Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/TZYw-h_0MIFRux890iL4QEqfCo4.roa
File:                     TZYw-h_0MIFRux890iL4QEqfCo4.roa (raw, json)
Hash identifier:          xXHt2n1iwXmhfVHJ+I8HMN32qFuzHvQGIQHeaWv+TSQ=
Subject key identifier:   4D:96:30:FA:1F:F4:30:81:51:BB:1F:3D:D2:22:F8:40:4A:9F:0A:8E
Certificate issuer:       /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial:       2B99A2
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/TZYw-h_0MIFRux890iL4QEqfCo4.roa
Signing time:             Sun 09 Jan 2022 03:31:59 +0000
ROA not before:           Sun 09 Jan 2022 03:31:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136038
IP address blocks:        45.91.226.0/24 maxlen: 24
                          45.91.225.0/24 maxlen: 24
                          45.91.224.0/24 maxlen: 24
                          45.91.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857378 (0x2b99a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
        Validity
            Not Before: Jan  9 03:31:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d9630fa1ff4308151bb1f3dd222f8404a9f0a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:ed:d9:14:5c:87:b8:68:5e:56:68:73:f7:
                    f6:ad:12:f0:e0:25:16:a7:63:ac:12:22:4b:d1:cb:
                    85:fa:50:46:04:17:60:54:16:4a:e0:fb:57:f1:85:
                    69:53:d2:ba:ca:c7:86:49:03:80:8b:7b:3d:58:21:
                    ff:0e:8d:c9:87:5a:61:53:95:c0:5b:c5:c1:e1:b0:
                    c6:68:83:90:42:83:f0:11:e3:6f:6e:e7:9a:61:f3:
                    d1:b7:cd:b4:32:85:a0:71:ba:12:c2:a5:49:5e:d7:
                    74:c3:39:7b:4c:26:33:e9:eb:38:c0:a0:ea:8a:04:
                    72:ce:a0:17:46:d7:09:b6:02:77:35:c7:26:14:5b:
                    5d:b8:bf:44:65:3a:8d:8f:6d:dc:2b:58:82:d1:e8:
                    08:fd:6e:1c:f0:d2:31:f0:60:43:fd:7d:6d:0b:3b:
                    40:d2:f2:57:51:f3:56:8e:06:9b:d9:9c:9d:4a:0b:
                    d0:01:95:b7:f1:97:ed:fe:e4:8b:28:7b:37:b6:0b:
                    e2:fd:e1:d9:1f:2c:a0:1c:67:99:85:1a:70:51:13:
                    07:1f:64:91:04:95:21:96:78:d0:a2:7b:11:30:43:
                    08:47:39:15:23:aa:74:de:6c:d8:c0:ff:89:c9:9b:
                    db:7d:e2:3f:90:42:52:1d:9e:81:f9:9c:a5:2e:c3:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:96:30:FA:1F:F4:30:81:51:BB:1F:3D:D2:22:F8:40:4A:9F:0A:8E
            X509v3 Authority Key Identifier:
                keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/TZYw-h_0MIFRux890iL4QEqfCo4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:ae:c9:ef:a3:12:03:87:59:b7:ce:9a:35:58:5e:be:ce:a7:
         f5:12:45:89:6d:4c:88:28:3b:fe:4c:13:0f:32:24:13:52:ef:
         23:e3:29:1a:ae:71:e1:bc:99:4b:58:38:71:0c:d2:ee:4b:8a:
         4b:22:e4:cf:dd:4a:f3:af:40:0b:f4:c4:b4:3f:76:c5:e2:f6:
         c1:50:af:a5:63:20:28:69:cc:73:45:8f:a5:93:7d:4d:cc:fe:
         bd:4b:4b:b7:7f:d6:d8:fe:64:16:f4:94:c6:6d:66:69:e2:92:
         cb:e7:3d:17:a9:b5:87:35:23:50:3c:7c:a4:a9:5c:e7:2f:da:
         b1:8e:0e:5d:49:a9:e3:9b:f6:fc:51:4e:e4:2e:38:06:7e:e3:
         52:af:4a:22:cd:c7:00:20:2a:b6:f9:28:ce:b4:45:9c:d2:1d:
         f6:11:f7:3d:7f:c1:29:66:37:05:30:dc:fe:83:cc:b4:51:8e:
         e6:f6:8f:02:f7:98:4a:0d:ee:37:62:da:06:f1:22:0b:10:ef:
         02:c9:e0:10:e6:a7:dd:30:7d:00:ab:23:f2:fa:6b:44:ea:50:
         5c:76:6c:42:2e:5b:f7:e1:73:e2:c1:7e:8d:49:6f:69:65:a1:
         1e:22:a0:04:59:7f:ce:9a:40:7b:a4:4c:86:11:e3:ce:90:ba:
         54:bf:75:31
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDK5miMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAy
ZGEwNjI1OTUzNGRjNDUyMDg5ZDI5MWFkMjc3ZWVhYzE2Y2Q0MmEwHhcNMjIwMTA5
MDMzMTU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0ZDk2MzBmYTFmZjQz
MDgxNTFiYjFmM2RkMjIyZjg0MDRhOWYwYThlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvurt2RRch7hoXlZoc/f2rRLw4CUWp2OsEiJL0cuF+lBGBBdg
VBZK4PtX8YVpU9K6yseGSQOAi3s9WCH/Do3Jh1phU5XAW8XB4bDGaIOQQoPwEeNv
bueaYfPRt820MoWgcboSwqVJXtd0wzl7TCYz6es4wKDqigRyzqAXRtcJtgJ3Nccm
FFtduL9EZTqNj23cK1iC0egI/W4c8NIx8GBD/X1tCztA0vJXUfNWjgab2ZydSgvQ
AZW38Zft/uSLKHs3tgvi/eHZHyygHGeZhRpwURMHH2SRBJUhlnjQonsRMEMIRzkV
I6p03mzYwP+JyZvbfeI/kEJSHZ6B+ZylLsPJ9QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFE2WMPof9DCBUbsfPdIi+EBKnwqOMB8GA1UdIwQYMBaAFALaBiWVNNxFIInS
ka0nfurBbNQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
QXRvR0paVTAzRVVnaWRLUnJTZC02c0ZzMUNvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hOS8zZjVjMjEtN2IzYi00MGY3LTg4NTEtY2QzMmYwZDQwODZiLzEv
VFpZdy1oXzBNSUZSdXg4OTBpTDRRRXFmQ280LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8z
ZjVjMjEtN2IzYi00MGY3LTg4NTEtY2QzMmYwZDQwODZiLzEvQXRvR0paVTAzRVVn
aWRLUnJTZC02c0ZzMUNvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVvgMA0GCSqGSIb3DQEBCwUAA4IB
AQA0rsnvoxIDh1m3zpo1WF6+zqf1EkWJbUyIKDv+TBMPMiQTUu8j4ykarnHhvJlL
WDhxDNLuS4pLIuTP3Urzr0AL9MS0P3bF4vbBUK+lYyAoacxzRY+lk31NzP69S0u3
f9bY/mQW9JTGbWZp4pLL5z0XqbWHNSNQPHykqVznL9qxjg5dSanjm/b8UU7kLjgG
fuNSr0oizccAICq2+SjOtEWc0h32Efc9f8EpZjcFMNz+g8y0UY7m9o8C95hKDe43
YtoG8SILEO8CyeAQ5qfdMH0AqyPy+mtE6lBcdmxCLlv34XPiwX6NSW9pZaEeIqAE
WX/OmkB7pEyGEePOkLpUv3Ux
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net