Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/_k6sNz6vf8s9vR9THpydRfuF24U.roa
File:                     _k6sNz6vf8s9vR9THpydRfuF24U.roa (raw, json)
Hash identifier:          OI9Pq++sLikLG65W4H/Wik0cl/7WfLMUHjLrZHddrdg=
Subject key identifier:   FE:4E:AC:37:3E:AF:7F:CB:3D:BD:1F:53:1E:9C:9D:45:FB:85:DB:85
Certificate issuer:       /CN=dc679b28263aed72f33c765872fe29b6b94075b7
Certificate serial:       5938C9
Authority key identifier: DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/_k6sNz6vf8s9vR9THpydRfuF24U.roa
Signing time:             Wed 05 Jan 2022 11:06:37 +0000
ROA not before:           Wed 05 Jan 2022 11:06:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        146.19.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5847241 (0x5938c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc679b28263aed72f33c765872fe29b6b94075b7
        Validity
            Not Before: Jan  5 11:06:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe4eac373eaf7fcb3dbd1f531e9c9d45fb85db85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:05:20:cb:70:ee:87:9c:0c:58:9f:47:a4:
                    56:a2:4e:7b:ed:c2:17:2f:49:d4:16:29:b4:34:7c:
                    d2:94:4f:e3:4d:d2:b3:c2:9f:d7:26:29:21:57:84:
                    8e:bf:6d:8f:68:91:94:06:0d:e7:03:ef:28:dc:81:
                    48:d3:83:18:b6:80:c8:7f:ef:7e:03:67:35:d1:e2:
                    cd:68:a1:d4:89:50:ba:db:10:a1:d5:4c:b2:41:c0:
                    bf:8f:19:8d:cb:ff:7b:04:b1:94:9e:18:f2:db:29:
                    7f:cc:fc:66:db:f7:d7:ef:12:e9:63:f3:36:66:ec:
                    db:99:09:e3:ee:a3:c6:f1:b5:e3:a5:7b:4c:c0:c0:
                    53:ef:58:34:f9:6c:5c:7d:59:59:92:71:07:fa:00:
                    b4:16:69:35:eb:41:3c:04:a4:be:3b:7c:31:e9:e6:
                    f0:8f:3b:9b:70:9c:84:43:31:43:6b:96:c7:ad:00:
                    b1:9d:f0:29:fe:b7:6a:43:f8:46:e9:11:31:a3:ff:
                    be:89:56:03:6c:15:6c:4d:1f:5c:5a:18:83:92:98:
                    e0:5b:ca:b7:80:80:a9:cb:d8:6d:11:70:c4:0d:13:
                    db:d0:09:96:65:bb:39:c1:ac:a4:c3:10:c8:6b:3c:
                    89:b1:7a:8c:c0:de:8a:66:10:c9:bb:fb:83:e9:f7:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4E:AC:37:3E:AF:7F:CB:3D:BD:1F:53:1E:9C:9D:45:FB:85:DB:85
            X509v3 Authority Key Identifier:
                keyid:DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/_k6sNz6vf8s9vR9THpydRfuF24U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:89:50:ac:12:d2:ff:5e:76:aa:4d:4a:67:80:88:23:7a:3d:
         00:d5:77:29:4e:b8:3c:44:cf:2e:89:65:ff:e3:57:c2:ba:98:
         e0:43:72:88:f6:31:c2:c2:b7:75:18:c1:b4:a7:3c:df:19:b0:
         b0:66:7a:37:84:fa:10:37:8a:c0:8b:ea:a1:44:4b:8e:3f:43:
         21:a1:24:5c:f5:d1:5d:0a:0e:a2:c8:9f:25:55:31:f7:bc:7b:
         95:55:ab:bc:09:e6:81:ad:10:08:5f:6e:27:dd:c3:15:80:23:
         14:17:1e:4c:fe:d1:45:0d:03:21:9b:1e:51:58:11:35:d7:0f:
         55:fb:07:04:90:55:81:92:72:b0:ce:93:5f:d9:11:a2:2e:f1:
         15:15:34:03:f5:91:7e:9d:1a:70:4c:b9:30:1d:52:a4:59:de:
         72:bf:81:fc:11:f7:53:10:6f:7b:b0:00:56:b9:44:40:61:95:
         65:42:53:84:89:ad:3f:1a:4b:09:ad:42:e1:65:71:72:5f:c8:
         e2:9a:e3:93:d2:ca:9d:64:68:a3:b1:06:71:73:16:bd:8a:d1:
         c8:39:22:df:c7:ff:46:61:c6:0c:12:17:eb:75:87:6b:71:a3:
         2f:38:48:7b:af:48:01:fb:a8:08:6c:c7:d8:f1:93:6f:92:62:
         67:cc:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net