Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/u0_LZ76D2F3XStNCEf54lraiUQU.roa
File:                     u0_LZ76D2F3XStNCEf54lraiUQU.roa (raw, json)
Hash identifier:          /C51Siex3g0cVLH4AgN6DpLu4zU2kh6wmSzB607hxrY=
Subject key identifier:   BB:4F:CB:67:BE:83:D8:5D:D7:4A:D3:42:11:FE:78:96:B6:A2:51:05
Certificate issuer:       /CN=57abfd4246bc5ba6037ad5468668097aa6f51edf
Certificate serial:       01F725AC
Authority key identifier: 57:AB:FD:42:46:BC:5B:A6:03:7A:D5:46:86:68:09:7A:A6:F5:1E:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V6v9Qka8W6YDetVGhmgJeqb1Ht8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/u0_LZ76D2F3XStNCEf54lraiUQU.roa
Signing time:             Sat 01 Jan 2022 03:52:48 +0000
ROA not before:           Sat 01 Jan 2022 03:52:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31400
IP address blocks:        5.180.64.0/24 maxlen: 24
                          5.180.64.0/22 maxlen: 22
                          5.180.67.0/24 maxlen: 24
                          5.180.66.0/24 maxlen: 24
                          5.180.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32974252 (0x1f725ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57abfd4246bc5ba6037ad5468668097aa6f51edf
        Validity
            Not Before: Jan  1 03:52:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb4fcb67be83d85dd74ad34211fe7896b6a25105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b5:83:64:00:2b:58:7a:1b:47:ab:4e:29:14:
                    73:e0:c9:ae:8b:23:e5:3d:1a:a1:db:8d:2e:64:15:
                    ca:d4:80:af:66:b9:70:d3:90:c5:34:e7:3b:d0:73:
                    b0:65:bc:7c:34:48:b0:7e:0c:27:b4:93:67:01:2c:
                    0a:88:9a:eb:5b:8e:96:cf:e9:6c:64:5b:9e:58:f2:
                    06:3e:68:8f:e4:a5:6c:5b:0d:c8:30:06:49:52:27:
                    33:00:fb:4c:df:df:2a:4a:6f:ae:d3:54:69:f7:4f:
                    82:c3:03:62:b9:ab:d6:df:fd:23:df:76:39:8c:bb:
                    2b:11:a6:43:11:14:a4:f4:45:d6:d7:49:ae:2a:d9:
                    5d:76:be:1f:02:eb:be:e9:53:c3:a2:40:bc:4b:e0:
                    c8:f8:dd:40:f6:43:ae:06:3d:05:4a:d2:ae:6a:c4:
                    dc:96:68:9c:fc:5e:86:6e:d9:19:2b:3b:cd:0e:e7:
                    a4:38:99:ae:77:6a:50:ea:d6:4c:03:10:3d:f3:30:
                    33:1e:98:52:ae:24:a7:a1:a1:58:f6:54:d9:29:84:
                    f7:a4:35:6a:56:26:67:a4:27:55:21:1b:fa:aa:1e:
                    27:ab:7a:68:ca:6a:18:54:9f:aa:e7:f8:e4:53:45:
                    4c:aa:0a:bb:fe:db:b4:d2:2e:0f:c0:26:09:ce:dd:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4F:CB:67:BE:83:D8:5D:D7:4A:D3:42:11:FE:78:96:B6:A2:51:05
            X509v3 Authority Key Identifier:
                keyid:57:AB:FD:42:46:BC:5B:A6:03:7A:D5:46:86:68:09:7A:A6:F5:1E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V6v9Qka8W6YDetVGhmgJeqb1Ht8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/u0_LZ76D2F3XStNCEf54lraiUQU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/V6v9Qka8W6YDetVGhmgJeqb1Ht8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e4:d1:ee:39:8d:0c:45:b2:a9:ed:83:4b:00:d4:35:e3:08:
         7e:14:43:0c:77:db:4a:ad:b7:99:84:b6:df:ac:cd:d4:62:f5:
         db:93:9d:83:0d:b2:89:20:f2:f0:40:3c:06:2d:5b:a9:26:10:
         cb:3d:39:cd:31:7d:ad:59:83:9a:57:cd:f8:fe:6a:86:00:a3:
         73:ce:be:d3:e1:db:eb:b6:fa:7a:ff:72:83:92:0d:8b:cd:16:
         92:07:ef:f2:70:9b:3e:36:ba:30:c9:3b:fd:5b:8c:ff:9d:b2:
         ae:53:1d:3c:98:7c:6b:d4:90:6a:ec:e8:db:bd:17:7a:d7:94:
         79:3c:78:cd:a5:3c:c4:17:5d:78:0d:10:7d:75:23:1d:25:45:
         9b:fc:93:3f:de:82:e3:05:96:9c:bf:ea:75:45:7e:46:69:c9:
         c6:c5:07:0c:2d:04:d7:84:78:9b:80:7f:29:49:f3:c0:87:06:
         fa:2b:a7:63:66:a7:eb:e3:da:24:35:04:19:ca:7d:bd:16:85:
         cf:7a:18:62:77:32:7c:dc:26:51:f6:64:f2:b7:5d:70:a1:51:
         b3:bf:e5:8e:6e:61:1c:a6:c1:79:40:68:9c:e3:8c:96:eb:ff:
         65:7f:8f:ec:6b:f6:7e:33:07:56:22:d4:46:97:16:1b:05:bb:
         f7:19:15:98
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAfclrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
N2FiZmQ0MjQ2YmM1YmE2MDM3YWQ1NDY4NjY4MDk3YWE2ZjUxZWRmMB4XDTIyMDEw
MTAzNTI0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmI0ZmNiNjdiZTgz
ZDg1ZGQ3NGFkMzQyMTFmZTc4OTZiNmEyNTEwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPW1g2QAK1h6G0erTikUc+DJrosj5T0aoduNLmQVytSAr2a5
cNOQxTTnO9BzsGW8fDRIsH4MJ7STZwEsCoia61uOls/pbGRbnljyBj5oj+SlbFsN
yDAGSVInMwD7TN/fKkpvrtNUafdPgsMDYrmr1t/9I992OYy7KxGmQxEUpPRF1tdJ
rirZXXa+HwLrvulTw6JAvEvgyPjdQPZDrgY9BUrSrmrE3JZonPxehm7ZGSs7zQ7n
pDiZrndqUOrWTAMQPfMwMx6YUq4kp6GhWPZU2SmE96Q1alYmZ6QnVSEb+qoeJ6t6
aMpqGFSfquf45FNFTKoKu/7btNIuD8AmCc7d8eECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS7T8tnvoPYXddK00IR/niWtqJRBTAfBgNVHSMEGDAWgBRXq/1CRrxbpgN6
1UaGaAl6pvUe3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Y2djlRa2E4VzZZRGV0VkdobWdKZXFiMUh0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvNjE0NDI0LTEzZjMtNGE4Yy1iYjU3LTQyOGY4YzRiOTc1My8x
L3UwX0xaNzZEMkYzWFN0TkNFZjU0bHJhaVVRVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
NjE0NDI0LTEzZjMtNGE4Yy1iYjU3LTQyOGY4YzRiOTc1My8xL1Y2djlRa2E4VzZZ
RGV0VkdobWdKZXFiMUh0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW0QDANBgkqhkiG9w0BAQsFAAOC
AQEAhuTR7jmNDEWyqe2DSwDUNeMIfhRDDHfbSq23mYS236zN1GL125Odgw2yiSDy
8EA8Bi1bqSYQyz05zTF9rVmDmlfN+P5qhgCjc86+0+Hb67b6ev9yg5INi80Wkgfv
8nCbPja6MMk7/VuM/52yrlMdPJh8a9SQauzo270XeteUeTx4zaU8xBddeA0QfXUj
HSVFm/yTP96C4wWWnL/qdUV+RmnJxsUHDC0E14R4m4B/KUnzwIcG+iunY2an6+Pa
JDUEGcp9vRaFz3oYYncyfNwmUfZk8rddcKFRs7/ljm5hHKbBeUBonOOMluv/ZX+P
7Gv2fjMHViLURpcWGwW79xkVmA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net