Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Vvygwuwjh-4Q_YAmOXCqsQX53To.roa
File:                     Vvygwuwjh-4Q_YAmOXCqsQX53To.roa (raw, json)
Hash identifier:          XIDudb9SDHnWJ+8zTX2UPrXVVHuFq0zziWZ/kjHPMGo=
Subject key identifier:   56:FC:A0:C2:EC:23:87:EE:10:FD:80:26:39:70:AA:B1:05:F9:DD:3A
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019158850A105D290E752EC78FE708C3F5EC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Vvygwuwjh-4Q_YAmOXCqsQX53To.roa
Signing time:             Fri 16 Aug 2024 00:09:59 +0000
ROA not before:           Fri 16 Aug 2024 00:09:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:58:85:0a:10:5d:29:0e:75:2e:c7:8f:e7:08:c3:f5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 16 00:09:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56fca0c2ec2387ee10fd80263970aab105f9dd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:8f:85:b7:eb:a7:04:d3:fb:1b:3c:0d:7d:
                    cb:51:74:04:5e:cd:3b:cf:b1:21:fe:80:ab:74:1d:
                    2a:89:a0:2e:19:0b:8f:4d:c4:bd:84:8e:45:d7:b0:
                    dd:53:9f:a9:08:35:c4:83:f0:62:80:72:17:43:c5:
                    ce:ed:b5:de:e1:6d:79:90:5a:16:0f:e4:3b:91:84:
                    2f:1f:53:59:9a:88:dd:73:b7:3e:21:df:89:18:2c:
                    91:ee:5f:8d:23:df:39:36:97:6b:68:68:56:cb:40:
                    1b:9f:26:88:9b:3d:18:d4:4e:e2:eb:a7:40:9d:5f:
                    be:85:73:03:78:c5:f1:0a:69:ee:71:25:f2:1c:2e:
                    28:7d:3c:bc:0a:a5:8b:39:df:a4:2f:dd:d5:6d:03:
                    38:9f:06:5a:87:c5:be:9f:37:cb:42:b7:fe:19:ab:
                    72:16:c9:82:c1:88:16:2b:76:36:7a:ad:cf:b4:cf:
                    9e:f0:ec:78:3c:61:51:83:0a:89:e7:16:d8:91:86:
                    48:e5:35:58:5e:9c:53:6f:83:ea:5e:85:a4:d1:b6:
                    d9:a9:68:b7:86:f7:9c:8e:5f:0d:45:47:11:46:4f:
                    8d:e6:f6:f2:bf:7b:7e:75:fa:86:70:fb:43:7d:43:
                    89:e5:dd:b5:8a:21:49:11:40:8d:f8:d5:ce:2b:9d:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:A0:C2:EC:23:87:EE:10:FD:80:26:39:70:AA:B1:05:F9:DD:3A
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Vvygwuwjh-4Q_YAmOXCqsQX53To.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:c8:01:ce:a3:df:85:5a:b1:f7:1a:d5:92:ed:ab:a5:84:
         a7:ae:1f:7d:29:b5:76:a0:48:3d:03:15:ce:7f:93:9a:4e:ad:
         dc:96:e7:01:a4:63:26:4f:2b:ee:77:3f:92:83:c4:b0:2b:84:
         2d:77:11:d7:7e:b1:f1:d1:9b:5d:59:df:f9:a3:ff:28:6b:7a:
         52:dc:9d:91:55:9d:6a:7f:fb:58:f4:c7:17:16:27:f6:86:f7:
         6c:b1:6b:f3:26:99:2d:d9:ce:d6:1f:21:0e:fc:5d:9d:47:e4:
         15:a1:07:03:b6:5e:85:1e:ae:6c:ed:3c:c4:f9:bd:e3:fb:61:
         5f:b8:a3:45:7c:90:38:7c:3f:ca:8a:0c:34:bf:ac:95:e0:67:
         1a:5d:bf:2d:05:44:6e:88:10:a4:5e:9a:e0:2e:ec:63:15:03:
         8c:b6:65:ce:a4:ac:d8:4f:a7:32:57:3a:23:6f:07:eb:47:71:
         ce:9a:5b:9a:ea:86:41:00:9b:47:c8:f6:8d:ed:5b:b4:2c:9a:
         f0:e7:25:0a:e8:a5:c9:f5:2b:18:f6:56:2e:30:76:6e:68:74:
         28:d6:10:22:60:6a:87:58:16:f1:44:94:2c:9a:43:53:da:b5:
         4e:b7:1d:0f:82:13:8c:da:23:ff:cb:b7:58:98:8e:3d:25:35:
         48:0e:2f:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 17 00:19:52 2024 by rpki-client on console.sobornost.net