Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/zmrrZyQ4fu83n-l96bpd-tqfQ7o.roa
File:                     zmrrZyQ4fu83n-l96bpd-tqfQ7o.roa (raw, json)
Hash identifier:          Q9rLiOVFKTaR5e22OdEoeiBjHzQ3hNA7ZCvhkZQJckg=
Subject key identifier:   CE:6A:EB:67:24:38:7E:EF:37:9F:E9:7D:E9:BA:5D:FA:DA:9F:43:BA
Certificate issuer:       /CN=dc679b28263aed72f33c765872fe29b6b94075b7
Certificate serial:       0188C328650C87586F17C87716B190EBBF30
Authority key identifier: DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/zmrrZyQ4fu83n-l96bpd-tqfQ7o.roa
Signing time:             Fri 16 Jun 2023 07:43:04 +0000
ROA not before:           Fri 16 Jun 2023 07:43:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        146.19.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c3:28:65:0c:87:58:6f:17:c8:77:16:b1:90:eb:bf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc679b28263aed72f33c765872fe29b6b94075b7
        Validity
            Not Before: Jun 16 07:43:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ce6aeb6724387eef379fe97de9ba5dfada9f43ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:ca:25:c7:8e:bb:aa:05:22:fe:71:24:1a:
                    92:a5:1a:27:23:4f:cf:5b:03:85:f0:fd:94:a3:b4:
                    31:9e:e0:09:ff:6b:87:dc:6b:4c:55:5b:92:17:6f:
                    3c:71:fd:bd:b7:b5:02:44:e4:42:ef:48:44:67:48:
                    bd:fa:a2:a8:a7:5b:32:a3:4b:4e:0e:f2:9e:0b:c2:
                    17:3c:e0:d4:de:12:53:0e:7e:a1:bf:eb:dd:a3:49:
                    44:18:d1:54:81:31:18:7c:69:1c:3c:03:f9:5c:0b:
                    ba:9b:d0:98:7c:4b:3c:89:9e:e8:f6:b7:ba:26:ca:
                    b4:f9:da:69:97:76:9b:57:a0:50:10:60:a8:75:d8:
                    20:0a:66:8c:e8:2a:86:bf:e8:b2:9a:a1:4c:63:1e:
                    78:0d:9b:2e:f9:a9:ec:f3:ae:ad:a4:22:ea:7e:e3:
                    75:e6:a3:11:5e:c3:d2:8c:90:88:fb:f9:d3:83:20:
                    ec:45:a0:a9:fa:e5:6e:af:1a:12:d0:61:a0:62:ba:
                    fc:2c:bc:24:6e:f8:4f:e0:a5:aa:20:08:35:c5:7a:
                    5e:c0:96:dc:43:ff:5a:e9:8b:3e:7b:d6:dc:08:49:
                    9c:02:3b:30:ae:29:b3:d8:df:2f:21:3e:6a:32:45:
                    27:96:2a:4b:14:3d:f4:2c:33:d4:22:ec:d4:cd:78:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:EB:67:24:38:7E:EF:37:9F:E9:7D:E9:BA:5D:FA:DA:9F:43:BA
            X509v3 Authority Key Identifier:
                keyid:DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/zmrrZyQ4fu83n-l96bpd-tqfQ7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:62:c5:30:0e:e8:2b:1d:ae:73:d1:45:47:3c:4b:2f:a4:
         72:95:f8:4c:77:71:8a:e5:df:2b:8b:b3:7d:66:66:6d:0a:86:
         c6:0c:83:11:1e:88:ce:f6:53:37:d7:4a:ad:09:97:18:25:33:
         fb:69:b3:46:eb:90:8b:19:c1:aa:28:4c:bb:43:a7:6f:bf:ce:
         99:8c:21:d9:e8:26:f6:22:76:7d:4d:65:ba:e7:28:16:0d:05:
         7f:36:d9:58:0b:6d:dd:71:11:2c:f5:22:88:4b:8f:c3:e8:41:
         35:96:d8:d8:03:69:57:47:a0:83:13:fe:ee:4c:83:13:83:b8:
         5a:f3:28:ac:f0:e5:17:eb:b8:d1:83:ee:9c:aa:79:3a:28:31:
         8e:19:df:1c:8e:7e:f0:d5:6a:f8:52:25:7d:49:47:9d:85:48:
         c4:58:d1:ac:d6:02:53:95:d1:4e:c8:89:28:2c:56:2c:22:58:
         8c:35:94:e4:c1:da:f5:e6:1f:b2:29:f0:d0:59:41:a3:54:c0:
         7d:ca:57:ce:13:5e:49:e7:c7:35:db:b9:10:84:f5:72:a5:f5:
         8a:af:7b:27:31:36:cc:ba:8f:50:f8:a4:7f:96:a5:eb:b3:68:
         37:2c:d4:3d:98:c5:b4:e5:43:91:86:88:4c:a6:f0:b9:28:f3:
         56:1c:1d:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjDKGUMh1hvF8h3FrGQ678wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjc5YjI4MjYzYWVkNzJmMzNjNzY1ODcyZmUyOWI2Yjk0
MDc1YjcwHhcNMjMwNjE2MDc0MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTZhZWI2NzI0Mzg3ZWVmMzc5ZmU5N2RlOWJhNWRmYWRhOWY0M2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirbKJceOu6oFIv5xJBqSpRonI0/P
WwOF8P2Uo7QxnuAJ/2uH3GtMVVuSF288cf29t7UCRORC70hEZ0i9+qKop1syo0tO
DvKeC8IXPODU3hJTDn6hv+vdo0lEGNFUgTEYfGkcPAP5XAu6m9CYfEs8iZ7o9re6
Jsq0+dppl3abV6BQEGCoddggCmaM6CqGv+iymqFMYx54DZsu+ans866tpCLqfuN1
5qMRXsPSjJCI+/nTgyDsRaCp+uVurxoS0GGgYrr8LLwkbvhP4KWqIAg1xXpewJbc
Q/9a6Ys+e9bcCEmcAjswrimz2N8vIT5qMkUnlipLFD30LDPUIuzUzXjUZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5q62ckOH7vN5/pfem6Xfran0O6MB8GA1UdIwQY
MBaAFNxnmygmOu1y8zx2WHL+Kba5QHW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dlYktDWTY3WEx6UEhaWWN2NHB0cmxBZGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83M2MzMDEtMmE1NC00ZWM2LTg1ZDEt
N2U2MjU4ZTBmNzdmLzEvem1yclp5UTRmdTgzbi1sOTZicGQtdHFmUTdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83M2MzMDEtMmE1NC00ZWM2LTg1ZDEtN2U2MjU4ZTBmNzdm
LzEvM0dlYktDWTY3WEx6UEhaWWN2NHB0cmxBZGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPbMA0G
CSqGSIb3DQEBCwUAA4IBAQBYzWLFMA7oKx2uc9FFRzxLL6RylfhMd3GK5d8ri7N9
ZmZtCobGDIMRHojO9lM310qtCZcYJTP7abNG65CLGcGqKEy7Q6dvv86ZjCHZ6Cb2
InZ9TWW65ygWDQV/NtlYC23dcREs9SKIS4/D6EE1ltjYA2lXR6CDE/7uTIMTg7ha
8yis8OUX67jRg+6cqnk6KDGOGd8cjn7w1Wr4UiV9SUedhUjEWNGs1gJTldFOyIko
LFYsIliMNZTkwdr15h+yKfDQWUGjVMB9ylfOE15J58c127kQhPVypfWKr3snMTbM
uo9Q+KR/lqXrs2g3LNQ9mMW05UORhohMpvC5KPNWHB3G
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net