Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/OZAWZ89AoJLVwlyDt2iQ2MF3tCM.roa
File:                     OZAWZ89AoJLVwlyDt2iQ2MF3tCM.roa (raw, json)
Hash identifier:          V4CxAJTb6ZGTfmGzrbob2HfcqOqwnnDOZ/nZYM0y1pw=
Subject key identifier:   39:90:16:67:CF:40:A0:92:D5:C2:5C:83:B7:68:90:D8:C1:77:B4:23
Certificate issuer:       /CN=281597558437c58185d4c2fe71b9d52779d800d6
Certificate serial:       FDA013
Authority key identifier: 28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/OZAWZ89AoJLVwlyDt2iQ2MF3tCM.roa
Signing time:             Mon 07 Mar 2022 17:31:20 +0000
ROA not before:           Mon 07 Mar 2022 17:31:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        146.19.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16621587 (0xfda013)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281597558437c58185d4c2fe71b9d52779d800d6
        Validity
            Not Before: Mar  7 17:31:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39901667cf40a092d5c25c83b76890d8c177b423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:ac:05:05:a9:54:de:42:5c:f8:ba:9c:b4:
                    15:3b:de:51:5f:e8:80:21:be:90:17:e7:8b:53:4f:
                    d1:de:14:d9:2b:04:65:91:25:93:19:78:d0:71:62:
                    49:90:c0:64:42:b6:54:ef:08:54:df:b6:75:cc:d6:
                    c0:72:4e:b4:43:15:4f:b5:05:07:65:26:95:c0:29:
                    34:8d:81:b4:53:12:9a:dd:d8:22:78:86:56:df:4b:
                    ce:ea:08:15:3f:45:fa:cb:8d:8c:80:9d:ae:9a:85:
                    81:6d:66:98:61:a5:63:31:a3:c0:db:fe:4d:2c:af:
                    23:f1:dc:2a:a0:0a:e2:ce:bd:8b:8c:46:7a:f7:a6:
                    36:10:8f:88:05:8c:a6:d7:fa:ab:c0:ea:e7:ee:61:
                    3f:bc:17:e3:99:fb:66:9d:23:ca:e8:71:1f:b9:af:
                    74:e6:56:a4:af:05:4a:ce:d1:1c:81:e9:61:63:46:
                    63:c4:3b:27:32:95:97:3a:9c:2b:6a:a1:30:88:02:
                    b6:83:13:87:e0:b3:46:01:74:4f:23:0e:f0:e9:73:
                    3c:02:80:1c:f3:10:1b:64:48:38:4e:b6:7a:d1:82:
                    3a:79:0a:5e:ad:97:25:5b:95:71:f6:62:dc:0e:a2:
                    e8:65:c2:39:36:7a:27:b9:f2:e9:96:1d:aa:f0:6f:
                    33:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:90:16:67:CF:40:A0:92:D5:C2:5C:83:B7:68:90:D8:C1:77:B4:23
            X509v3 Authority Key Identifier:
                keyid:28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/OZAWZ89AoJLVwlyDt2iQ2MF3tCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:09:d4:47:34:2c:04:ee:78:8d:28:b2:f9:78:4d:71:e8:
         ff:58:e4:28:ae:eb:1c:c7:45:9c:b5:b7:90:f3:88:69:bb:7c:
         67:16:f2:67:4c:a5:01:25:b3:65:b6:a4:56:04:ee:90:fe:72:
         27:91:9a:f4:b5:0c:28:cf:00:67:ba:9e:0e:93:a5:b3:12:cd:
         be:6e:f4:f7:10:89:5e:32:28:bd:6c:e4:04:8d:04:06:5e:8a:
         b5:dc:5d:fe:27:ba:df:f4:46:86:cf:1b:3e:12:61:53:61:fd:
         6a:bf:0e:a3:43:6b:60:d5:ab:cc:0c:e3:5c:91:03:fe:4d:18:
         77:9f:c6:34:ee:0e:70:7c:f2:7e:bd:dc:6f:3f:e5:e2:4d:75:
         a2:b6:45:c8:b4:8c:6b:4b:94:9b:9a:08:b8:11:c0:74:6c:5a:
         0a:64:65:00:84:47:e8:74:d3:12:e1:6a:b8:1c:2a:c8:e4:6d:
         bb:46:71:9f:87:34:2d:97:29:e6:18:ab:86:96:37:05:99:cf:
         2f:ab:67:c7:f0:ea:b3:e7:41:d9:3e:5b:90:14:e1:4c:de:79:
         8f:52:0a:b5:87:c0:61:e5:eb:fe:8e:dd:d8:72:73:04:73:6e:
         67:84:a3:d4:70:fe:c6:ca:a9:b1:fa:6d:80:97:63:30:a0:a5:
         2c:15:89:d0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAP2gEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODE1OTc1NTg0MzdjNTgxODVkNGMyZmU3MWI5ZDUyNzc5ZDgwMGQ2MB4XDTIyMDMw
NzE3MzEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzk5MDE2NjdjZjQw
YTA5MmQ1YzI1YzgzYjc2ODkwZDhjMTc3YjQyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdirAUFqVTeQlz4upy0FTveUV/ogCG+kBfni1NP0d4U2SsE
ZZElkxl40HFiSZDAZEK2VO8IVN+2dczWwHJOtEMVT7UFB2UmlcApNI2BtFMSmt3Y
IniGVt9LzuoIFT9F+suNjICdrpqFgW1mmGGlYzGjwNv+TSyvI/HcKqAK4s69i4xG
evemNhCPiAWMptf6q8Dq5+5hP7wX45n7Zp0jyuhxH7mvdOZWpK8FSs7RHIHpYWNG
Y8Q7JzKVlzqcK2qhMIgCtoMTh+CzRgF0TyMO8OlzPAKAHPMQG2RIOE62etGCOnkK
Xq2XJVuVcfZi3A6i6GXCOTZ6J7ny6ZYdqvBvM40CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ5kBZnz0CgktXCXIO3aJDYwXe0IzAfBgNVHSMEGDAWgBQoFZdVhDfFgYXU
wv5xudUnedgA1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tCV1hWWVEzeFlHRjFNTC1jYm5WSjNuWUFOWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvZjk1YmI0LTVjMzEtNGEzYy04YjNjLWIxNzRhOTQxNTVlZC8x
L09aQVdaODlBb0pMVndseUR0MmlRMk1GM3RDTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
Zjk1YmI0LTVjMzEtNGEzYy04YjNjLWIxNzRhOTQxNTVlZC8xL0tCV1hWWVEzeFlH
RjFNTC1jYm5WSjNuWUFOWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT4zANBgkqhkiG9w0BAQsFAAOC
AQEAfyMJ1Ec0LATueI0osvl4TXHo/1jkKK7rHMdFnLW3kPOIabt8ZxbyZ0ylASWz
ZbakVgTukP5yJ5Ga9LUMKM8AZ7qeDpOlsxLNvm709xCJXjIovWzkBI0EBl6Ktdxd
/ie63/RGhs8bPhJhU2H9ar8Oo0NrYNWrzAzjXJED/k0Yd5/GNO4OcHzyfr3cbz/l
4k11orZFyLSMa0uUm5oIuBHAdGxaCmRlAIRH6HTTEuFquBwqyORtu0Zxn4c0LZcp
5hirhpY3BZnPL6tnx/Dqs+dB2T5bkBThTN55j1IKtYfAYeXr/o7d2HJzBHNuZ4Sj
1HD+xsqpsfptgJdjMKClLBWJ0A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net