Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa
File:                     Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (raw, json)
Hash identifier:          T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=
Subject key identifier:   36:0F:0B:5A:81:E9:38:52:3F:15:EB:B4:1E:AB:42:0D:6B:13:9B:65
Certificate issuer:       /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial:       01942825BA5334F3FBEB5987BA51B706FDED
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa
Signing time:             Thu 02 Jan 2025 17:52:28 +0000
ROA not before:           Thu 02 Jan 2025 17:52:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198694
IP address blocks:        92.249.20.0/22 maxlen: 22
                          2a13:62c0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:ba:53:34:f3:fb:eb:59:87:ba:51:b7:06:fd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
        Validity
            Not Before: Jan  2 17:52:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=360f0b5a81e938523f15ebb41eab420d6b139b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:46:84:73:9d:f3:13:ca:28:1e:cf:62:a8:a5:
                    96:96:8c:aa:c2:22:a4:e5:20:0a:65:ca:71:22:73:
                    83:ae:d8:ed:94:80:61:b2:65:6e:d2:51:b5:52:e9:
                    c1:c0:f3:03:63:bd:80:8b:29:3a:f2:0b:55:9e:a4:
                    3f:0a:0b:e4:86:24:3b:98:26:94:e4:fb:1f:9c:d6:
                    11:d3:65:18:45:78:74:20:3b:5e:bf:13:03:72:5b:
                    79:80:4f:b3:b0:a6:20:fb:0b:7f:96:cc:f0:7d:ab:
                    72:cc:8f:0a:91:80:c8:c9:4a:2e:18:97:68:dd:17:
                    34:8d:46:b0:70:5f:97:2c:20:d7:56:f7:fe:10:5e:
                    86:a3:b4:f1:74:81:e1:b4:c5:d0:2d:d1:73:f1:a8:
                    ac:ae:0f:ed:1a:07:b4:35:e2:72:07:7c:76:b0:fd:
                    19:2b:55:36:09:cf:68:89:2e:8d:a5:bc:e7:1c:21:
                    34:7f:3a:87:73:bc:d3:07:02:0d:9f:ce:a9:77:f8:
                    fc:36:5b:5c:86:37:b1:72:fd:0c:9c:32:1c:fb:02:
                    cf:5f:46:71:6a:e6:60:ed:16:6a:87:81:93:00:e4:
                    16:e2:5f:75:e2:65:e9:e7:2f:8d:f8:a0:87:66:db:
                    4a:db:0c:e5:12:2f:40:cf:db:1a:b9:e8:15:26:bd:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0F:0B:5A:81:E9:38:52:3F:15:EB:B4:1E:AB:42:0D:6B:13:9B:65
            X509v3 Authority Key Identifier:
                keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.20.0/22
                IPv6:
                  2a13:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:c2:c3:cb:3b:d5:92:32:1d:56:a6:9d:a8:5d:a0:7e:00:1d:
         19:b7:7b:82:ca:00:2a:be:3c:5d:8f:7a:71:39:db:56:ce:46:
         b1:d7:58:fb:ab:b5:73:3b:18:58:db:87:0c:6b:01:fa:7a:71:
         ca:7b:23:c8:29:9a:e1:78:67:2d:e4:3d:37:e6:52:7e:b5:0c:
         ac:19:6c:f0:79:9d:1a:d8:f4:86:89:d8:8e:94:2d:78:c6:65:
         d8:1f:0c:29:90:b9:10:6e:b8:87:0c:69:70:58:7d:91:01:e0:
         4a:ba:32:c9:2a:9e:ae:9d:e7:6c:a6:9e:89:49:e8:95:1e:e9:
         25:e8:dd:87:da:b9:69:d6:50:be:60:dc:5c:3b:97:7f:35:88:
         fe:a0:d8:78:88:56:60:43:0c:43:7f:b4:8f:86:2d:71:5c:25:
         a2:9a:6b:f6:6e:6c:75:e2:75:f4:2b:61:0b:85:5f:8e:fb:60:
         4a:fd:69:af:a3:9b:a0:a3:7b:fa:08:1f:ba:75:45:30:55:93:
         2c:e7:75:c7:7c:11:67:5e:d8:96:e0:74:8d:59:0b:7a:59:71:
         2b:e6:6f:0b:7c:b8:7f:91:ea:61:38:e2:26:3e:66:c7:85:b8:
         7e:09:4a:ed:4e:b5:1a:17:d0:ab:60:2d:00:24:b9:3d:07:e2:
         57:43:24:76
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoJbpTNPP761mHulG3Bv3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjUwMTAyMTc1MjI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjBmMGI1YTgxZTkzODUyM2YxNWViYjQxZWFiNDIwZDZiMTM5YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UaEc53zE8ooHs9iqKWWloyqwiKk
5SAKZcpxInODrtjtlIBhsmVu0lG1UunBwPMDY72Aiyk68gtVnqQ/CgvkhiQ7mCaU
5PsfnNYR02UYRXh0IDtevxMDclt5gE+zsKYg+wt/lszwfatyzI8KkYDIyUouGJdo
3Rc0jUawcF+XLCDXVvf+EF6Go7TxdIHhtMXQLdFz8aisrg/tGge0NeJyB3x2sP0Z
K1U2Cc9oiS6NpbznHCE0fzqHc7zTBwINn86pd/j8Nltchjexcv0MnDIc+wLPX0Zx
auZg7RZqh4GTAOQW4l914mXp5y+N+KCHZttK2wzlEi9Az9sauegVJr2z7wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDYPC1qB6ThSPxXrtB6rQg1rE5tlMB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvTmc4TFdvSHBPRklfRmV1MEhxdENEV3NUbTJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXPkUMA0E
AgACMAcDBQMqE2LAMA0GCSqGSIb3DQEBCwUAA4IBAQBYwsPLO9WSMh1Wpp2oXaB+
AB0Zt3uCygAqvjxdj3pxOdtWzkax11j7q7VzOxhY24cMawH6enHKeyPIKZrheGct
5D035lJ+tQysGWzweZ0a2PSGidiOlC14xmXYHwwpkLkQbriHDGlwWH2RAeBKujLJ
Kp6unedspp6JSeiVHukl6N2H2rlp1lC+YNxcO5d/NYj+oNh4iFZgQwxDf7SPhi1x
XCWimmv2bmx14nX0K2ELhV+O+2BK/Wmvo5ugo3v6CB+6dUUwVZMs53XHfBFnXtiW
4HSNWQt6WXEr5m8LfLh/kephOOImPmbHhbh+CUrtTrUaF9CrYC0AJLk9B+JXQyR2
-----END CERTIFICATE-----