Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/G1nSPB6VA-Z5CpgU833fCsoeEz4.roa
File:                     G1nSPB6VA-Z5CpgU833fCsoeEz4.roa (raw, json)
Hash identifier:          86qAcknvjBTnLHDoehZW+hPTF7Sqxof01rclqcHAaXA=
Subject key identifier:   1B:59:D2:3C:1E:95:03:E6:79:0A:98:14:F3:7D:DF:0A:CA:1E:13:3E
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       047F5A1D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/G1nSPB6VA-Z5CpgU833fCsoeEz4.roa
Signing time:             Mon 09 May 2022 10:53:44 +0000
ROA not before:           Mon 09 May 2022 10:53:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210441
IP address blocks:        141.11.230.0/23 maxlen: 24
                          141.11.228.0/23 maxlen: 24
                          141.11.232.0/22 maxlen: 24
                          141.11.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75455005 (0x47f5a1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May  9 10:53:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b59d23c1e9503e6790a9814f37ddf0aca1e133e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:11:0b:06:2d:2a:55:62:df:49:be:3c:f4:
                    a1:11:2f:1e:7f:5d:e0:5a:dc:cb:8a:02:41:a6:b5:
                    50:15:69:5e:32:47:71:d8:59:f3:07:bf:70:10:e9:
                    99:a6:db:29:1a:66:77:2f:17:fb:8c:c4:e5:1d:54:
                    22:74:07:af:09:1e:3e:b6:ef:84:93:5e:52:20:51:
                    8f:8b:8f:27:03:08:a3:27:cd:3d:43:5e:ec:f4:11:
                    a3:84:db:1f:64:ed:5a:cd:6f:21:84:c2:87:65:75:
                    c1:10:85:bd:88:fa:03:25:e4:dc:b2:37:ba:0d:96:
                    fd:70:da:03:fb:2c:2e:22:4f:4f:81:79:bf:b7:9a:
                    f0:3c:2c:f5:20:0b:08:fa:2d:78:e5:3c:e5:4b:d7:
                    3c:4b:96:20:5b:84:66:2b:34:dd:4f:12:ad:24:37:
                    00:2e:ea:4f:b6:4b:9a:f2:65:19:78:5c:5c:ce:d2:
                    b5:e9:da:48:02:35:04:e3:56:96:69:e7:83:b2:b6:
                    8d:dd:a4:b8:5d:d0:1d:3a:e8:2d:37:83:d4:34:12:
                    11:88:c8:a6:34:4a:ab:0c:10:0b:e1:c6:09:7e:e0:
                    ea:a2:17:1e:ad:b9:f8:20:c8:a1:15:41:f3:f0:9b:
                    48:a4:b2:5d:04:6a:dc:d0:21:55:f0:ef:2c:d4:63:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:59:D2:3C:1E:95:03:E6:79:0A:98:14:F3:7D:DF:0A:CA:1E:13:3E
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/G1nSPB6VA-Z5CpgU833fCsoeEz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.228.0-141.11.239.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:d9:14:72:61:d8:f9:fe:94:b4:9a:60:73:af:4e:44:fb:
         2c:55:e7:41:5f:0b:84:52:0a:db:ea:c1:bf:c2:51:86:a7:48:
         62:6c:b7:02:dc:d0:29:50:4a:32:c2:02:63:68:26:18:6e:f2:
         39:20:14:f3:db:83:35:49:ce:53:4c:9a:4f:e5:af:59:bc:21:
         7f:9d:4c:88:0e:57:8e:d2:6b:68:c7:0c:f8:61:bc:39:cf:2f:
         99:ea:20:a7:ce:3e:dc:59:42:11:47:c2:b3:31:32:69:da:05:
         46:4d:11:c9:e9:a1:56:00:dd:aa:38:ea:c3:3a:39:13:4e:26:
         33:e2:e2:26:3c:4b:a8:06:a5:4f:e0:54:b0:2b:96:47:df:44:
         ab:cd:c2:ba:ee:e1:d4:ac:69:93:1b:30:bf:22:ca:95:e1:e2:
         f0:28:a0:1e:20:dd:7b:d8:a8:1d:9a:be:b7:62:16:6c:5e:7d:
         99:df:ef:65:99:07:39:7b:a2:72:7e:dd:8d:61:3c:a1:ca:98:
         73:f3:0f:9a:37:0d:49:5a:44:eb:57:4f:83:b2:7a:a9:bd:7e:
         61:5e:44:83:8a:54:84:90:75:06:e6:52:a4:ed:5e:8b:6f:ad:
         30:7e:90:9b:ba:52:10:70:1e:ab:ab:1b:2e:61:48:46:95:f0:
         ee:96:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net