Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_DAlIVpODahf5uvKXRUoj_5cwe8.roa
File:                     _DAlIVpODahf5uvKXRUoj_5cwe8.roa (raw, json)
Hash identifier:          LYETqdjqnPLtfGQ8arajbnN0/8VvOdaOdD5iJGjr2+s=
Subject key identifier:   FC:30:25:21:5A:4E:0D:A8:5F:E6:EB:CA:5D:15:28:8F:FE:5C:C1:EF
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0193EEBF625D724824D74D230567EAE3E21C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_DAlIVpODahf5uvKXRUoj_5cwe8.roa
Signing time:             Sun 22 Dec 2024 14:22:20 +0000
ROA not before:           Sun 22 Dec 2024 14:22:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211407
IP address blocks:        31.56.78.0/24 maxlen: 24
                          31.57.183.0/24 maxlen: 24
                          31.58.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ee:bf:62:5d:72:48:24:d7:4d:23:05:67:ea:e3:e2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec 22 14:22:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc3025215a4e0da85fe6ebca5d15288ffe5cc1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:1b:b1:a2:8a:b8:47:35:81:3e:1d:b4:80:
                    a5:ca:7b:48:d9:5f:e8:b6:f4:61:d1:2e:43:28:7d:
                    db:3f:7b:04:b9:62:8b:b8:19:4c:67:39:5c:bd:6f:
                    e0:93:0b:d4:d7:e9:95:0b:b0:b8:3d:6b:e8:33:69:
                    5a:3b:8d:46:9b:cd:e3:23:83:bf:1e:2b:fa:27:ca:
                    9c:01:80:fe:f4:f4:3a:b0:f9:3d:c3:44:03:2b:e2:
                    d3:cb:69:6a:da:d2:b5:3f:bb:bc:90:0f:14:7f:39:
                    8c:7b:a6:eb:67:bb:91:6d:9b:51:48:b6:31:d5:5d:
                    13:18:d4:12:ed:2f:a8:15:c1:69:ca:07:c0:6d:7f:
                    8f:00:65:fc:a2:a5:fb:49:19:26:9d:b9:1a:7c:63:
                    ef:fb:d8:7e:99:5c:ed:ff:ba:05:75:ad:98:42:41:
                    a1:29:d1:c0:b2:9d:6a:9a:f1:62:0f:a0:5f:b5:17:
                    59:f7:5b:d8:41:4e:18:84:be:26:9b:8f:e3:33:ac:
                    15:e5:ed:8a:86:4c:34:82:13:2a:47:c4:d4:7b:91:
                    58:03:0d:1f:4f:5e:76:1b:8e:1d:68:77:f0:a8:32:
                    c0:95:8a:2f:36:f9:17:bf:be:e7:19:ec:fe:f5:80:
                    73:70:4d:31:81:d5:e5:b8:9c:85:db:10:18:91:50:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:30:25:21:5A:4E:0D:A8:5F:E6:EB:CA:5D:15:28:8F:FE:5C:C1:EF
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_DAlIVpODahf5uvKXRUoj_5cwe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.78.0/24
                  31.57.183.0/24
                  31.58.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:84:23:65:31:19:f5:41:7a:9e:1f:ef:ca:c6:3a:c4:68:
         86:14:72:64:32:17:b3:12:cf:01:39:29:00:8f:d3:78:0a:13:
         e1:90:83:75:ef:0d:27:8f:70:1e:72:f0:e4:09:ce:dd:dc:15:
         60:58:0f:4c:12:94:ed:7a:b9:f4:df:c3:0b:65:44:e6:bc:20:
         a0:3c:c7:4c:2a:bd:ed:4b:60:38:e0:cc:bb:b1:db:ec:59:c8:
         5b:65:29:45:77:bb:3f:2f:b1:23:3e:fb:5b:a8:a7:25:17:c3:
         38:8e:8a:09:3a:4f:50:12:0c:74:a8:66:c7:82:bf:81:52:e6:
         57:c9:bc:bc:9f:ab:ae:d1:1b:5e:f1:7f:3b:71:3b:f7:5e:d5:
         d9:41:e8:ec:be:ea:72:15:49:65:61:25:39:8e:56:f7:6d:30:
         0b:82:70:4b:3d:a8:4b:50:17:68:25:6c:63:e1:29:fb:c6:d8:
         fd:7b:c1:8f:ed:d6:4f:8b:78:94:d2:99:b8:ae:01:c7:29:9d:
         83:9b:a7:5b:a5:24:e5:aa:ad:92:af:e2:27:5f:c4:df:5d:df:
         3a:0c:f2:20:e3:4b:24:06:03:d1:7c:08:02:1f:07:c1:f8:8a:
         c1:d1:ec:f1:6e:38:3e:39:28:8f:81:65:b3:ce:df:18:c3:7a:
         89:77:0a:17
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZPuv2Jdckgk100jBWfq4+IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMjIyMTQyMjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzMwMjUyMTVhNGUwZGE4NWZlNmViY2E1ZDE1Mjg4ZmZlNWNjMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxobsaKKuEc1gT4dtIClyntI2V/o
tvRh0S5DKH3bP3sEuWKLuBlMZzlcvW/gkwvU1+mVC7C4PWvoM2laO41Gm83jI4O/
Hiv6J8qcAYD+9PQ6sPk9w0QDK+LTy2lq2tK1P7u8kA8UfzmMe6brZ7uRbZtRSLYx
1V0TGNQS7S+oFcFpygfAbX+PAGX8oqX7SRkmnbkafGPv+9h+mVzt/7oFda2YQkGh
KdHAsp1qmvFiD6BftRdZ91vYQU4YhL4mm4/jM6wV5e2Khkw0ghMqR8TUe5FYAw0f
T152G44daHfwqDLAlYovNvkXv77nGez+9YBzcE0xgdXluJyF2xAYkVBXdQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPwwJSFaTg2oX+bryl0VKI/+XMHvMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvX0RBbElWcE9EYWhmNXV2S1hSVW9qXzVjd2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzhOAwQA
Hzm3AwQAHzqeMA0GCSqGSIb3DQEBCwUAA4IBAQCCtIQjZTEZ9UF6nh/vysY6xGiG
FHJkMhezEs8BOSkAj9N4ChPhkIN17w0nj3AecvDkCc7d3BVgWA9MEpTtern038ML
ZUTmvCCgPMdMKr3tS2A44My7sdvsWchbZSlFd7s/L7EjPvtbqKclF8M4jooJOk9Q
Egx0qGbHgr+BUuZXyby8n6uu0Rte8X87cTv3XtXZQejsvupyFUllYSU5jlb3bTAL
gnBLPahLUBdoJWxj4Sn7xtj9e8GP7dZPi3iU0pm4rgHHKZ2Dm6dbpSTlqq2Sr+In
X8TfXd86DPIg40skBgPRfAgCHwfB+IrB0ezxbjg+OSiPgWWzzt8Yw3qJdwoX
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net