Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bfa0d7-90b8-4a2c-92d3-cddc9e0c1b80/1/AbfJtO4m3DZbef_f8oYghl9TBIA.roa
File:                     AbfJtO4m3DZbef_f8oYghl9TBIA.roa (raw, json)
Hash identifier:          SYg0Fkx8/gBsGr2aMUhqG2TTOYxfsuKL+jfIsRJvvqk=
Subject key identifier:   01:B7:C9:B4:EE:26:DC:36:5B:79:FF:DF:F2:86:20:86:5F:53:04:80
Certificate issuer:       /CN=965932de6700fda510516d1d3c85dd37aa3ff7ca
Certificate serial:       0182D4540C914BB88FA87E57222AA0674A13
Authority key identifier: 96:59:32:DE:67:00:FD:A5:10:51:6D:1D:3C:85:DD:37:AA:3F:F7:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llky3mcA_aUQUW0dPIXdN6o_98o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bfa0d7-90b8-4a2c-92d3-cddc9e0c1b80/1/AbfJtO4m3DZbef_f8oYghl9TBIA.roa
Signing time:             Thu 25 Aug 2022 09:27:34 +0000
ROA not before:           Thu 25 Aug 2022 09:27:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209326
IP address blocks:        194.69.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d4:54:0c:91:4b:b8:8f:a8:7e:57:22:2a:a0:67:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965932de6700fda510516d1d3c85dd37aa3ff7ca
        Validity
            Not Before: Aug 25 09:27:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01b7c9b4ee26dc365b79ffdff28620865f530480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:f8:36:3f:40:2d:04:85:f2:67:0b:c8:c0:
                    27:50:fd:83:e4:ae:12:10:4c:e0:08:c8:1d:70:45:
                    cd:55:f1:d1:9a:a0:24:32:c5:6f:b9:77:14:ce:13:
                    68:df:4b:ed:16:15:9e:dd:66:d7:c3:0f:3d:aa:da:
                    c4:aa:cc:b6:4a:94:ef:65:aa:7c:3a:af:72:08:bb:
                    a5:59:cf:a0:e2:ff:24:c2:e4:f5:94:4e:1a:1d:ef:
                    47:a7:d6:ea:7a:b6:8a:d9:34:10:f2:5e:0e:1a:55:
                    64:0e:0c:6d:23:60:f0:32:e8:dc:4f:03:05:7f:e6:
                    4a:df:3d:9f:12:89:e2:34:6c:da:1a:24:46:1c:f7:
                    71:3a:0a:0c:e2:dc:62:e4:fe:8c:c1:f2:01:80:e0:
                    cb:a4:46:8d:41:59:13:f9:1b:bd:88:9a:1a:2a:72:
                    37:c0:ac:3d:58:01:26:2c:4d:d0:e0:62:ae:87:3c:
                    06:5e:57:cb:c4:58:c8:e4:84:29:ef:a8:0e:9f:3a:
                    99:30:23:f9:5d:a1:f2:18:99:5d:cf:7b:cc:7a:1f:
                    70:32:cc:84:73:bf:7e:35:72:2e:67:9e:b9:39:59:
                    98:85:68:68:e4:ce:2f:db:be:52:ab:94:1d:dc:80:
                    c0:80:f8:83:43:3b:ef:ef:0b:2e:88:e4:45:e5:d6:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:C9:B4:EE:26:DC:36:5B:79:FF:DF:F2:86:20:86:5F:53:04:80
            X509v3 Authority Key Identifier:
                keyid:96:59:32:DE:67:00:FD:A5:10:51:6D:1D:3C:85:DD:37:AA:3F:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llky3mcA_aUQUW0dPIXdN6o_98o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bfa0d7-90b8-4a2c-92d3-cddc9e0c1b80/1/AbfJtO4m3DZbef_f8oYghl9TBIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bfa0d7-90b8-4a2c-92d3-cddc9e0c1b80/1/llky3mcA_aUQUW0dPIXdN6o_98o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:86:0c:0a:06:ae:23:5c:87:23:ca:08:01:df:5e:5a:e6:ea:
         55:5b:e9:e9:b3:39:10:88:3b:1c:16:86:0b:5a:fb:c4:c8:45:
         63:e5:6e:1a:89:fa:7c:fd:6a:35:c0:f9:6f:4a:92:cf:2a:9a:
         7d:08:e1:e1:e8:11:0b:bd:94:d4:a7:0e:69:61:a1:a7:81:b3:
         34:d2:3d:c8:d1:6f:90:ff:e9:6b:77:2d:51:a9:b9:b6:1b:91:
         b3:3d:bc:7e:05:c1:70:4f:ae:ea:a0:d8:a3:10:a9:3d:70:d3:
         71:7b:c8:e9:2f:9a:8d:b4:11:0b:a4:27:81:3d:52:0d:03:4e:
         59:c9:37:67:70:84:78:ff:08:62:03:68:3b:e8:1f:8f:49:a5:
         37:a7:bf:8e:62:e0:95:cd:4b:17:1b:04:9f:6e:6b:6e:ef:d7:
         c5:23:6c:2d:21:4c:c2:86:a4:e8:de:1b:51:d6:0f:ec:ce:9b:
         1a:19:fe:97:a0:25:88:4b:b1:f6:93:2a:b2:00:2b:8f:5d:1a:
         72:49:0d:26:1f:5f:8d:96:b5:84:44:c9:36:b9:2e:57:70:4f:
         f7:8c:52:e5:f2:4a:5b:73:8c:a7:9a:19:2f:f2:09:a6:b8:ad:
         ab:f3:98:12:34:af:6b:49:a5:80:51:f8:35:56:21:f1:87:df:
         1a:cf:82:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLUVAyRS7iPqH5XIiqgZ0oTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTkzMmRlNjcwMGZkYTUxMDUxNmQxZDNjODVkZDM3YWEz
ZmY3Y2EwHhcNMjIwODI1MDkyNzM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWI3YzliNGVlMjZkYzM2NWI3OWZmZGZmMjg2MjA4NjVmNTMwNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKj4Nj9ALQSF8mcLyMAnUP2D5K4S
EEzgCMgdcEXNVfHRmqAkMsVvuXcUzhNo30vtFhWe3WbXww89qtrEqsy2SpTvZap8
Oq9yCLulWc+g4v8kwuT1lE4aHe9Hp9bqeraK2TQQ8l4OGlVkDgxtI2DwMujcTwMF
f+ZK3z2fEoniNGzaGiRGHPdxOgoM4txi5P6MwfIBgODLpEaNQVkT+Ru9iJoaKnI3
wKw9WAEmLE3Q4GKuhzwGXlfLxFjI5IQp76gOnzqZMCP5XaHyGJldz3vMeh9wMsyE
c79+NXIuZ565OVmYhWho5M4v275Sq5Qd3IDAgPiDQzvv7wsuiORF5daK0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAG3ybTuJtw2W3n/3/KGIIZfUwSAMB8GA1UdIwQY
MBaAFJZZMt5nAP2lEFFtHTyF3TeqP/fKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxreTNtY0FfYVVRVVcwZFBJWGRONm9fOThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZmEwZDctOTBiOC00YTJjLTkyZDMt
Y2RkYzllMGMxYjgwLzEvQWJmSnRPNG0zRFpiZWZfZjhvWWdobDlUQklBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZmEwZDctOTBiOC00YTJjLTkyZDMtY2RkYzllMGMxYjgw
LzEvbGxreTNtY0FfYVVRVVcwZFBJWGRONm9fOThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkWmMA0G
CSqGSIb3DQEBCwUAA4IBAQBhhgwKBq4jXIcjyggB315a5upVW+npszkQiDscFoYL
WvvEyEVj5W4aifp8/Wo1wPlvSpLPKpp9COHh6BELvZTUpw5pYaGngbM00j3I0W+Q
/+lrdy1Rqbm2G5GzPbx+BcFwT67qoNijEKk9cNNxe8jpL5qNtBELpCeBPVINA05Z
yTdncIR4/whiA2g76B+PSaU3p7+OYuCVzUsXGwSfbmtu79fFI2wtIUzChqTo3htR
1g/szpsaGf6XoCWIS7H2kyqyACuPXRpySQ0mH1+NlrWERMk2uS5XcE/3jFLl8kpb
c4ynmhkv8gmmuK2r85gSNK9rSaWAUfg1ViHxh98az4L4
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net