Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/J6zBjRgQ7XBAt0F8bSPLZBI95Dg.roa
File:                     J6zBjRgQ7XBAt0F8bSPLZBI95Dg.roa (raw, json)
Hash identifier:          BAqiWxJB/lHu5ixezmsayCmLiCQ1jjBp0X6vLPyH+Yg=
Subject key identifier:   27:AC:C1:8D:18:10:ED:70:40:B7:41:7C:6D:23:CB:64:12:3D:E4:38
Certificate issuer:       /CN=dc679b28263aed72f33c765872fe29b6b94075b7
Certificate serial:       018A70081C38ED49E0E131FDAD3BB0D942F5
Authority key identifier: DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/J6zBjRgQ7XBAt0F8bSPLZBI95Dg.roa
Signing time:             Thu 07 Sep 2023 14:24:54 +0000
ROA not before:           Thu 07 Sep 2023 14:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51765
IP address blocks:        146.19.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:70:08:1c:38:ed:49:e0:e1:31:fd:ad:3b:b0:d9:42:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc679b28263aed72f33c765872fe29b6b94075b7
        Validity
            Not Before: Sep  7 14:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27acc18d1810ed7040b7417c6d23cb64123de438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:a3:ee:43:d2:36:fe:1d:b3:69:fe:bf:b4:
                    4a:fe:8d:17:af:ec:03:48:4b:c7:77:84:99:ef:61:
                    31:b0:9c:4c:e2:96:bb:06:bf:90:0d:06:8b:60:77:
                    67:91:71:8e:b2:e0:63:3d:d7:22:60:d4:b7:0e:9b:
                    51:9c:dd:e1:fe:f5:6c:a6:97:83:5a:a0:66:bc:8f:
                    3e:b9:f1:3d:94:ee:18:da:d2:96:42:31:92:07:7b:
                    d1:e7:14:04:76:bd:3b:7b:32:37:0d:27:ec:0a:38:
                    3b:2a:b1:3d:23:0c:c2:fe:c2:ae:77:84:6e:0a:24:
                    10:4c:8f:86:15:bc:ca:31:1f:55:4f:36:9a:c7:88:
                    af:c4:3c:0d:7c:72:53:9e:2e:77:91:2b:50:db:83:
                    fd:aa:aa:6c:5b:62:b9:da:65:41:29:f1:0c:58:b8:
                    e4:a1:0c:7f:76:94:50:cb:db:57:1d:aa:b9:15:dd:
                    1c:3e:62:85:9a:33:d2:bc:0b:55:14:3c:e1:db:e2:
                    1c:85:29:99:9d:a1:63:a1:90:2d:34:3b:83:f2:9f:
                    16:56:90:a2:dc:c0:63:d3:3d:5f:b5:ed:11:d8:cf:
                    6e:f6:85:38:d6:aa:30:6c:fc:8e:56:29:f1:5c:b4:
                    d4:0c:36:f5:3b:ad:90:3c:3a:d8:48:8a:5e:0a:40:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:C1:8D:18:10:ED:70:40:B7:41:7C:6D:23:CB:64:12:3D:E4:38
            X509v3 Authority Key Identifier:
                keyid:DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/J6zBjRgQ7XBAt0F8bSPLZBI95Dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:48:12:67:2c:2a:eb:ff:eb:20:a9:99:62:22:24:e9:5d:d7:
         eb:02:cf:02:ef:66:d1:f7:84:2f:ff:80:01:1a:1a:04:76:ff:
         32:23:a6:67:aa:f0:fb:c0:c0:0d:2c:fe:ff:0a:69:a8:18:4f:
         85:a7:fb:2f:24:be:37:05:49:7b:a6:05:3f:d5:d5:c8:6a:49:
         92:01:76:5f:a9:2e:a5:5a:1c:cb:07:61:e9:ae:0c:46:85:3b:
         4b:01:c0:3b:77:4e:45:40:30:43:d5:69:2a:76:6f:8e:0e:5e:
         df:66:88:9d:47:b3:91:4b:c0:70:15:74:cf:7f:a0:f3:f3:cd:
         c7:a7:22:73:91:ed:28:9e:f7:d4:b0:53:d5:eb:11:58:67:c4:
         a8:d0:82:8c:d5:97:31:6d:aa:f8:47:f7:46:5d:36:21:43:57:
         b8:46:c7:19:f7:a8:b7:6c:bd:fc:fd:45:0d:81:97:ef:fa:8e:
         03:7b:74:93:5c:95:93:f7:d7:f0:fb:4e:bb:e9:6a:96:47:a9:
         87:b5:3b:2f:19:ec:4d:23:ad:f5:66:0e:f8:fd:45:f6:04:2b:
         f6:2b:73:d2:1c:cf:8e:ea:88:a5:e4:83:99:51:07:54:f1:85:
         a8:e8:e7:7b:d1:d1:82:65:55:40:e1:5b:cd:dd:45:ee:38:4d:
         52:73:a5:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpwCBw47Ung4TH9rTuw2UL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjc5YjI4MjYzYWVkNzJmMzNjNzY1ODcyZmUyOWI2Yjk0
MDc1YjcwHhcNMjMwOTA3MTQyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2FjYzE4ZDE4MTBlZDcwNDBiNzQxN2M2ZDIzY2I2NDEyM2RlNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH2j7kPSNv4ds2n+v7RK/o0Xr+wD
SEvHd4SZ72ExsJxM4pa7Br+QDQaLYHdnkXGOsuBjPdciYNS3DptRnN3h/vVsppeD
WqBmvI8+ufE9lO4Y2tKWQjGSB3vR5xQEdr07ezI3DSfsCjg7KrE9IwzC/sKud4Ru
CiQQTI+GFbzKMR9VTzaax4ivxDwNfHJTni53kStQ24P9qqpsW2K52mVBKfEMWLjk
oQx/dpRQy9tXHaq5Fd0cPmKFmjPSvAtVFDzh2+IchSmZnaFjoZAtNDuD8p8WVpCi
3MBj0z1fte0R2M9u9oU41qowbPyOVinxXLTUDDb1O62QPDrYSIpeCkDJZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCeswY0YEO1wQLdBfG0jy2QSPeQ4MB8GA1UdIwQY
MBaAFNxnmygmOu1y8zx2WHL+Kba5QHW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dlYktDWTY3WEx6UEhaWWN2NHB0cmxBZGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83M2MzMDEtMmE1NC00ZWM2LTg1ZDEt
N2U2MjU4ZTBmNzdmLzEvSjZ6QmpSZ1E3WEJBdDBGOGJTUExaQkk5NURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83M2MzMDEtMmE1NC00ZWM2LTg1ZDEtN2U2MjU4ZTBmNzdm
LzEvM0dlYktDWTY3WEx6UEhaWWN2NHB0cmxBZGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPbMA0G
CSqGSIb3DQEBCwUAA4IBAQBQSBJnLCrr/+sgqZliIiTpXdfrAs8C72bR94Qv/4AB
GhoEdv8yI6ZnqvD7wMANLP7/CmmoGE+Fp/svJL43BUl7pgU/1dXIakmSAXZfqS6l
WhzLB2HprgxGhTtLAcA7d05FQDBD1Wkqdm+ODl7fZoidR7ORS8BwFXTPf6Dz883H
pyJzke0onvfUsFPV6xFYZ8So0IKM1Zcxbar4R/dGXTYhQ1e4RscZ96i3bL38/UUN
gZfv+o4De3STXJWT99fw+0676WqWR6mHtTsvGexNI631Zg74/UX2BCv2K3PSHM+O
6oil5IOZUQdU8YWo6Od70dGCZVVA4VvN3UXuOE1Sc6Uc
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net