Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/oSs4WXr3MKs7x446eNEg-dZXeOg.roa
File:                     oSs4WXr3MKs7x446eNEg-dZXeOg.roa (raw, json)
Hash identifier:          qBAipOSTmvRz9qCdkD69235yAPPsK/XkbAR/Aye6u38=
Subject key identifier:   A1:2B:38:59:7A:F7:30:AB:3B:C7:8E:3A:78:D1:20:F9:D6:57:78:E8
Certificate issuer:       /CN=4c9554c840b2fad265ecd793304a36e563268e2a
Certificate serial:       01882086BADE3E6C09A060650C8838975746
Authority key identifier: 4C:95:54:C8:40:B2:FA:D2:65:EC:D7:93:30:4A:36:E5:63:26:8E:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJVUyECy-tJl7NeTMEo25WMmjio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/oSs4WXr3MKs7x446eNEg-dZXeOg.roa
Signing time:             Mon 15 May 2023 17:48:00 +0000
ROA not before:           Mon 15 May 2023 17:48:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        45.86.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:ba:de:3e:6c:09:a0:60:65:0c:88:38:97:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9554c840b2fad265ecd793304a36e563268e2a
        Validity
            Not Before: May 15 17:48:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a12b38597af730ab3bc78e3a78d120f9d65778e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:33:58:d4:8a:d7:1d:8b:1f:3c:30:86:7e:
                    1b:e5:e2:e8:3d:a5:f2:6c:5f:18:f6:8d:7c:e8:00:
                    6f:69:d3:66:e8:66:8b:30:13:53:e5:da:47:5f:09:
                    b6:b9:3e:a1:54:64:26:e1:9e:29:d2:e7:a7:03:2c:
                    03:73:07:1c:1c:73:3e:2e:eb:32:38:09:06:4b:46:
                    b4:17:dc:ed:30:b3:cd:84:59:47:a0:da:fa:62:32:
                    e8:ff:af:93:cd:86:08:cb:00:8f:9f:52:5f:a5:39:
                    58:6f:52:01:ed:d9:52:7c:7f:a3:bd:eb:4e:23:91:
                    2b:0c:a3:61:3c:85:89:0a:b0:2d:e4:83:42:d6:83:
                    5a:f3:92:3e:63:4a:13:74:28:2c:e3:0a:7b:12:b9:
                    03:2f:08:6d:ed:f6:68:03:b5:af:1e:c6:25:fa:0b:
                    d1:00:f9:77:99:bb:97:27:7a:26:9a:59:1c:a5:e5:
                    cf:8e:67:e0:25:5d:ae:2e:3f:73:c9:7c:c7:1a:d8:
                    be:71:1e:d4:f3:41:0a:42:2c:86:4b:b7:ed:8b:19:
                    37:07:9b:bb:94:1d:a1:21:ef:79:0e:e5:13:76:5b:
                    dd:c5:11:06:b1:f9:45:c3:d8:32:e7:9f:20:c2:32:
                    9d:78:8f:6b:59:0d:09:2c:b3:75:31:b8:f9:80:60:
                    35:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2B:38:59:7A:F7:30:AB:3B:C7:8E:3A:78:D1:20:F9:D6:57:78:E8
            X509v3 Authority Key Identifier:
                keyid:4C:95:54:C8:40:B2:FA:D2:65:EC:D7:93:30:4A:36:E5:63:26:8E:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJVUyECy-tJl7NeTMEo25WMmjio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/oSs4WXr3MKs7x446eNEg-dZXeOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/TJVUyECy-tJl7NeTMEo25WMmjio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ec:7c:8f:75:42:8f:d3:73:47:ff:21:e1:e4:fb:28:d9:8f:
         83:58:7f:fe:e1:ca:b0:21:37:89:08:1c:ba:89:07:82:34:35:
         f5:02:ad:5e:80:3e:86:fc:c6:5a:ea:3e:f9:9b:b8:1b:3b:ef:
         02:df:fc:83:88:f5:22:8c:9b:35:04:97:0c:dd:e3:f4:54:a6:
         e9:1c:cd:3b:15:e0:66:08:93:7a:88:bc:2f:eb:36:63:22:fd:
         a2:df:de:d4:b2:3d:14:6d:b2:09:bd:b1:ee:51:17:b3:0c:90:
         3f:46:21:fc:8a:52:35:44:b9:99:e7:10:12:fd:05:cd:7a:c1:
         18:bd:4b:f4:10:c0:df:3e:60:8b:b6:b5:1f:d6:22:c8:3a:9d:
         26:ba:fb:91:a1:28:85:5b:ba:bc:d3:fe:2b:71:a8:98:a2:1f:
         f0:b4:7e:29:b3:b7:58:c2:ae:4d:36:19:91:4e:b8:85:21:8a:
         06:88:b9:1c:30:0d:15:cb:a2:80:53:50:3b:9e:b3:7d:d3:75:
         7f:dc:f7:c4:97:2f:84:60:4b:cb:b4:46:fb:6d:2a:df:b4:60:
         84:ab:00:9f:ef:4c:77:80:38:2d:63:43:07:ee:eb:dc:f5:20:
         f7:17:a3:2a:6d:9f:c4:92:bc:89:12:6e:8e:d1:71:61:84:93:
         3e:46:5e:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrrePmwJoGBlDIg4l1dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTU1NGM4NDBiMmZhZDI2NWVjZDc5MzMwNGEzNmU1NjMy
NjhlMmEwHhcNMjMwNTE1MTc0ODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTJiMzg1OTdhZjczMGFiM2JjNzhlM2E3OGQxMjBmOWQ2NTc3OGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcwzWNSK1x2LHzwwhn4b5eLoPaXy
bF8Y9o186ABvadNm6GaLMBNT5dpHXwm2uT6hVGQm4Z4p0uenAywDcwccHHM+Lusy
OAkGS0a0F9ztMLPNhFlHoNr6YjLo/6+TzYYIywCPn1JfpTlYb1IB7dlSfH+jvetO
I5ErDKNhPIWJCrAt5INC1oNa85I+Y0oTdCgs4wp7ErkDLwht7fZoA7WvHsYl+gvR
APl3mbuXJ3ommlkcpeXPjmfgJV2uLj9zyXzHGti+cR7U80EKQiyGS7ftixk3B5u7
lB2hIe95DuUTdlvdxREGsflFw9gy558gwjKdeI9rWQ0JLLN1Mbj5gGA1+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKErOFl69zCrO8eOOnjRIPnWV3joMB8GA1UdIwQY
MBaAFEyVVMhAsvrSZezXkzBKNuVjJo4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpWVXlFQ3ktdEpsN05lVE1FbzI1V01tamlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xZDg4MjQtNTQ1YS00YjA1LThkYWYt
N2Q4N2MxOTQwZmU5LzEvb1NzNFdYcjNNS3M3eDQ0NmVORWctZFpYZU9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xZDg4MjQtNTQ1YS00YjA1LThkYWYtN2Q4N2MxOTQwZmU5
LzEvVEpWVXlFQ3ktdEpsN05lVE1FbzI1V01tamlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVYlMA0G
CSqGSIb3DQEBCwUAA4IBAQCF7HyPdUKP03NH/yHh5Pso2Y+DWH/+4cqwITeJCBy6
iQeCNDX1Aq1egD6G/MZa6j75m7gbO+8C3/yDiPUijJs1BJcM3eP0VKbpHM07FeBm
CJN6iLwv6zZjIv2i397Usj0UbbIJvbHuURezDJA/RiH8ilI1RLmZ5xAS/QXNesEY
vUv0EMDfPmCLtrUf1iLIOp0muvuRoSiFW7q80/4rcaiYoh/wtH4ps7dYwq5NNhmR
TriFIYoGiLkcMA0Vy6KAU1A7nrN903V/3PfEly+EYEvLtEb7bSrftGCEqwCf70x3
gDgtY0MH7uvc9SD3F6MqbZ/EkryJEm6O0XFhhJM+Rl6g
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:08 2023 by rpki-client on console.sobornost.net