Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/w9Sn6rbavASaHAVfJBwdFpfCzuU.roa
File:                     w9Sn6rbavASaHAVfJBwdFpfCzuU.roa (raw, json)
Hash identifier:          cF+Gz0DP+0d8Buz/AuwswZghrZtRtas/C/bOAdZT7p8=
Subject key identifier:   C3:D4:A7:EA:B6:DA:BC:04:9A:1C:05:5F:24:1C:1D:16:97:C2:CE:E5
Certificate issuer:       /CN=0cc13f7ded9eb97c179066624a08922b13ad0fcc
Certificate serial:       07218A52
Authority key identifier: 0C:C1:3F:7D:ED:9E:B9:7C:17:90:66:62:4A:08:92:2B:13:AD:0F:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DME_fe2euXwXkGZiSgiSKxOtD8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/w9Sn6rbavASaHAVfJBwdFpfCzuU.roa
Signing time:             Sat 01 Jan 2022 06:59:25 +0000
ROA not before:           Sat 01 Jan 2022 06:59:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44473
IP address blocks:        91.194.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119638610 (0x7218a52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc13f7ded9eb97c179066624a08922b13ad0fcc
        Validity
            Not Before: Jan  1 06:59:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3d4a7eab6dabc049a1c055f241c1d1697c2cee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:1c:5a:5e:6d:93:9c:10:0b:8c:9a:60:1b:
                    d8:45:04:4b:ef:f1:ae:af:54:97:27:09:18:f5:07:
                    28:e0:5a:0a:84:59:fb:4c:2a:40:31:3c:39:f9:18:
                    a8:98:07:71:48:95:78:06:63:64:71:7a:a2:a6:b5:
                    c1:21:fc:a9:e0:65:e5:3b:b7:06:89:6f:bd:3c:7c:
                    6e:73:30:dd:56:6a:33:fe:da:26:ca:ee:16:08:48:
                    0b:85:d6:ad:73:0f:52:92:98:7a:c6:ee:03:94:b7:
                    a6:01:15:ad:e4:b1:96:42:5e:df:57:2d:9c:c4:66:
                    0d:3d:fe:8c:c8:ba:a8:8c:a3:3e:8e:44:29:4f:91:
                    51:75:a7:d1:ac:64:06:38:e4:fd:94:f5:ac:23:88:
                    c6:8f:20:74:26:4b:83:0b:cd:be:d7:e0:6f:21:55:
                    4e:b3:9c:9f:56:02:39:a0:0c:a9:5a:ad:fc:24:89:
                    ec:b6:2d:7f:96:dd:31:7e:e8:e2:ed:5c:da:16:e5:
                    46:d6:42:d5:c9:62:1c:3c:1b:23:ec:6e:63:d3:e4:
                    fd:0f:05:d2:1b:b0:43:03:ba:cf:1b:01:82:aa:70:
                    2b:2f:da:1e:4b:91:86:6d:0f:7a:69:54:35:53:9d:
                    63:e6:f1:51:78:6e:43:9a:5a:68:6e:24:d1:b1:37:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D4:A7:EA:B6:DA:BC:04:9A:1C:05:5F:24:1C:1D:16:97:C2:CE:E5
            X509v3 Authority Key Identifier:
                keyid:0C:C1:3F:7D:ED:9E:B9:7C:17:90:66:62:4A:08:92:2B:13:AD:0F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DME_fe2euXwXkGZiSgiSKxOtD8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/w9Sn6rbavASaHAVfJBwdFpfCzuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e44a3e-207b-4f0c-ab04-f3056901f73f/1/DME_fe2euXwXkGZiSgiSKxOtD8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:00:69:43:d1:52:f2:f7:db:95:e7:1b:10:45:9b:ba:ed:
         a4:7d:7a:1e:7c:cf:9b:d4:15:8d:b7:20:bf:e4:bf:94:d9:d9:
         fc:5b:a1:42:9d:19:98:21:1d:5b:3d:f4:be:22:44:91:1f:2b:
         c6:f9:27:e6:74:d7:8f:84:91:84:6e:bd:ae:c8:2d:17:72:3e:
         51:c9:6d:e3:5f:37:08:53:86:14:1f:b4:2a:ad:38:81:b8:c1:
         36:61:c6:76:d3:82:12:9d:2d:84:8a:92:da:a6:89:76:05:75:
         71:c0:03:8f:4c:39:97:98:4e:f7:af:15:66:6f:e9:49:71:fe:
         37:16:e3:19:f5:1b:4d:04:40:65:2e:93:fa:65:f2:2b:a0:62:
         89:05:c6:73:88:36:f8:12:09:45:e3:b1:98:01:d2:9d:35:f0:
         db:c8:86:34:a6:7c:b2:96:e8:41:dd:06:d7:79:58:48:99:95:
         69:f6:72:5e:03:0c:41:d6:69:81:51:c2:84:6d:0b:be:e6:0e:
         06:11:7f:6f:4e:3c:af:96:a1:ad:4f:23:55:23:af:0f:4e:70:
         24:29:5a:6d:4e:ec:60:9c:e8:a6:a5:5b:ef:38:1a:c5:bd:6c:
         93:6f:d2:d5:58:48:4f:07:09:b2:75:c5:98:94:a1:7f:85:1a:
         76:21:2c:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEByGKUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
Y2MxM2Y3ZGVkOWViOTdjMTc5MDY2NjI0YTA4OTIyYjEzYWQwZmNjMB4XDTIyMDEw
MTA2NTkyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNkNGE3ZWFiNmRh
YmMwNDlhMWMwNTVmMjQxYzFkMTY5N2MyY2VlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgCHFpebZOcEAuMmmAb2EUES+/xrq9UlycJGPUHKOBaCoRZ
+0wqQDE8OfkYqJgHcUiVeAZjZHF6oqa1wSH8qeBl5Tu3BolvvTx8bnMw3VZqM/7a
JsruFghIC4XWrXMPUpKYesbuA5S3pgEVreSxlkJe31ctnMRmDT3+jMi6qIyjPo5E
KU+RUXWn0axkBjjk/ZT1rCOIxo8gdCZLgwvNvtfgbyFVTrOcn1YCOaAMqVqt/CSJ
7LYtf5bdMX7o4u1c2hblRtZC1cliHDwbI+xuY9Pk/Q8F0huwQwO6zxsBgqpwKy/a
HkuRhm0PemlUNVOdY+bxUXhuQ5paaG4k0bE3vwsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTD1Kfqttq8BJocBV8kHB0Wl8LO5TAfBgNVHSMEGDAWgBQMwT997Z65fBeQ
ZmJKCJIrE60PzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RNRV9mZTJldVh3WGtHWmlTZ2lTS3hPdEQ4dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvZTQ0YTNlLTIwN2ItNGYwYy1hYjA0LWYzMDU2OTAxZjczZi8x
L3c5U242cmJhdkFTYUhBVmZKQndkRnBmQ3p1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
ZTQ0YTNlLTIwN2ItNGYwYy1hYjA0LWYzMDU2OTAxZjczZi8xL0RNRV9mZTJldVh3
WGtHWmlTZ2lTS3hPdEQ4dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvCjjANBgkqhkiG9w0BAQsFAAOC
AQEATDEAaUPRUvL325XnGxBFm7rtpH16HnzPm9QVjbcgv+S/lNnZ/FuhQp0ZmCEd
Wz30viJEkR8rxvkn5nTXj4SRhG69rsgtF3I+Uclt4183CFOGFB+0Kq04gbjBNmHG
dtOCEp0thIqS2qaJdgV1ccADj0w5l5hO968VZm/pSXH+NxbjGfUbTQRAZS6T+mXy
K6BiiQXGc4g2+BIJReOxmAHSnTXw28iGNKZ8spboQd0G13lYSJmVafZyXgMMQdZp
gVHChG0LvuYOBhF/b048r5ahrU8jVSOvD05wJClabU7sYJzopqVb7zgaxb1sk2/S
1VhITwcJsnXFmJShf4UadiEssw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net