Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mAbohk07g0n86PeRVhJgIfacacM.roa
File:                     mAbohk07g0n86PeRVhJgIfacacM.roa (raw, json)
Hash identifier:          4dfFN4eQvefb+QbZw8BObuFaa4HUUvjJYbctng+8Ntc=
Subject key identifier:   98:06:E8:86:4D:3B:83:49:FC:E8:F7:91:56:12:60:21:F6:9C:69:C3
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       05465C15
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mAbohk07g0n86PeRVhJgIfacacM.roa
Signing time:             Mon 27 Jun 2022 18:52:33 +0000
ROA not before:           Mon 27 Jun 2022 18:52:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        141.11.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88497173 (0x5465c15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jun 27 18:52:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9806e8864d3b8349fce8f79156126021f69c69c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:a1:2c:49:bf:dc:ec:c6:97:6b:1f:ad:16:
                    5e:f7:70:44:54:82:90:0b:b4:5d:05:63:1f:2a:af:
                    7c:2e:eb:2a:f9:42:7c:cd:52:a7:c9:32:81:2e:f9:
                    8f:c1:46:31:88:84:ba:bb:2c:18:0b:41:6d:06:8a:
                    af:8e:d1:0c:a8:75:67:88:45:10:c0:db:f7:9a:15:
                    6d:65:1d:67:a9:64:1e:55:33:0c:a7:39:40:10:70:
                    13:77:30:de:80:7f:8d:b0:04:4c:88:c0:e1:cb:e1:
                    45:41:4c:4b:bf:e4:4d:39:56:a5:03:50:0b:ab:55:
                    2d:51:22:d2:74:61:38:cb:5d:f4:97:ad:a7:65:22:
                    fe:39:20:c3:fd:f8:d9:1b:a9:0b:03:ca:15:a5:c6:
                    c2:a0:ee:68:14:26:dc:4f:9a:49:f0:f7:c9:df:3b:
                    a9:82:d2:2f:8a:f5:cb:c6:08:e9:9b:b3:6e:85:6d:
                    c7:26:21:37:40:aa:85:0c:70:f1:7a:6f:d4:67:12:
                    ba:bc:5c:ed:c6:2d:29:07:c0:62:21:6e:4f:03:b3:
                    9a:61:0d:32:c6:7a:23:dd:38:f4:05:87:db:71:1b:
                    57:25:a5:40:71:ca:8f:74:98:fc:a3:c5:e0:b4:a8:
                    12:e1:2a:b1:d2:10:8d:2a:9a:39:89:22:1b:d7:dc:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:06:E8:86:4D:3B:83:49:FC:E8:F7:91:56:12:60:21:F6:9C:69:C3
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/mAbohk07g0n86PeRVhJgIfacacM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c8:8d:30:18:26:fb:c9:27:86:c1:ce:3a:d2:48:02:d4:bd:
         9c:dc:5e:8f:da:e9:f1:03:4f:d6:07:36:06:4b:a4:47:ca:09:
         95:fd:6a:ad:e9:1d:77:37:d8:2d:b8:d1:c5:d7:4b:d2:90:73:
         f0:7a:66:59:96:49:e8:4e:3a:c8:b2:5b:d6:2a:bd:de:ef:8b:
         16:26:ed:f7:28:02:0e:a6:21:fa:86:cf:8d:a2:a1:fd:c2:dd:
         b8:8f:1d:6b:a7:eb:1b:25:f1:71:df:46:41:28:a4:f6:cc:ef:
         a6:e1:e0:32:12:0c:8a:56:67:4a:21:7e:e7:96:54:ba:1b:52:
         85:88:29:83:58:9f:db:f9:2d:22:9b:33:81:8c:50:24:0b:3e:
         29:47:d4:b6:c5:ca:03:33:42:fc:3b:56:d2:39:85:69:e8:35:
         23:8d:04:c1:fa:fa:cd:c6:8f:4b:f9:69:1e:c8:a1:b5:f3:f5:
         e1:53:ed:22:2a:ad:5e:1c:65:74:14:22:98:da:18:a5:6b:75:
         20:10:9e:f6:e6:d9:7e:ab:bf:c9:10:e8:5c:af:e4:53:66:7e:
         d2:b1:8a:56:c4:f3:f3:5b:96:fb:38:5c:fa:7d:1a:13:36:7b:
         d7:bb:ce:95:ec:9d:70:af:90:24:20:65:96:62:e1:4d:52:03:
         2d:c4:3a:16
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBUZcFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDYy
NzE4NTIzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgwNmU4ODY0ZDNi
ODM0OWZjZThmNzkxNTYxMjYwMjFmNjljNjljMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXmoSxJv9zsxpdrH60WXvdwRFSCkAu0XQVjHyqvfC7rKvlC
fM1Sp8kygS75j8FGMYiEurssGAtBbQaKr47RDKh1Z4hFEMDb95oVbWUdZ6lkHlUz
DKc5QBBwE3cw3oB/jbAETIjA4cvhRUFMS7/kTTlWpQNQC6tVLVEi0nRhOMtd9Jet
p2Ui/jkgw/342RupCwPKFaXGwqDuaBQm3E+aSfD3yd87qYLSL4r1y8YI6ZuzboVt
xyYhN0CqhQxw8Xpv1GcSurxc7cYtKQfAYiFuTwOzmmENMsZ6I9049AWH23EbVyWl
QHHKj3SY/KPF4LSoEuEqsdIQjSqaOYkiG9fcU2ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSYBuiGTTuDSfzo95FWEmAh9pxpwzAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L21BYm9oazA3ZzBuODZQZVJWaEpnSWZhY2FjTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LfjANBgkqhkiG9w0BAQsFAAOC
AQEAesiNMBgm+8knhsHOOtJIAtS9nNxej9rp8QNP1gc2BkukR8oJlf1qrekddzfY
LbjRxddL0pBz8HpmWZZJ6E46yLJb1iq93u+LFibt9ygCDqYh+obPjaKh/cLduI8d
a6frGyXxcd9GQSik9szvpuHgMhIMilZnSiF+55ZUuhtShYgpg1if2/ktIpszgYxQ
JAs+KUfUtsXKAzNC/DtW0jmFaeg1I40Ewfr6zcaPS/lpHsihtfP14VPtIiqtXhxl
dBQimNoYpWt1IBCe9ubZfqu/yRDoXK/kU2Z+0rGKVsTz81uW+zhc+n0aEzZ717vO
leydcK+QJCBllmLhTVIDLcQ6Fg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net