Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/jDn7_7WGlZ27RrYbwd_oUpvNgR4.roa
File:                     jDn7_7WGlZ27RrYbwd_oUpvNgR4.roa (raw, json)
Hash identifier:          iUJQqG47LquJhHwWmgWpUsiGWz+Xme9bHrtSXaSMk1Y=
Subject key identifier:   8C:39:FB:FF:B5:86:95:9D:BB:46:B6:1B:C1:DF:E8:52:9B:CD:81:1E
Certificate issuer:       /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial:       01869DEAE6C60E9DE6FDBF2755544C771B6B
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/jDn7_7WGlZ27RrYbwd_oUpvNgR4.roa
Signing time:             Wed 01 Mar 2023 16:04:22 +0000
ROA not before:           Wed 01 Mar 2023 16:04:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8100
IP address blocks:        146.19.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9d:ea:e6:c6:0e:9d:e6:fd:bf:27:55:54:4c:77:1b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
        Validity
            Not Before: Mar  1 16:04:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c39fbffb586959dbb46b61bc1dfe8529bcd811e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:b8:63:aa:68:18:a1:8e:11:1d:0c:ee:89:
                    94:66:b2:31:d4:7c:db:b6:31:67:b9:db:52:60:c6:
                    1c:2d:b0:d7:4f:ad:d2:42:dc:3c:38:fe:bf:7c:e2:
                    06:21:09:23:09:2c:d3:2b:3c:96:a4:7a:e0:f6:c6:
                    2a:ae:2c:fd:11:4f:b1:cd:ae:d0:31:84:87:10:80:
                    76:ff:42:a5:8e:b1:40:94:c6:5e:d3:c2:08:4b:57:
                    b2:aa:dd:7e:c2:ed:52:04:ab:0d:65:d9:84:66:fe:
                    5b:51:d6:00:c4:f0:11:b0:88:b8:0f:84:4e:92:aa:
                    83:b3:4d:8a:5d:a5:36:65:f4:79:fb:9f:5f:db:0e:
                    a9:7a:71:64:fe:0c:bc:cc:71:6e:e2:ba:a8:f2:19:
                    4f:7c:11:76:4c:02:06:6a:4f:1d:e0:41:41:04:2c:
                    77:d6:9d:ff:0c:30:6a:43:0a:11:c4:74:3d:21:75:
                    a3:cb:cf:b6:55:c3:6b:8e:89:a6:b5:4a:09:2c:c4:
                    3a:4b:da:9c:0e:1b:72:13:d6:da:b1:e8:cc:63:39:
                    9f:7c:c2:a0:c2:54:00:df:58:39:80:09:8f:db:79:
                    4b:a0:8c:09:fe:8b:ca:db:66:d8:34:09:dc:16:2c:
                    00:fd:a8:a0:74:5e:be:e3:c2:b9:9b:51:b1:7f:36:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:39:FB:FF:B5:86:95:9D:BB:46:B6:1B:C1:DF:E8:52:9B:CD:81:1E
            X509v3 Authority Key Identifier:
                keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/jDn7_7WGlZ27RrYbwd_oUpvNgR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:c4:95:70:53:96:e5:9d:05:b8:5d:cf:d9:97:c3:60:16:
         70:9b:f6:0e:8f:29:68:a9:ea:7e:c3:62:4e:66:fc:0a:c9:77:
         8f:b6:2d:f5:45:24:76:26:5d:24:7e:e3:09:66:9f:26:e0:a8:
         f7:f5:83:bd:d0:9e:f8:49:66:e5:b7:9d:55:28:de:40:e1:41:
         66:c0:76:3e:88:fc:bc:0d:cb:3d:a5:9e:86:d0:95:c5:b7:42:
         b9:16:ca:f2:d7:21:93:eb:62:66:74:98:24:b5:4a:9a:ea:57:
         2b:29:d3:e5:70:4e:6f:43:6f:01:85:8c:84:33:71:0a:23:34:
         48:5d:8c:fe:74:57:40:18:83:ba:f2:6c:d9:d4:8f:93:a0:0f:
         6d:f5:69:95:ea:1d:5c:f9:f8:b1:bc:ee:10:bc:f3:65:d1:1c:
         fa:fb:a7:86:66:f2:1f:91:88:b9:bf:39:ce:75:b2:ee:c6:a2:
         47:1f:ca:b4:64:cc:e7:94:cf:d7:c2:e7:96:44:31:f4:42:f3:
         20:27:c9:a3:fe:4c:84:74:70:b8:92:cf:b0:69:db:87:63:2c:
         b6:85:05:60:ed:d0:2f:24:bc:82:0d:a7:d6:1e:8b:f6:14:35:
         53:e2:5a:16:4b:af:a4:3f:cf:3b:a1:84:50:65:56:20:a5:30:
         58:e2:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:41 2023 by rpki-client on console.sobornost.net