Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/9vQo3kgc6g0faQcpK1AhRU0YsaM.roa
File:                     9vQo3kgc6g0faQcpK1AhRU0YsaM.roa (raw, json)
Hash identifier:          IOF5NS1rlJJvhw6jvPgjM4p7VDTiggylM8UeDMgZ/iE=
Subject key identifier:   F6:F4:28:DE:48:1C:EA:0D:1F:69:07:29:2B:50:21:45:4D:18:B1:A3
Certificate issuer:       /CN=26ecd8348e9828d043c21582a2c5158bf4d8950d
Certificate serial:       86CE1A
Authority key identifier: 26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/9vQo3kgc6g0faQcpK1AhRU0YsaM.roa
Signing time:             Sat 01 Jan 2022 00:54:21 +0000
ROA not before:           Sat 01 Jan 2022 00:54:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     262287
IP address blocks:        178.212.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8834586 (0x86ce1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ecd8348e9828d043c21582a2c5158bf4d8950d
        Validity
            Not Before: Jan  1 00:54:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6f428de481cea0d1f6907292b5021454d18b1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:d3:5c:9b:b3:3f:d5:20:db:02:16:72:60:
                    d6:75:80:4a:dc:f7:a3:5d:35:41:cb:60:21:7b:f5:
                    7e:07:04:00:36:46:0a:a0:2d:a8:1f:03:52:af:73:
                    c1:87:35:35:f9:11:b1:58:df:27:87:2d:3c:9f:ed:
                    c1:38:8c:91:69:07:4f:db:8b:1a:f0:8a:5c:05:70:
                    ec:3a:2c:83:a3:d6:ac:18:77:b2:7a:92:5b:7b:5a:
                    1d:e2:eb:62:22:e3:9f:8d:f3:be:03:d7:01:72:b3:
                    ab:f0:73:9c:e6:84:d2:d9:d7:1c:02:83:40:62:6b:
                    d1:4b:77:8f:fb:48:ba:e0:06:81:96:92:a7:36:6f:
                    9b:d4:85:e6:1e:5e:54:a6:d3:2c:be:89:2a:6e:2c:
                    0e:0d:25:5e:df:8d:cb:95:9e:37:94:3b:67:bf:94:
                    93:c9:ed:5a:9d:46:6f:bc:65:1e:cd:e9:b0:9a:38:
                    92:e5:5a:24:b4:9b:e2:13:92:41:05:2b:33:bc:cb:
                    52:6d:69:e2:72:9f:c7:09:76:24:08:54:95:1f:78:
                    3b:ce:2f:5f:b9:87:4d:af:38:84:2c:7e:96:7d:6e:
                    59:88:0e:ba:0b:3b:0d:da:af:a5:c3:5a:2e:33:1c:
                    1d:a3:75:72:37:12:a4:bc:4b:7b:d1:f4:b0:ff:90:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:28:DE:48:1C:EA:0D:1F:69:07:29:2B:50:21:45:4D:18:B1:A3
            X509v3 Authority Key Identifier:
                keyid:26:EC:D8:34:8E:98:28:D0:43:C2:15:82:A2:C5:15:8B:F4:D8:95:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuzYNI6YKNBDwhWCosUVi_TYlQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/9vQo3kgc6g0faQcpK1AhRU0YsaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1cf168-9d02-4818-90fa-cf1a88d227ac/1/JuzYNI6YKNBDwhWCosUVi_TYlQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:a8:2b:94:e9:13:a2:fa:eb:51:94:0e:a8:42:0b:5d:63:
         7c:70:c4:f1:72:38:c8:bc:03:15:72:d7:34:14:91:62:8e:df:
         21:2d:44:b6:33:24:99:d3:0d:3e:41:79:0d:91:8d:23:0e:1c:
         38:21:3c:0a:e0:4b:5f:e9:93:3d:9f:8e:78:22:8b:1d:09:06:
         b9:b6:fa:68:b2:37:2a:25:3d:ae:12:b2:04:1c:ed:69:c4:ce:
         52:5e:d5:90:ef:8c:3e:c6:96:7c:ad:cc:d5:78:6e:f0:46:79:
         96:3c:ad:05:b5:fb:71:da:75:99:79:47:17:ff:f0:12:2b:30:
         bc:2e:a9:d4:fd:f4:3e:aa:77:fd:a1:64:c2:7e:19:e7:85:b8:
         94:6e:8b:93:d3:d0:39:51:eb:43:50:aa:8d:aa:d0:f0:ae:f6:
         c2:25:07:f7:fb:93:3f:0c:a8:05:7b:1d:c0:f0:aa:31:26:39:
         32:4d:51:48:5f:d1:f5:2e:0a:9f:fe:42:a2:24:eb:eb:b4:fc:
         a8:00:c4:45:fa:e0:e0:af:05:b8:49:30:47:94:0f:74:7d:61:
         e9:ed:c3:ab:db:ab:2f:d3:09:6d:07:91:87:8a:1b:65:25:f9:
         e7:eb:e8:d3:fc:52:f2:2e:f5:7b:06:9e:f3:c4:45:7e:83:7f:
         b5:0a:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:24 2023 by rpki-client on console.sobornost.net