Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/LhUdPGy9xMfRF5ejUF1PkgcCQb8.roa
File:                     LhUdPGy9xMfRF5ejUF1PkgcCQb8.roa (raw, json)
Hash identifier:          BoxpNCFM++tBXMBixNdsZZjjauFBwxBsNRbGqDi1De0=
Subject key identifier:   2E:15:1D:3C:6C:BD:C4:C7:D1:17:97:A3:50:5D:4F:92:07:02:41:BF
Certificate issuer:       /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial:       018CC26D74E166CBB37377EFB59DEC523690
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/LhUdPGy9xMfRF5ejUF1PkgcCQb8.roa
Signing time:             Mon 01 Jan 2024 00:30:02 +0000
ROA not before:           Mon 01 Jan 2024 00:30:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31631
IP address blocks:        193.32.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:74:e1:66:cb:b3:73:77:ef:b5:9d:ec:52:36:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
        Validity
            Not Before: Jan  1 00:30:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2e151d3c6cbdc4c7d11797a3505d4f92070241bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:5c:29:87:47:f3:d6:4d:75:0e:e4:c7:b6:
                    34:fb:56:41:11:ef:c4:86:57:4d:5f:8f:77:b7:2c:
                    03:08:85:51:c7:11:6c:41:29:57:01:4f:4b:6d:74:
                    7e:3b:bd:54:fe:d8:cd:d9:53:28:0b:31:8e:ab:b8:
                    26:eb:93:1f:53:c6:0e:e4:e4:c4:7c:3a:e9:a4:c5:
                    92:e9:ba:ee:33:a6:ea:59:ef:2b:c1:1c:58:fa:92:
                    e8:b5:af:c6:b1:60:2b:05:21:c1:4a:19:6d:82:c3:
                    a3:e9:98:30:55:d5:a0:f5:f6:ba:89:73:67:26:b9:
                    b4:0f:30:4f:73:e7:bf:02:da:18:ef:a3:56:0c:95:
                    58:4a:9f:e3:e1:15:af:ee:3a:01:c8:fd:8c:43:62:
                    88:a3:dc:a9:22:64:0c:cc:5a:04:39:85:5a:e8:30:
                    f3:04:b0:af:fe:3a:31:19:ab:62:17:2e:d4:d1:33:
                    be:75:94:68:ef:ee:78:58:12:f1:6e:3e:40:c0:dc:
                    bf:1b:8e:e3:19:95:16:9b:e0:05:4b:56:7a:7d:34:
                    f5:af:16:98:c1:2a:75:95:1c:f6:fc:5f:31:d1:84:
                    72:ed:3d:25:a0:12:b9:4c:fc:29:bc:eb:b8:10:86:
                    b1:36:4c:5e:d3:6d:41:4f:8e:70:3d:be:53:13:28:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:1D:3C:6C:BD:C4:C7:D1:17:97:A3:50:5D:4F:92:07:02:41:BF
            X509v3 Authority Key Identifier:
                keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/LhUdPGy9xMfRF5ejUF1PkgcCQb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:a4:79:f1:b5:89:67:c3:29:1a:02:bb:60:e4:fb:8c:6b:
         01:bb:e7:cc:79:68:de:f1:0e:5d:3d:11:34:f5:b0:35:17:71:
         42:87:98:8f:82:09:f9:c8:71:c0:73:60:98:6d:a5:a5:08:63:
         ed:e9:86:8d:fd:ed:5a:f9:fe:9d:b8:95:75:cb:a9:80:a4:d0:
         39:c5:2f:52:23:0f:3e:76:ad:5c:be:ac:41:d8:16:22:b0:bb:
         46:80:2c:77:91:72:e6:a1:38:58:82:4c:7a:b3:e6:f6:9a:ae:
         d6:07:fa:30:57:b2:e8:70:aa:70:81:38:7c:1d:e9:1c:a4:88:
         ad:75:e3:01:1e:f4:5d:76:72:9b:d3:41:46:6e:f0:ef:c9:88:
         03:68:e5:fa:63:27:d2:e2:e2:43:5f:fd:59:75:1d:f9:dc:51:
         03:cc:62:b1:88:16:bd:1a:0a:f3:9d:97:14:fc:1e:1d:0c:11:
         9e:ee:3c:67:1a:43:54:6a:8f:b1:23:7d:0b:e7:69:60:e3:3a:
         fe:81:a4:4a:dd:cb:e5:e7:c9:3b:c1:5b:71:83:87:41:3f:eb:
         4f:fe:ed:ff:70:65:b8:f6:df:52:79:79:96:d0:8b:b5:78:73:
         08:69:55:db:18:d3:29:80:10:fc:10:23:23:fc:5d:d4:6b:8d:
         07:5b:4a:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbXThZsuzc3fvtZ3sUjaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWJmYzRlNTlmN2U2NDY0NjBkOTAzMTE1NjZkZjFmNDdl
ZGE5MTcwHhcNMjQwMTAxMDAzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTE1MWQzYzZjYmRjNGM3ZDExNzk3YTM1MDVkNGY5MjA3MDI0MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnelcKYdH89ZNdQ7kx7Y0+1ZBEe/E
hldNX493tywDCIVRxxFsQSlXAU9LbXR+O71U/tjN2VMoCzGOq7gm65MfU8YO5OTE
fDrppMWS6bruM6bqWe8rwRxY+pLota/GsWArBSHBShltgsOj6ZgwVdWg9fa6iXNn
Jrm0DzBPc+e/AtoY76NWDJVYSp/j4RWv7joByP2MQ2KIo9ypImQMzFoEOYVa6DDz
BLCv/joxGatiFy7U0TO+dZRo7+54WBLxbj5AwNy/G47jGZUWm+AFS1Z6fTT1rxaY
wSp1lRz2/F8x0YRy7T0loBK5TPwpvOu4EIaxNkxe021BT45wPb5TEyiZQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4VHTxsvcTH0ReXo1BdT5IHAkG/MB8GA1UdIwQY
MBaAFK3r/E5Z9+ZGRg2QMRVm3x9H7akXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmIt
ODY2MjY2NDcwODZjLzEvTGhVZFBHeTl4TWZSRjVlalVGMVBrZ2NDUWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmItODY2MjY2NDcwODZj
LzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSBdMA0G
CSqGSIb3DQEBCwUAA4IBAQBirqR58bWJZ8MpGgK7YOT7jGsBu+fMeWje8Q5dPRE0
9bA1F3FCh5iPggn5yHHAc2CYbaWlCGPt6YaN/e1a+f6duJV1y6mApNA5xS9SIw8+
dq1cvqxB2BYisLtGgCx3kXLmoThYgkx6s+b2mq7WB/owV7LocKpwgTh8HekcpIit
deMBHvRddnKb00FGbvDvyYgDaOX6YyfS4uJDX/1ZdR353FEDzGKxiBa9GgrznZcU
/B4dDBGe7jxnGkNUao+xI30L52lg4zr+gaRK3cvl58k7wVtxg4dBP+tP/u3/cGW4
9t9SeXmW0Iu1eHMIaVXbGNMpgBD8ECMj/F3Ua40HW0oe
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:29 2024 by rpki-client on console.sobornost.net