Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/zO2p39qyO7Maehcf6zZDiwD-BRE.roa
File:                     zO2p39qyO7Maehcf6zZDiwD-BRE.roa (raw, json)
Hash identifier:          Z2wD4Bt1y/qqr0f6GlU1KrAJQjAHBHtADnujA/a6+NM=
Subject key identifier:   CC:ED:A9:DF:DA:B2:3B:B3:1A:7A:17:1F:EB:36:43:8B:00:FE:05:11
Certificate issuer:       /CN=dc62c84850750e2aa68930f164b0c522073aead8
Certificate serial:       01856F9DE62B44C358D57E91E288AB11881F
Authority key identifier: DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/zO2p39qyO7Maehcf6zZDiwD-BRE.roa
Signing time:             Sun 01 Jan 2023 23:14:56 +0000
ROA not before:           Sun 01 Jan 2023 23:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210453
IP address blocks:        194.69.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:e6:2b:44:c3:58:d5:7e:91:e2:88:ab:11:88:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc62c84850750e2aa68930f164b0c522073aead8
        Validity
            Not Before: Jan  1 23:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cceda9dfdab23bb31a7a171feb36438b00fe0511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:55:9e:50:9c:b4:f0:cb:48:e3:08:86:61:
                    69:db:9e:9d:29:3e:aa:8d:ef:8a:96:1a:b4:2e:f9:
                    d4:68:96:5a:23:f7:48:cb:f3:64:a8:b8:bd:db:f8:
                    00:53:e0:b8:30:b0:b8:c9:74:f0:d3:e1:c9:a5:73:
                    c5:ac:c9:da:9c:67:39:50:d3:e1:60:f6:f8:b8:ce:
                    81:ca:53:a2:9c:0e:7f:89:50:c4:30:98:1a:26:32:
                    1f:7f:4f:7f:f4:05:3d:f5:7d:3c:df:e8:23:e3:80:
                    64:c1:ac:24:fe:77:61:4d:2f:3e:94:d1:b3:ec:e8:
                    80:37:9d:03:87:ff:42:95:a3:b1:4a:d2:53:4e:a2:
                    b0:e4:d0:c7:6b:c4:9f:bc:5e:38:92:80:19:20:07:
                    c9:40:de:6c:16:36:0b:79:db:c7:a9:46:83:20:c2:
                    da:cb:b4:47:70:3c:9f:da:85:c3:13:43:e6:6e:b1:
                    e1:05:95:1c:58:e9:98:43:a7:4d:c0:ec:f2:cf:3b:
                    ea:2d:5f:b3:21:7c:97:f7:0c:89:ad:67:2a:b4:f3:
                    60:ed:a9:08:79:79:31:91:fb:cc:cc:9b:57:fc:8b:
                    a3:e2:d8:c9:f9:b5:9e:a0:e9:51:29:81:35:cd:ea:
                    0c:71:4c:0d:80:5a:7e:30:49:0e:8c:36:76:da:3b:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:A9:DF:DA:B2:3B:B3:1A:7A:17:1F:EB:36:43:8B:00:FE:05:11
            X509v3 Authority Key Identifier:
                keyid:DC:62:C8:48:50:75:0E:2A:A6:89:30:F1:64:B0:C5:22:07:3A:EA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GLISFB1DiqmiTDxZLDFIgc66tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/zO2p39qyO7Maehcf6zZDiwD-BRE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b34bb9-adbb-41e4-a041-5230b4002c27/1/3GLISFB1DiqmiTDxZLDFIgc66tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:88:56:65:bc:0a:16:fb:a6:05:77:53:d3:1d:9f:d9:cf:
         f5:3d:80:f7:3b:34:1f:0a:4e:c3:7e:f1:21:57:32:a9:d0:39:
         03:4a:a5:60:d5:e9:23:5b:70:a0:ea:0e:c2:11:7b:9a:53:62:
         a3:a0:0f:72:81:0f:4d:27:15:d3:6e:63:e4:65:e6:86:fa:9f:
         d1:23:c1:1f:3d:1e:89:ee:2d:db:58:1a:93:4f:f0:88:34:95:
         04:49:b5:25:25:1d:63:1d:54:5a:d3:54:52:f1:17:58:3a:1c:
         33:30:2e:ae:3f:b3:77:a3:73:b3:ff:99:4f:4b:97:eb:02:ab:
         f6:59:b5:ac:ff:e9:4c:39:43:5c:6a:4b:51:55:cb:b1:47:15:
         9e:4b:72:0a:53:47:01:2b:cd:a7:ad:03:3b:c9:2c:02:0a:83:
         82:f4:58:e8:90:2a:3c:81:28:76:d0:db:9a:24:f8:ea:b6:0b:
         39:53:73:f3:28:d5:1b:1c:e6:1e:7f:13:e1:a2:17:2e:e3:58:
         3e:3c:58:d4:23:c8:22:8b:0d:65:e2:41:03:3a:95:78:b4:1e:
         61:3c:8e:97:40:16:99:ce:f4:a4:cd:f3:2a:dc:c8:1c:9a:0a:
         d7:52:48:81:1e:cd:a1:eb:c0:a0:57:7d:2f:67:13:5d:84:69:
         9a:9c:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:58 2023 by rpki-client on console.sobornost.net