Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/pvs7WGwQaGNlaZ2r73LjTBv4TQU.roa
File:                     pvs7WGwQaGNlaZ2r73LjTBv4TQU.roa (raw, json)
Hash identifier:          odcVOFEzflQhmhbJaMSNmANgZ9utXOwVL0OFYI5u7G0=
Subject key identifier:   A6:FB:3B:58:6C:10:68:63:65:69:9D:AB:EF:72:E3:4C:1B:F8:4D:05
Certificate issuer:       /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial:       A07A
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/pvs7WGwQaGNlaZ2r73LjTBv4TQU.roa
Signing time:             Wed 02 Mar 2022 06:51:16 +0000
ROA not before:           Wed 02 Mar 2022 06:51:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62206
IP address blocks:        91.241.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41082 (0xa07a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
        Validity
            Not Before: Mar  2 06:51:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6fb3b586c10686365699dabef72e34c1bf84d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:5c:79:28:55:a0:21:b6:ba:48:ca:59:6c:
                    bd:e6:ba:4b:1f:27:61:f9:f2:5b:4f:b1:ef:02:65:
                    9b:78:14:33:ce:c7:85:36:09:79:68:6e:b1:48:48:
                    f6:5a:8f:2d:b1:a5:92:a8:69:b8:fb:3e:ae:0f:b6:
                    49:63:32:98:18:16:43:6b:56:23:35:c1:b0:77:95:
                    70:31:14:b9:63:9e:c7:7b:20:e3:b3:0e:00:6d:e7:
                    6b:19:14:85:15:af:6a:73:af:6d:3f:99:d2:2c:d4:
                    01:80:8b:94:55:d0:1a:25:55:85:f4:31:53:c9:ff:
                    11:98:3f:06:e9:33:7a:21:e4:de:3c:a2:33:22:b5:
                    76:b5:71:48:0c:e8:32:8d:e1:2e:2b:43:48:8b:d6:
                    26:2c:ef:81:21:5a:c6:69:a5:36:3b:ba:df:64:3a:
                    64:d3:26:d4:39:ba:a3:a3:0e:63:e2:ab:38:7e:e6:
                    ef:d1:2e:4d:fc:e5:58:4c:c7:c1:a1:ae:02:a5:d5:
                    ba:9e:f4:2b:1c:0b:10:c5:46:a2:cd:24:5f:96:fa:
                    9f:44:37:62:79:8d:30:ea:d3:c0:4e:b7:de:87:3a:
                    e3:53:30:26:d2:86:ed:ef:7f:5c:26:0c:2c:b3:32:
                    db:19:ae:2b:13:f3:a7:0e:a0:20:4f:b8:4a:0d:43:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FB:3B:58:6C:10:68:63:65:69:9D:AB:EF:72:E3:4C:1B:F8:4D:05
            X509v3 Authority Key Identifier:
                keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/pvs7WGwQaGNlaZ2r73LjTBv4TQU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:f9:0d:9c:9f:6a:c6:be:8d:e3:40:dd:c1:d1:77:00:04:
         ac:9c:c0:8b:7a:e0:59:92:f9:f3:ce:a2:ab:8e:7d:b2:50:5a:
         0f:b9:74:69:38:d5:2d:cd:39:36:96:ad:4d:e8:dc:cb:08:73:
         21:98:d4:e8:3b:f9:8a:8f:9c:bf:f8:94:aa:68:5f:02:54:e8:
         15:d6:5a:45:f9:9a:78:e3:9a:00:2e:32:ce:07:0e:29:c7:20:
         02:89:ff:a2:04:db:cc:3b:19:e4:44:4d:51:32:c7:00:ea:36:
         30:a0:d0:ca:13:01:6f:80:55:c1:e0:80:1f:c6:ea:d5:c1:8a:
         55:32:29:66:38:5f:62:ba:0a:ce:8b:55:19:9d:17:fe:02:14:
         47:40:27:2b:24:0e:36:cf:78:a0:dc:10:e7:45:7e:f7:74:8b:
         64:5d:88:84:5c:a6:fb:4d:10:93:4c:e1:b2:52:75:c2:da:4a:
         48:51:ab:02:4e:0a:06:bd:ba:cf:b6:78:b8:16:42:38:91:8e:
         ac:e8:55:cb:2d:ba:7c:cd:3b:b8:3a:69:66:98:db:a4:cd:46:
         0d:95:bb:7b:7b:15:e5:b9:53:c6:c1:41:25:4d:15:28:0f:27:
         83:ef:01:eb:7a:5e:45:58:ef:09:d6:08:93:f0:13:e8:3f:fa:
         ff:38:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net