Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/LC-RF6549Vy6xY2S3E33A8u1uh8.roa
File:                     LC-RF6549Vy6xY2S3E33A8u1uh8.roa (raw, json)
Hash identifier:          Os6IY/Jtfxw81t0+InH3LNv67doSRz05UZWZr0wPo+w=
Subject key identifier:   2C:2F:91:17:AE:78:F5:5C:BA:C5:8D:92:DC:4D:F7:03:CB:B5:BA:1F
Certificate issuer:       /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial:       0192011CAA6F0BF99C59A81480D695EE3351
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/LC-RF6549Vy6xY2S3E33A8u1uh8.roa
Signing time:             Tue 17 Sep 2024 17:51:48 +0000
ROA not before:           Tue 17 Sep 2024 17:51:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203248
IP address blocks:        185.163.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:01:1c:aa:6f:0b:f9:9c:59:a8:14:80:d6:95:ee:33:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
        Validity
            Not Before: Sep 17 17:51:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2c2f9117ae78f55cbac58d92dc4df703cbb5ba1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:d4:3b:20:a4:37:2e:fa:1a:9f:2c:f0:18:
                    fc:94:97:66:7f:83:51:c3:a1:b2:1d:fb:fd:78:f0:
                    da:e2:cf:a7:cb:d2:5d:c3:4a:0a:c3:a4:d9:0c:21:
                    02:70:37:19:d3:ec:21:41:36:3e:5c:b3:27:22:e2:
                    cb:9c:17:97:17:c5:60:34:88:6e:7d:e2:51:2e:50:
                    b5:f1:9b:17:da:fe:09:44:af:0c:6e:22:99:a8:52:
                    72:4c:de:1f:05:a6:83:e4:9f:bf:55:d8:50:e0:9a:
                    84:05:21:2d:90:58:99:42:5c:a0:f3:24:ef:b2:ef:
                    6b:f2:c4:f3:59:aa:06:2a:ac:dc:e2:68:b4:87:52:
                    7c:da:b6:9c:af:67:40:f3:27:6e:4f:da:f0:e1:c1:
                    13:72:5c:38:5b:f8:dc:b0:5f:82:3d:e3:c8:bc:bd:
                    48:81:6e:e3:2d:5c:12:f1:7c:29:e6:77:17:59:82:
                    df:27:c1:5e:44:34:c1:c7:06:46:21:15:29:7c:58:
                    31:8d:fe:c5:3b:3b:a1:6d:6d:22:6c:14:cd:0a:df:
                    40:bb:59:a4:2c:b7:fb:95:b3:da:4b:c2:4f:1b:10:
                    00:93:8e:09:91:65:7a:4d:33:6a:4b:e1:82:8f:7b:
                    95:31:86:58:a6:77:22:42:0f:cb:d1:1d:12:60:68:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2F:91:17:AE:78:F5:5C:BA:C5:8D:92:DC:4D:F7:03:CB:B5:BA:1F
            X509v3 Authority Key Identifier:
                keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/LC-RF6549Vy6xY2S3E33A8u1uh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:3b:ea:78:69:5f:8a:b2:1e:19:10:bb:e8:89:8e:ca:70:
         c8:c8:4b:f3:fb:8b:50:69:c2:55:21:14:e9:09:b4:32:ee:66:
         f6:cb:8c:d1:68:4f:6b:8c:0b:a5:80:4d:d4:bf:5b:ff:38:b2:
         62:99:26:9f:98:05:e1:87:61:4e:b6:cc:bb:51:9f:d4:d2:49:
         fa:9c:de:70:3c:48:37:2e:7b:34:2f:5d:c9:e6:b7:bf:8c:65:
         87:cd:5a:0c:b6:39:be:3c:f3:13:f9:9d:fe:82:31:ba:0a:d0:
         1c:ce:17:98:0a:e2:d4:ff:bc:2e:94:2e:ac:3c:f3:7a:02:4e:
         97:07:53:00:7b:05:a2:76:cc:db:a3:86:99:2f:79:26:ae:28:
         59:11:0b:76:ef:65:70:2b:14:4a:db:9f:7d:35:c5:d2:7a:ae:
         7c:9a:31:5b:73:1b:3c:91:85:4b:4b:d9:bc:80:ca:5c:9b:25:
         1d:59:6f:a0:e0:1a:cf:32:3d:5c:30:38:5d:61:8b:e0:4f:14:
         9d:fe:55:51:8c:35:dd:5d:d2:90:ce:71:ea:6d:92:4c:48:ea:
         8a:b4:c1:b3:c9:46:3d:24:01:37:00:95:17:6e:d6:c8:0b:4f:
         fe:7f:35:bd:3e:8c:67:67:9a:f6:d0:81:e7:24:a0:f4:92:24:
         26:6d:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:02 2024 by rpki-client on console.sobornost.net