Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/vInGvN_N3GL6RPoZ83xcfRSHSMM.roa
File:                     vInGvN_N3GL6RPoZ83xcfRSHSMM.roa (raw, json)
Hash identifier:          lWeuOYcIsplLjqW4378h7Kgem9Lf4Ely0KlkwlAbZPs=
Subject key identifier:   BC:89:C6:BC:DF:CD:DC:62:FA:44:FA:19:F3:7C:5C:7D:14:87:48:C3
Certificate issuer:       /CN=f120036c003c93ac120368111283f7a061906a3b
Certificate serial:       0189FED7624962197A05A367A8FF0B8FC5DA
Authority key identifier: F1:20:03:6C:00:3C:93:AC:12:03:68:11:12:83:F7:A0:61:90:6A:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SADbAA8k6wSA2gREoP3oGGQajs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/vInGvN_N3GL6RPoZ83xcfRSHSMM.roa
Signing time:             Wed 16 Aug 2023 14:54:35 +0000
ROA not before:           Wed 16 Aug 2023 14:54:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202044
IP address blocks:        2a0b:8440::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fe:d7:62:49:62:19:7a:05:a3:67:a8:ff:0b:8f:c5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f120036c003c93ac120368111283f7a061906a3b
        Validity
            Not Before: Aug 16 14:54:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc89c6bcdfcddc62fa44fa19f37c5c7d148748c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:a3:0d:10:b7:63:12:e8:6a:93:92:69:8b:
                    43:fe:3f:58:26:05:3b:51:47:c8:9c:ae:c3:9d:b7:
                    6e:1f:5c:66:b5:28:2a:fc:22:ee:8b:8b:25:d9:93:
                    24:a0:39:cb:28:83:0e:3f:27:b3:80:e8:89:21:d7:
                    e4:ba:fb:a8:da:b9:46:e1:23:22:fe:c5:f6:7f:c8:
                    8c:a9:91:14:31:eb:73:ba:d2:5b:93:89:a9:85:1a:
                    fd:9a:e1:86:c9:06:c4:2e:f5:cd:c2:4a:8d:91:56:
                    6c:4c:e5:1b:bd:e0:fe:23:43:a9:a4:d0:7f:2d:bb:
                    85:fe:d8:5c:d5:fa:af:ee:47:76:db:50:cb:42:91:
                    1f:5b:52:cf:31:54:a0:d3:21:f0:5b:08:19:1d:66:
                    90:02:8d:6c:a2:a3:9b:92:7c:2a:81:ab:8f:5c:f2:
                    fd:cc:be:a5:b4:59:ca:1f:a6:4c:2f:97:64:52:98:
                    9c:99:ba:7d:29:ff:4e:80:fc:6a:88:c1:bd:c9:c2:
                    f4:17:9f:d1:53:51:17:54:b9:df:82:4c:b1:ab:b8:
                    e3:a4:78:61:fb:2f:99:71:5f:c8:bd:78:93:09:fd:
                    35:97:c5:b6:13:d3:67:b7:ea:5c:45:95:82:17:8a:
                    97:f0:0e:c4:af:4b:72:9c:b7:33:26:e1:ce:ec:d1:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:89:C6:BC:DF:CD:DC:62:FA:44:FA:19:F3:7C:5C:7D:14:87:48:C3
            X509v3 Authority Key Identifier:
                keyid:F1:20:03:6C:00:3C:93:AC:12:03:68:11:12:83:F7:A0:61:90:6A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SADbAA8k6wSA2gREoP3oGGQajs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/vInGvN_N3GL6RPoZ83xcfRSHSMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/8SADbAA8k6wSA2gREoP3oGGQajs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:8440::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:24:ca:2b:77:6d:05:80:d8:49:60:ee:5f:03:cd:02:a3:91:
         75:7b:59:a5:5e:60:03:e1:5a:3a:86:fa:a8:17:5f:42:1b:2b:
         2e:32:83:0d:44:db:c7:1e:55:a1:70:b1:a1:87:e7:48:38:96:
         79:47:8f:a1:e7:5a:4c:6d:24:cf:55:26:8d:46:0c:5b:0f:9c:
         88:04:1c:40:1a:4d:b7:a4:06:fd:38:74:0e:7f:79:95:8f:95:
         fd:3d:62:03:29:27:29:47:cd:b4:cc:8d:13:04:a2:51:fa:8a:
         26:fc:d5:df:f4:f7:d2:d2:ab:e3:a5:64:86:3e:9a:6b:14:a4:
         b8:bb:e1:bd:c8:d2:23:71:1e:0f:34:de:44:98:cf:ff:cc:87:
         a3:44:a4:c7:cd:09:3b:80:99:5e:46:79:18:7f:ca:98:69:61:
         e3:18:77:1f:2c:55:a4:cd:a4:db:19:ec:b3:d5:1a:ca:eb:e3:
         79:f9:29:8f:a2:01:9b:d1:03:9a:46:c4:c4:b0:c6:6d:d4:49:
         c7:bc:42:28:5b:6f:40:2a:c1:2b:6f:a7:7b:5a:9a:9f:63:8d:
         ac:a5:ef:7f:05:df:e0:d1:72:35:22:c0:86:5a:65:73:0a:ae:
         2e:e7:01:f2:c5:9a:4b:69:94:4e:d8:f4:fe:c0:19:9f:8a:92:
         9f:ea:6b:79
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYn+12JJYhl6BaNnqP8Lj8XaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMjAwMzZjMDAzYzkzYWMxMjAzNjgxMTEyODNmN2EwNjE5
MDZhM2IwHhcNMjMwODE2MTQ1NDM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzg5YzZiY2RmY2RkYzYyZmE0NGZhMTlmMzdjNWM3ZDE0ODc0OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8CjDRC3YxLoapOSaYtD/j9YJgU7
UUfInK7DnbduH1xmtSgq/CLui4sl2ZMkoDnLKIMOPyezgOiJIdfkuvuo2rlG4SMi
/sX2f8iMqZEUMetzutJbk4mphRr9muGGyQbELvXNwkqNkVZsTOUbveD+I0OppNB/
LbuF/thc1fqv7kd221DLQpEfW1LPMVSg0yHwWwgZHWaQAo1soqObknwqgauPXPL9
zL6ltFnKH6ZML5dkUpicmbp9Kf9OgPxqiMG9ycL0F5/RU1EXVLnfgkyxq7jjpHhh
+y+ZcV/IvXiTCf01l8W2E9Nnt+pcRZWCF4qX8A7Er0tynLczJuHO7NEXgQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLyJxrzfzdxi+kT6GfN8XH0Uh0jDMB8GA1UdIwQY
MBaAFPEgA2wAPJOsEgNoERKD96BhkGo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNBRGJBQThrNndTQTJnUkVvUDNvR0dRYWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt
M2FhMjIyN2JhZGZlLzEvdkluR3ZOX04zR0w2UlBvWjgzeGNmUlNIU01NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl
LzEvOFNBRGJBQThrNndTQTJnUkVvUDNvR0dRYWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKguEQDAN
BgkqhkiG9w0BAQsFAAOCAQEAlyTKK3dtBYDYSWDuXwPNAqORdXtZpV5gA+FaOob6
qBdfQhsrLjKDDUTbxx5VoXCxoYfnSDiWeUePoedaTG0kz1UmjUYMWw+ciAQcQBpN
t6QG/Th0Dn95lY+V/T1iAyknKUfNtMyNEwSiUfqKJvzV3/T30tKr46Vkhj6aaxSk
uLvhvcjSI3EeDzTeRJjP/8yHo0Skx80JO4CZXkZ5GH/KmGlh4xh3HyxVpM2k2xns
s9Uayuvjefkpj6IBm9EDmkbExLDGbdRJx7xCKFtvQCrBK2+ne1qan2ONrKXvfwXf
4NFyNSLAhlplcwquLucB8sWaS2mUTtj0/sAZn4qSn+preQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net