Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/yC_z5A-CmOo6FN4Wfy9u2ET_zys.roa
File:                     yC_z5A-CmOo6FN4Wfy9u2ET_zys.roa (raw, json)
Hash identifier:          aT6x3gw+2DeVrLAbtuochEuLjUjnezrjZUlZ/J3s4po=
Subject key identifier:   C8:2F:F3:E4:0F:82:98:EA:3A:14:DE:16:7F:2F:6E:D8:44:FF:CF:2B
Certificate issuer:       /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial:       0191FFB7
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/yC_z5A-CmOo6FN4Wfy9u2ET_zys.roa
Signing time:             Mon 13 Jun 2022 05:30:08 +0000
ROA not before:           Mon 13 Jun 2022 05:30:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212921
IP address blocks:        45.91.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26345399 (0x191ffb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
        Validity
            Not Before: Jun 13 05:30:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c82ff3e40f8298ea3a14de167f2f6ed844ffcf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:2f:83:06:4b:62:ce:c2:cf:7c:9f:ec:9d:
                    52:d9:86:4b:cd:53:52:6f:ba:3c:d1:93:b9:41:09:
                    bc:62:13:d9:8d:16:f0:b2:51:8d:02:de:d6:a5:a6:
                    2c:86:fc:dd:8c:86:3c:46:d1:10:07:06:41:fb:1f:
                    38:15:4d:80:21:c7:4c:67:2a:ad:42:af:ba:05:e5:
                    13:96:96:3d:fb:7e:fb:dc:1b:f8:53:a2:f6:cc:08:
                    dd:78:53:68:5f:37:71:bf:e1:da:c8:c6:63:a1:1c:
                    37:bc:b6:4a:60:39:ce:27:df:5b:a0:bf:4e:99:46:
                    68:25:85:8b:c9:a4:8c:54:00:a1:6a:bc:73:22:a0:
                    5b:06:21:a0:8e:f9:f5:ef:39:82:32:f4:c2:41:c4:
                    50:f8:ef:32:f9:ca:af:f8:f8:3c:5f:8d:c5:58:8a:
                    1b:aa:c2:02:7e:d3:75:bc:6b:f7:11:ec:45:c9:87:
                    fd:cf:0b:25:e4:47:c7:d2:c6:71:57:10:37:68:8c:
                    c1:c8:d1:e2:6d:d4:f9:48:0f:87:c0:cd:79:f7:05:
                    d3:64:df:bd:86:1b:ef:40:8d:d7:54:53:f8:6b:3b:
                    c7:53:3c:23:ad:1c:10:6f:f6:a5:be:0e:7b:2a:6b:
                    57:6c:b8:ec:dc:6a:52:5e:1d:85:fd:3b:82:29:67:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2F:F3:E4:0F:82:98:EA:3A:14:DE:16:7F:2F:6E:D8:44:FF:CF:2B
            X509v3 Authority Key Identifier:
                keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/yC_z5A-CmOo6FN4Wfy9u2ET_zys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:83:e6:06:de:89:e3:ce:1c:d0:6b:79:17:f1:f7:bb:78:
         b3:ef:9a:2b:4b:0a:d4:9a:5a:75:98:2b:81:b4:df:32:d4:1f:
         f2:af:d6:0d:31:eb:23:e2:44:ff:9c:2a:dc:7b:93:ff:07:59:
         21:0c:11:8a:94:7c:65:95:20:c5:ce:c6:96:d9:0d:90:28:25:
         41:5d:60:53:ee:cf:c9:e8:c8:09:50:32:c2:ae:91:f5:3c:bd:
         8e:7b:33:7e:67:79:eb:e1:da:07:cc:12:c0:ac:fb:ae:cd:a3:
         f5:e0:77:cb:c0:a9:b2:4d:71:25:28:a0:43:42:28:3a:df:4e:
         00:fa:79:fd:d1:4e:0c:88:54:dc:f2:df:fe:6d:ae:65:fd:63:
         26:bc:a0:cb:26:e1:49:70:cd:44:0c:69:4a:55:a0:75:05:55:
         14:e7:ee:ef:9b:b6:3c:f6:b3:24:3f:db:a7:ec:0f:b6:54:dd:
         44:bc:82:0a:0e:b4:2c:e2:7a:00:95:62:e9:1a:93:72:2b:4a:
         7a:3c:67:c7:81:09:f5:62:b3:2a:45:44:40:17:15:78:84:b3:
         51:03:fb:cc:e8:05:f0:12:fe:20:ff:97:38:a8:34:46:da:17:
         a8:42:5c:20:40:fe:2a:89:18:4a:24:6e:b9:5c:1e:0b:0e:a5:
         62:7e:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net