Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/77961e-c308-4de1-838d-f52f6d6e59e2/1/5nJrT_coGyOu0E0sMXDcJZ4YzTs.roa
File:                     5nJrT_coGyOu0E0sMXDcJZ4YzTs.roa (raw, json)
Hash identifier:          RTsjUxNlL2UoYNreiP/YaiWKpjFYSZ8q8kKQKB33hfQ=
Subject key identifier:   E6:72:6B:4F:F7:28:1B:23:AE:D0:4D:2C:31:70:DC:25:9E:18:CD:3B
Certificate issuer:       /CN=e669e890155742bffa7ffb526ee1e1313842a764
Certificate serial:       01695C17
Authority key identifier: E6:69:E8:90:15:57:42:BF:FA:7F:FB:52:6E:E1:E1:31:38:42:A7:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5mnokBVXQr_6f_tSbuHhMThCp2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/77961e-c308-4de1-838d-f52f6d6e59e2/1/5nJrT_coGyOu0E0sMXDcJZ4YzTs.roa
Signing time:             Sat 01 Jan 2022 15:05:46 +0000
ROA not before:           Sat 01 Jan 2022 15:05:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29374
IP address blocks:        195.149.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23682071 (0x1695c17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e669e890155742bffa7ffb526ee1e1313842a764
        Validity
            Not Before: Jan  1 15:05:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6726b4ff7281b23aed04d2c3170dc259e18cd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:2d:4a:e2:49:48:4f:4f:09:30:22:d9:84:
                    06:60:65:8f:83:f0:4c:b0:f3:6c:d0:8b:b8:b9:ec:
                    7f:f8:81:72:a9:6b:f0:e5:41:2f:c2:3c:6e:c6:f4:
                    be:f3:ae:87:c7:26:8d:79:3b:fa:f7:a6:11:65:e4:
                    cb:c0:57:72:c8:5c:dd:2a:c1:5d:ad:30:42:64:f7:
                    12:cc:2c:05:be:67:d0:75:99:56:6f:47:b0:aa:19:
                    36:ad:cf:6f:22:02:47:61:76:71:81:be:ce:f5:69:
                    d2:03:73:91:4a:2e:9d:26:89:0c:7a:48:26:64:40:
                    76:24:c8:3e:d0:66:6b:25:88:01:2d:b8:78:85:e0:
                    59:3b:3d:c9:a8:3e:c5:34:a8:3d:51:fa:17:fd:2e:
                    e8:67:72:26:b2:82:e5:2f:79:a2:99:27:d0:b7:bf:
                    9d:1c:f4:08:fa:cf:8c:92:b2:56:d4:89:60:27:74:
                    c9:42:09:25:b8:8b:53:81:58:99:74:b3:79:af:c4:
                    24:68:6d:68:c7:9c:b4:9d:a1:1c:45:dd:df:85:a0:
                    a4:fa:3f:91:a0:93:b9:cf:1d:7f:c7:9d:cf:a4:b5:
                    79:aa:fa:2c:d2:95:71:00:fa:f8:2e:d8:2a:d6:a9:
                    ca:3d:58:9e:4d:15:10:4d:d7:03:01:ea:47:57:f0:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:72:6B:4F:F7:28:1B:23:AE:D0:4D:2C:31:70:DC:25:9E:18:CD:3B
            X509v3 Authority Key Identifier:
                keyid:E6:69:E8:90:15:57:42:BF:FA:7F:FB:52:6E:E1:E1:31:38:42:A7:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mnokBVXQr_6f_tSbuHhMThCp2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/77961e-c308-4de1-838d-f52f6d6e59e2/1/5nJrT_coGyOu0E0sMXDcJZ4YzTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/77961e-c308-4de1-838d-f52f6d6e59e2/1/5mnokBVXQr_6f_tSbuHhMThCp2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:eb:6a:db:fb:e1:dd:df:d5:9b:7a:4d:b1:b8:f2:71:1e:
         73:df:35:b9:91:93:ac:c6:d2:ef:01:90:20:74:24:62:18:55:
         8b:da:de:9b:9d:10:71:39:43:14:93:3b:36:a8:10:c4:53:00:
         ba:f6:b9:cc:68:64:aa:73:b6:0b:d9:be:a6:f3:e2:ea:64:93:
         41:c4:3d:7c:8f:3a:57:20:72:98:e5:2f:f4:a3:73:8d:c5:2e:
         6d:84:94:15:b3:fd:dc:2e:e7:c9:e4:4b:21:14:62:b3:46:20:
         c9:cd:01:01:86:77:15:d3:db:b6:c9:39:b0:9c:1b:d4:c7:df:
         e2:06:9b:db:a3:41:f9:5c:6a:56:a0:d9:ea:fd:2c:c1:9a:a2:
         d2:bc:9e:7e:af:62:a5:b4:cb:01:4b:cc:b8:fd:4c:f5:14:ca:
         0e:97:fc:02:9b:6e:b9:7c:87:37:5a:30:84:36:83:a0:1f:7a:
         44:0c:5a:54:95:70:6f:1e:81:79:8f:75:0c:6e:5f:e1:e8:41:
         e4:79:c4:c3:a1:ab:82:9e:f1:3f:74:9b:d7:52:7b:f2:5b:6e:
         2f:f5:5f:fd:fc:23:59:3f:c4:02:01:2b:fb:30:67:26:20:4c:
         15:96:e5:30:fb:7c:db:1c:12:41:c5:1d:ce:e8:81:12:e3:bb:
         d7:fc:19:ec
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWlcFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NjY5ZTg5MDE1NTc0MmJmZmE3ZmZiNTI2ZWUxZTEzMTM4NDJhNzY0MB4XDTIyMDEw
MTE1MDU0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTY3MjZiNGZmNzI4
MWIyM2FlZDA0ZDJjMzE3MGRjMjU5ZTE4Y2QzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALyQLUriSUhPTwkwItmEBmBlj4PwTLDzbNCLuLnsf/iBcqlr
8OVBL8I8bsb0vvOuh8cmjXk7+vemEWXky8BXcshc3SrBXa0wQmT3EswsBb5n0HWZ
Vm9HsKoZNq3PbyICR2F2cYG+zvVp0gNzkUounSaJDHpIJmRAdiTIPtBmayWIAS24
eIXgWTs9yag+xTSoPVH6F/0u6GdyJrKC5S95opkn0Le/nRz0CPrPjJKyVtSJYCd0
yUIJJbiLU4FYmXSzea/EJGhtaMectJ2hHEXd34WgpPo/kaCTuc8df8edz6S1ear6
LNKVcQD6+C7YKtapyj1Ynk0VEE3XAwHqR1fwjwkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTmcmtP9ygbI67QTSwxcNwlnhjNOzAfBgNVHSMEGDAWgBTmaeiQFVdCv/p/
+1Ju4eExOEKnZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVtbm9rQlZYUXJfNmZfdFNidUhoTVRoQ3AyUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNzc5NjFlLWMzMDgtNGRlMS04MzhkLWY1MmY2ZDZlNTllMi8x
LzVuSnJUX2NvR3lPdTBFMHNNWERjSlo0WXpUcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
Nzc5NjFlLWMzMDgtNGRlMS04MzhkLWY1MmY2ZDZlNTllMi8xLzVtbm9rQlZYUXJf
NmZfdFNidUhoTVRoQ3AyUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOVXjANBgkqhkiG9w0BAQsFAAOC
AQEAnNrratv74d3f1Zt6TbG48nEec981uZGTrMbS7wGQIHQkYhhVi9rem50QcTlD
FJM7NqgQxFMAuva5zGhkqnO2C9m+pvPi6mSTQcQ9fI86VyBymOUv9KNzjcUubYSU
FbP93C7nyeRLIRRis0Ygyc0BAYZ3FdPbtsk5sJwb1Mff4gab26NB+VxqVqDZ6v0s
wZqi0ryefq9ipbTLAUvMuP1M9RTKDpf8AptuuXyHN1owhDaDoB96RAxaVJVwbx6B
eY91DG5f4ehB5HnEw6Grgp7xP3Sb11J78ltuL/Vf/fwjWT/EAgEr+zBnJiBMFZbl
MPt82xwSQcUdzuiBEuO71/wZ7A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net