Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Fouep4GdMQGXQDxudgXIksxgOA4.roa
File:                     Fouep4GdMQGXQDxudgXIksxgOA4.roa (raw, json)
Hash identifier:          cx2ujxEtt6ufkecmec4zqE06jx1hC5NbHck1uyvvEI8=
Subject key identifier:   16:8B:9E:A7:81:9D:31:01:97:40:3C:6E:76:05:C8:92:CC:60:38:0E
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0183516E0304204097D9A452C6DD0ADB35FD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Fouep4GdMQGXQDxudgXIksxgOA4.roa
Signing time:             Sun 18 Sep 2022 16:28:27 +0000
ROA not before:           Sun 18 Sep 2022 16:28:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50225
IP address blocks:        141.11.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:51:6e:03:04:20:40:97:d9:a4:52:c6:dd:0a:db:35:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Sep 18 16:28:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=168b9ea7819d310197403c6e7605c892cc60380e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:51:0c:51:04:60:35:f0:22:f7:17:e5:0b:
                    93:99:91:fe:18:cd:fd:97:a8:67:01:0d:a2:86:7d:
                    56:be:01:20:b5:74:20:7c:71:87:d0:67:71:5c:0a:
                    75:85:fa:59:13:2f:a8:c5:90:7e:44:40:79:e9:62:
                    68:8e:05:8b:8a:1a:a9:16:c1:89:d4:1f:74:ae:55:
                    4a:bd:9f:44:84:54:10:a5:b2:24:16:0f:df:e3:7d:
                    5d:f4:29:3c:57:de:17:ed:a1:d1:25:92:cb:25:a1:
                    95:fe:2f:0c:39:09:70:8b:3f:d9:43:c6:c0:1f:32:
                    dc:36:b2:96:5d:ce:76:11:16:2e:f3:6e:79:fe:70:
                    3c:43:c3:fa:bf:0f:26:c5:d2:c7:24:f4:b3:ba:64:
                    3f:ac:b6:c5:0a:8a:27:48:5d:b3:e7:8d:73:ca:5a:
                    97:86:f7:20:2a:b3:b2:6a:02:36:b1:0d:70:ef:92:
                    ee:6b:90:2b:9c:31:46:7a:f9:08:17:0d:5b:3e:14:
                    11:79:d5:d1:73:51:40:df:49:2c:f9:3e:30:7d:f4:
                    0c:db:81:37:df:44:24:4d:cc:e5:31:41:57:04:72:
                    df:5c:0f:08:af:d7:15:03:03:ed:14:6d:d5:65:92:
                    50:64:ed:35:1b:e1:d1:4f:8e:a2:06:24:f1:99:64:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8B:9E:A7:81:9D:31:01:97:40:3C:6E:76:05:C8:92:CC:60:38:0E
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/Fouep4GdMQGXQDxudgXIksxgOA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:28:f8:85:b7:aa:38:6b:cb:9a:67:a9:5d:30:cd:c4:fa:b0:
         77:16:bf:e5:5b:0d:10:40:7c:6e:a9:74:c2:e6:97:e9:dc:0e:
         35:d3:a3:8e:22:a2:33:2b:58:fa:3f:ec:df:22:3b:97:1a:10:
         1f:3e:b6:39:58:31:46:f9:a1:88:8b:85:af:34:9c:7d:2a:2a:
         57:18:dc:06:04:00:5f:6b:f6:d7:44:32:90:13:c2:ba:af:27:
         16:db:80:dd:99:ad:15:f0:f6:65:50:45:2e:2b:5d:77:71:3e:
         21:db:43:27:8e:dd:56:e5:73:c6:a0:69:86:d0:0c:76:89:db:
         d4:3f:d0:12:99:89:b9:e2:8a:ea:91:ea:d1:04:7c:14:ec:af:
         1a:f9:76:79:07:7e:db:e6:93:25:dc:74:ea:60:da:f6:bd:8c:
         4f:ec:bf:fa:9c:96:94:d0:64:50:90:1d:dd:e8:b7:04:cf:cf:
         82:d9:b0:4b:af:3d:a4:18:28:87:e0:d1:73:2a:7a:33:09:e5:
         55:40:e0:36:a5:90:3e:b3:76:c5:2e:ac:6f:0a:f1:59:fe:87:
         c5:df:08:24:d9:8f:9f:35:4a:a8:45:c4:e6:36:cf:a4:92:09:
         46:91:87:de:04:a4:d5:65:4e:38:23:6f:96:37:0b:22:df:b3:
         30:fb:fc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net