Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/dcuPxBTyYzViye9xHwFM7uem42w.roa
File:                     dcuPxBTyYzViye9xHwFM7uem42w.roa (raw, json)
Hash identifier:          QctYGa9IzZiMciWBSKTbHSZuneKRoO/8CPlqY3/VKpE=
Subject key identifier:   75:CB:8F:C4:14:F2:63:35:62:C9:EF:71:1F:01:4C:EE:E7:A6:E3:6C
Certificate issuer:       /CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Certificate serial:       01482D0C
Authority key identifier: 87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/dcuPxBTyYzViye9xHwFM7uem42w.roa
Signing time:             Sat 01 Jan 2022 10:56:11 +0000
ROA not before:           Sat 01 Jan 2022 10:56:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        77.72.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21507340 (0x1482d0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
        Validity
            Not Before: Jan  1 10:56:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75cb8fc414f2633562c9ef711f014ceee7a6e36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:bf:fa:78:2a:bd:4d:06:36:49:87:d6:b6:
                    6c:12:f2:d3:9e:4f:86:63:79:3d:62:f1:d1:ef:4a:
                    19:8f:87:d3:9e:f0:81:8a:68:c8:02:1c:f6:6e:24:
                    32:4b:61:17:3e:9c:66:8a:e7:25:ab:1d:6b:58:f8:
                    e5:24:de:c2:5c:f4:e1:8d:da:46:a7:9c:c4:97:9a:
                    1e:8c:db:1d:3b:b1:c4:fd:22:40:de:01:2b:73:2f:
                    41:10:2b:8c:a3:be:51:98:e5:23:78:18:77:65:e9:
                    bd:14:df:4c:01:f9:ee:00:cc:62:e1:33:08:3e:fd:
                    75:bd:86:86:ed:90:e5:42:c3:d5:34:c4:97:9b:e7:
                    ae:62:66:0e:32:be:0a:cd:ac:03:72:ce:75:72:2c:
                    77:fb:f8:92:01:9d:ca:7a:8f:dc:17:02:f6:dd:b7:
                    25:23:03:d3:32:dd:7e:87:39:17:1e:99:68:1d:81:
                    57:55:37:73:a8:4e:01:1c:02:f6:12:18:35:fb:6b:
                    1e:2b:e4:e4:18:ec:f9:44:89:3a:68:52:8e:90:6d:
                    4e:9c:c7:15:16:c3:81:db:78:6e:89:ee:71:db:2e:
                    1c:6a:47:00:b5:8a:c0:72:5d:69:76:13:95:37:c8:
                    f2:c7:27:2b:63:13:ff:b9:b3:48:86:dc:5a:b6:76:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CB:8F:C4:14:F2:63:35:62:C9:EF:71:1F:01:4C:EE:E7:A6:E3:6C
            X509v3 Authority Key Identifier:
                keyid:87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/dcuPxBTyYzViye9xHwFM7uem42w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:18:d7:9d:cd:6b:9e:76:d0:dc:b0:f8:ae:9b:de:a2:7e:
         2a:62:6d:5c:fe:98:68:7b:86:f4:0e:0c:69:75:5f:b3:4a:fc:
         d6:ec:32:82:6f:19:23:8c:7b:2a:25:7b:a2:55:b0:f8:59:be:
         48:7d:fd:65:35:99:d5:ff:97:ed:08:3d:11:ec:b4:b9:a6:ce:
         c6:f5:94:3b:69:76:c0:b0:dd:54:6f:ac:fe:c6:48:c9:d3:66:
         a8:01:fe:32:a2:5e:52:04:98:98:04:52:b2:79:8c:4f:6a:2f:
         6b:b5:10:c1:35:ac:51:3e:e9:5b:15:ca:c7:79:b3:d2:ae:8a:
         7d:c4:b0:2c:07:1f:61:6c:37:6a:46:5d:1a:97:38:d4:8c:d0:
         a7:a9:b7:cb:95:7c:47:e0:5c:d5:21:57:0e:23:2e:b2:7b:b0:
         f6:42:2d:f5:4e:05:29:23:b1:34:4e:c3:ec:36:f8:11:75:39:
         67:a2:01:8e:23:23:4e:c3:b0:56:0c:f3:74:52:4c:c6:19:db:
         4d:3a:93:20:a7:63:57:b4:c6:0e:5b:af:0e:75:a0:d7:ca:2a:
         92:63:4b:59:4d:0a:62:bd:68:f4:b6:72:b7:e9:18:c4:52:66:
         4d:53:de:43:a3:ae:df:d9:b5:f5:91:f8:1a:e3:9b:f8:f5:79:
         5b:d0:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net