:39:
                    e6:fb:7c:ff:5e:83:eb:e7:d3:55:08:57:91:9a:a9:
                    da:b0:7e:ba:36:e0:65:6e:97:8a:86:c2:f3:67:7b:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:24:B8:A9:29:0C:DC:24:FB:F5:05:87:99:90:9D:45:38:E4:35:1A
            X509v3 Authority Key Identifier:
                keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/pyS4qSkM3CT79QWHmZCdRTjkNRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.98.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0e:d4:7f:ad:fa:23:0d:a7:dc:0c:17:71:91:b7:80:ca:d4:
         31:45:18:99:93:6d:c4:a5:c5:ed:76:9b:6d:83:08:c4:f7:b9:
         68:52:79:18:fe:60:1d:fa:39:50:5a:86:4f:06:e1:ee:22:bb:
         dc:88:36:d5:14:42:29:9c:c8:71:72:0f:eb:58:63:a1:e5:1a:
         cf:dd:3c:07:46:75:c4:03:35:76:0f:0e:cc:91:01:db:f2:1e:
         c1:9a:c9:59:95:f4:83:76:bb:b2:17:34:51:cf:16:68:99:1d:
         e7:e0:b3:a0:74:8e:ee:9d:77:8f:50:0c:17:a4:d3:21:a9:d8:
         e2:b1:d7:1c:7e:86:bf:d3:7d:7b:5b:89:56:22:7e:cb:a5:92:
         64:f0:c3:fe:fc:9c:88:0b:94:e8:99:0e:f8:b9:2a:3e:80:b8:
         53:9a:c7:a1:a6:34:3f:fc:eb:ab:b3:b1:d0:2f:17:d8:d1:ee:
         86:bf:fd:15:61:f9:31:16:d3:66:de:8d:2b:83:c8:fe:02:46:
         5b:9c:34:1c:e3:13:57:54:2a:52:76:da:13:2c:f1:c3:26:07:
         62:05:73:8d:e3:be:73:7c:82:46:85:42:79:05:09:f2:89:77:
         e1:b7:9d:00:8e:17:12:2b:93:5d:e3:bc:d0:a5:62:b7:02:3c:
         da:85:37:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJeWlO89xwVR/t+oHHZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYWI4ZjQ0ZmMzNTYwOTZiOGU2NTZmYzg3Mzk4NzFlYzAw
ZDFmMTIwHhcNMjQwMTAxMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzI0YjhhOTI5MGNkYzI0ZmJmNTA1ODc5OTkwOWQ0NTM4ZTQzNTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxCyP9tVGXiyQD/nARSgr2ephdom
2Iqz1k5X4F+wGDHOiL55oLu/P4fHQY07Mu/OW2CGYZP6FoosuAjLDZuHhI8NsToE
/UAVQlDNfZeRhRAGfp6xbEjA7Hx6C17WyyfF6EXoKFYiTbM3SSL3rTYwmhOQ3MN2
wM2pSMTWFZQSPI95iKSWW7W+zZAHxxuS0JLpaj277Z7rsSjqp3GXrGSIC0KQvv6W
O5vZ/HcrfRewYQeAZyhIAUiO5tUjtzH3nAXzskTjbum3uhJKc7FoNJZGYdO0AUYt
xihI8i8HfSEtmjnm+3z/XoPr59NVCFeRmqnasH66NuBlbpeKhsLzZ3s7pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKckuKkpDNwk+/UFh5mQnUU45DUaMB8GA1UdIwQY
MBaAFMOrj0T8NWCWuOZW/Ic5hx7ADR8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZ1UFJQdzFZSmE0NWxiOGh6bUhIc0FOSHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZTc0ZTYtMjYwMy00NzExLWFjZTEt
NzVhZTFlNmQ5YzMxLzEvcHlTNHFTa00zQ1Q3OVFXSG1aQ2RSVGprTlJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZTc0ZTYtMjYwMy00NzExLWFjZTEtNzVhZTFlNmQ5YzMx
LzEvdzZ1UFJQdzFZSmE0NWxiOGh6bUhIc0FOSHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGLeMA0G
CSqGSIb3DQEBCwUAA4IBAQBsDtR/rfojDafcDBdxkbeAytQxRRiZk23EpcXtdptt
gwjE97loUnkY/mAd+jlQWoZPBuHuIrvciDbVFEIpnMhxcg/rWGOh5RrP3TwHRnXE
AzV2Dw7MkQHb8h7BmslZlfSDdruyFzRRzxZomR3n4LOgdI7unXePUAwXpNMhqdji
sdccfoa/0317W4lWIn7LpZJk8MP+/JyIC5TomQ74uSo+gLhTmsehpjQ//Ours7HQ
LxfY0e6Gv/0VYfkxFtNm3o0rg8j+AkZbnDQc4xNXVCpSdtoTLPHDJgdiBXON475z
fIJGhUJ5BQnyiXfht50AjhcSK5Nd47zQpWK3AjzahTeD
-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:29 2024 by rpki-client on console.sobornost.net