Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/vyhURBhdTO7oT3Ea8qcsIBinMbs.roa
File:                     vyhURBhdTO7oT3Ea8qcsIBinMbs.roa (raw, json)
Hash identifier:          RWe1P0YIDkUAK1CUx3bL//+ufKm68p0yZ1xu2UrHBuA=
Subject key identifier:   BF:28:54:44:18:5D:4C:EE:E8:4F:71:1A:F2:A7:2C:20:18:A7:31:BB
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       0780E94E
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/vyhURBhdTO7oT3Ea8qcsIBinMbs.roa
Signing time:             Sat 01 Jan 2022 00:59:05 +0000
ROA not before:           Sat 01 Jan 2022 00:59:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202749
IP address blocks:        178.254.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125888846 (0x780e94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 00:59:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf285444185d4ceee84f711af2a72c2018a731bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:91:06:4a:01:d3:f8:f4:eb:7c:72:47:e9:
                    f1:be:54:9f:e6:a0:e3:0b:03:aa:37:0c:6b:14:22:
                    2d:48:28:64:8e:7c:b8:80:bb:90:e1:20:0f:e5:33:
                    3d:36:3c:a4:25:f5:e2:51:a6:85:35:7d:44:c7:da:
                    8e:df:17:97:fc:c7:e2:90:69:d2:49:69:aa:1d:68:
                    d1:8b:c3:ab:d1:d6:85:22:18:aa:f2:57:c3:db:fd:
                    e5:3d:bc:ca:d5:8e:56:a2:9b:14:2c:c6:05:88:f6:
                    89:c5:4d:cd:5a:cf:6a:92:6f:be:60:dc:5a:45:9a:
                    61:c6:d0:4f:79:9d:7a:2d:f8:0e:b6:65:cd:58:ad:
                    c1:73:d2:86:0e:11:ca:fa:8f:5a:83:f4:48:3f:93:
                    a8:ea:f9:23:b8:83:85:68:74:34:82:e2:5d:2d:6d:
                    80:54:9d:a0:19:80:8d:e4:5d:53:59:0b:d9:22:4e:
                    88:d9:e5:74:04:be:4e:c8:3d:05:a0:5d:19:52:85:
                    3d:a3:e4:86:aa:ed:fc:49:0c:18:27:ff:de:f3:85:
                    51:75:72:ea:6e:ea:50:55:c3:3d:3f:66:e7:bc:a0:
                    ad:94:d6:00:cb:c2:f9:2e:c2:8d:d2:b5:72:9b:14:
                    5c:e4:1b:eb:a2:b8:9e:49:53:bc:93:d3:0e:83:76:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:28:54:44:18:5D:4C:EE:E8:4F:71:1A:F2:A7:2C:20:18:A7:31:BB
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/vyhURBhdTO7oT3Ea8qcsIBinMbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:0c:72:63:c6:b1:7c:c4:b9:8d:60:d3:31:8d:44:93:70:
         a8:a0:c3:c4:59:be:45:72:6d:09:ee:08:6d:e3:9f:b6:b4:55:
         34:82:9c:a1:6d:b2:7f:49:50:a4:a1:4a:a2:41:89:ea:b7:c3:
         89:e5:84:e2:af:44:38:4d:3a:e7:3c:9e:15:2a:0b:7f:a8:63:
         2c:a3:de:79:c5:83:89:63:70:71:80:f0:e6:09:75:e5:66:f2:
         c1:91:92:6e:69:1f:5c:70:2b:bc:43:72:de:eb:b9:d2:e9:86:
         fa:c3:35:38:2c:a8:a8:b9:ee:75:69:4a:d1:ef:3c:9e:9e:45:
         18:c6:3a:bb:1c:c4:e1:10:7c:2c:04:fc:0e:8f:c5:26:29:92:
         dd:85:c1:0d:51:7a:31:09:48:20:bf:eb:d6:68:e6:46:9e:87:
         27:7c:92:32:6d:76:b0:26:57:f8:77:58:5b:69:a6:a6:50:c3:
         ff:48:d3:90:92:ef:b4:3c:71:9d:29:3a:96:70:6a:0a:40:ec:
         6a:23:8b:45:20:83:0e:5b:5a:d9:ca:13:47:ee:5e:69:d5:ab:
         42:d3:e1:74:7d:04:c5:fd:da:a6:9c:09:aa:56:ed:98:7b:90:
         dc:d4:1d:98:61:6f:42:a5:9c:40:21:c7:34:d4:76:ef:ad:33:
         41:a7:c0:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB4DpTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NjRmOGRhYWRmMWQ3NzVkNTlkMTUwMmI1NzM5MDFiODc1NTEzYjU2MB4XDTIyMDEw
MTAwNTkwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmYyODU0NDQxODVk
NGNlZWU4NGY3MTFhZjJhNzJjMjAxOGE3MzFiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIlvkQZKAdP49Ot8ckfp8b5Un+ag4wsDqjcMaxQiLUgoZI58
uIC7kOEgD+UzPTY8pCX14lGmhTV9RMfajt8Xl/zH4pBp0klpqh1o0YvDq9HWhSIY
qvJXw9v95T28ytWOVqKbFCzGBYj2icVNzVrPapJvvmDcWkWaYcbQT3mdei34DrZl
zVitwXPShg4RyvqPWoP0SD+TqOr5I7iDhWh0NILiXS1tgFSdoBmAjeRdU1kL2SJO
iNnldAS+Tsg9BaBdGVKFPaPkhqrt/EkMGCf/3vOFUXVy6m7qUFXDPT9m57ygrZTW
AMvC+S7CjdK1cpsUXOQb66K4nklTvJPTDoN2UN8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS/KFREGF1M7uhPcRrypywgGKcxuzAfBgNVHSMEGDAWgBR2T42q3x13XVnR
UCtXOQG4dVE7VjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RrLU5xdDhkZDExWjBWQXJWemtCdUhWUk8xWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWQvN2I5MmJmLTAxMWItNDRhNy04MzgyLWJmYjJiODgxNWU0OS8x
L3Z5aFVSQmhkVE83b1QzRWE4cWNzSUJpbk1icy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQv
N2I5MmJmLTAxMWItNDRhNy04MzgyLWJmYjJiODgxNWU0OS8xL2RrLU5xdDhkZDEx
WjBWQXJWemtCdUhWUk8xWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALL+kzANBgkqhkiG9w0BAQsFAAOC
AQEAmIwMcmPGsXzEuY1g0zGNRJNwqKDDxFm+RXJtCe4IbeOftrRVNIKcoW2yf0lQ
pKFKokGJ6rfDieWE4q9EOE065zyeFSoLf6hjLKPeecWDiWNwcYDw5gl15WbywZGS
bmkfXHArvENy3uu50umG+sM1OCyoqLnudWlK0e88np5FGMY6uxzE4RB8LAT8Do/F
JimS3YXBDVF6MQlIIL/r1mjmRp6HJ3ySMm12sCZX+HdYW2mmplDD/0jTkJLvtDxx
nSk6lnBqCkDsaiOLRSCDDlta2coTR+5eadWrQtPhdH0Exf3appwJqlbtmHuQ3NQd
mGFvQqWcQCHHNNR2760zQafANw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net