Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/qB4VLKRvmoskb5SLOG6_IFaDl3M.roa
File:                     qB4VLKRvmoskb5SLOG6_IFaDl3M.roa (raw, json)
Hash identifier:          FRxa0SyQYPI3/wHMfhFLxgTjJzmTxlWm6nI6GTSj9Uc=
Subject key identifier:   A8:1E:15:2C:A4:6F:9A:8B:24:6F:94:8B:38:6E:BF:20:56:83:97:73
Certificate issuer:       /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial:       D57F95
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/qB4VLKRvmoskb5SLOG6_IFaDl3M.roa
Signing time:             Thu 03 Feb 2022 08:15:16 +0000
ROA not before:           Thu 03 Feb 2022 08:15:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        212.52.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13991829 (0xd57f95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
        Validity
            Not Before: Feb  3 08:15:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a81e152ca46f9a8b246f948b386ebf2056839773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:86:af:48:12:b9:9e:fa:be:92:7f:27:5f:
                    4a:4c:44:b1:d3:a9:3a:23:15:f3:a4:16:98:1e:c7:
                    d6:91:d4:02:43:81:22:6d:33:de:72:f1:2d:ee:6a:
                    63:23:0a:76:e0:93:cd:03:10:40:ba:92:99:99:d2:
                    8a:7e:f6:47:dd:1d:4c:b2:64:b0:44:74:69:07:67:
                    da:a6:8e:f7:72:66:26:e3:13:da:35:0d:79:96:1b:
                    29:0c:e5:3f:7a:d0:f5:04:88:bb:fc:c3:56:8a:90:
                    cf:88:73:c0:a8:01:b0:17:26:c2:09:16:4c:35:ae:
                    25:66:c3:55:5d:07:39:85:49:d8:cb:af:7a:9f:75:
                    12:ef:9b:00:0d:e4:a7:cd:91:62:bd:5d:a1:34:74:
                    eb:5e:e1:6e:8b:43:45:39:70:9c:00:74:91:9c:cb:
                    4e:77:de:8f:14:e9:be:c5:89:24:bd:ef:f0:6f:8d:
                    eb:98:d9:ac:eb:fd:ba:84:95:50:ee:2d:11:3c:db:
                    72:0f:63:a6:f6:cb:95:e0:d0:4a:49:d3:51:73:fc:
                    ed:02:5b:87:2e:f2:d6:28:ad:c3:c4:f4:dd:b5:8a:
                    38:a2:09:0e:fc:91:93:a8:7a:eb:1b:5f:b1:7d:5b:
                    a2:de:b3:f6:fe:f3:6d:7a:10:80:0d:f1:44:ae:d4:
                    9f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1E:15:2C:A4:6F:9A:8B:24:6F:94:8B:38:6E:BF:20:56:83:97:73
            X509v3 Authority Key Identifier:
                keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/qB4VLKRvmoskb5SLOG6_IFaDl3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:6c:32:ac:01:f6:25:3e:50:7a:14:b4:90:6b:44:42:20:
         9e:a0:c4:93:56:d3:c9:6e:e0:ac:2d:b5:8d:1d:4c:21:67:e2:
         20:3e:ab:f4:49:0e:f1:02:ca:16:a8:c6:99:99:b1:2d:0e:28:
         56:e9:5e:29:e4:89:63:39:81:f1:1d:74:1d:8c:c8:52:e7:57:
         0e:70:3b:42:27:76:e5:29:dc:0a:33:36:f7:7c:4c:b7:c5:78:
         52:cd:c4:32:c4:6c:05:8a:47:6a:fe:ff:ee:c0:09:c0:c5:d4:
         0a:14:52:a1:a8:fc:5e:3c:21:b5:14:dd:7f:03:69:82:00:de:
         e5:9c:de:c1:f1:af:29:f6:c0:73:9f:56:ac:90:c9:16:46:e0:
         9f:9c:fc:c4:84:9f:a2:7b:d9:9c:76:5f:da:8e:a9:db:e0:da:
         67:84:dc:57:a4:70:47:5b:e6:83:95:63:4f:df:32:b7:b6:72:
         d3:87:6b:5c:09:89:fb:91:32:12:02:b7:7c:24:57:14:e1:12:
         be:58:70:82:6e:fe:4e:b8:e1:83:f3:bd:04:e9:f0:89:7d:db:
         e2:d7:d8:b6:06:82:b5:66:8c:f9:b6:ce:2d:73:63:69:47:67:
         77:c3:70:12:18:5d:4a:81:e4:3c:28:4c:01:a2:5a:97:83:b4:
         a7:ad:9e:ac
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANV/lTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjFkZWIxM2EzZDkzYjdkZjY2YWJlZDNjNzk4NzcxN2FjZWIzY2M5MB4XDTIyMDIw
MzA4MTUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTgxZTE1MmNhNDZm
OWE4YjI0NmY5NDhiMzg2ZWJmMjA1NjgzOTc3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDKhq9IErme+r6SfydfSkxEsdOpOiMV86QWmB7H1pHUAkOB
Im0z3nLxLe5qYyMKduCTzQMQQLqSmZnSin72R90dTLJksER0aQdn2qaO93JmJuMT
2jUNeZYbKQzlP3rQ9QSIu/zDVoqQz4hzwKgBsBcmwgkWTDWuJWbDVV0HOYVJ2Muv
ep91Eu+bAA3kp82RYr1doTR0617hbotDRTlwnAB0kZzLTnfejxTpvsWJJL3v8G+N
65jZrOv9uoSVUO4tETzbcg9jpvbLleDQSknTUXP87QJbhy7y1iitw8T03bWKOKIJ
DvyRk6h66xtfsX1bot6z9v7zbXoQgA3xRK7Un98CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSoHhUspG+aiyRvlIs4br8gVoOXczAfBgNVHSMEGDAWgBRyHesTo9k7ffZq
vtPHmHcXrOs8yTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NoM3JFNlBaTzMzMmFyN1R4NWgzRjZ6clBNay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDYvYWEzN2I2LWJmMTYtNDgzNi1iYjljLTkyMDhiMGUyZmExMC8x
L3FCNFZMS1J2bW9za2I1U0xPRzZfSUZhRGwzTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYv
YWEzN2I2LWJmMTYtNDgzNi1iYjljLTkyMDhiMGUyZmExMC8xL2NoM3JFNlBaTzMz
MmFyN1R4NWgzRjZ6clBNay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQ0AjANBgkqhkiG9w0BAQsFAAOC
AQEAHxpsMqwB9iU+UHoUtJBrREIgnqDEk1bTyW7grC21jR1MIWfiID6r9EkO8QLK
FqjGmZmxLQ4oVuleKeSJYzmB8R10HYzIUudXDnA7Qid25SncCjM293xMt8V4Us3E
MsRsBYpHav7/7sAJwMXUChRSoaj8XjwhtRTdfwNpggDe5ZzewfGvKfbAc59WrJDJ
Fkbgn5z8xISfonvZnHZf2o6p2+DaZ4TcV6RwR1vmg5VjT98yt7Zy04drXAmJ+5Ey
EgK3fCRXFOESvlhwgm7+Trjhg/O9BOnwiX3b4tfYtgaCtWaM+bbOLXNjaUdnd8Nw
EhhdSoHkPChMAaJal4O0p62erA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net