Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/uUf77U8F8UUT9OhGJd3dLmt3jU8.roa
File:                     uUf77U8F8UUT9OhGJd3dLmt3jU8.roa (raw, json)
Hash identifier:          rYYnxwi+Gk1g6IWx6nAPcsP1PBywhVXQ6C9F3ktnLFM=
Subject key identifier:   B9:47:FB:ED:4F:05:F1:45:13:F4:E8:46:25:DD:DD:2E:6B:77:8D:4F
Certificate issuer:       /CN=c754c6069e49d24931379a4c92456385922b46ce
Certificate serial:       018CC3B67A0A1480E5565F5AA981FB27F6CA
Authority key identifier: C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/uUf77U8F8UUT9OhGJd3dLmt3jU8.roa
Signing time:             Mon 01 Jan 2024 06:29:25 +0000
ROA not before:           Mon 01 Jan 2024 06:29:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202673
IP address blocks:        2a0f:4a80:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:7a:0a:14:80:e5:56:5f:5a:a9:81:fb:27:f6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c754c6069e49d24931379a4c92456385922b46ce
        Validity
            Not Before: Jan  1 06:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b947fbed4f05f14513f4e84625dddd2e6b778d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:08:7a:e5:9a:b5:aa:eb:33:07:ea:cc:3b:
                    66:81:10:88:ea:0d:f8:86:ee:33:e1:5f:29:13:bc:
                    39:45:dd:23:73:a5:97:c9:17:ca:40:e7:23:9f:66:
                    b4:28:17:ad:87:17:32:5a:f7:92:ab:64:d9:89:88:
                    74:9d:21:2a:a5:ba:59:3a:bb:00:4c:35:38:1b:77:
                    65:c6:ca:de:a8:8e:9d:59:ff:e3:e0:27:56:3e:94:
                    e9:10:44:7e:49:97:2a:10:38:22:49:4b:45:1e:4e:
                    88:03:92:be:84:9e:5c:b6:40:fa:65:d6:93:d7:53:
                    e6:10:4c:c2:9e:8b:0d:66:67:ce:e5:79:38:2c:96:
                    0f:13:1e:f7:f0:23:9f:79:f7:a4:41:2a:5c:f8:ec:
                    c6:7a:ce:0c:e3:c5:e4:dc:dd:f2:8b:ce:8e:0a:f7:
                    e1:03:4b:ea:0f:13:49:0f:d4:3c:5f:bf:ff:7d:45:
                    72:6c:17:c6:06:e1:c8:32:7a:ee:e8:56:75:9a:b9:
                    6e:cf:bd:85:d1:27:2c:ac:f5:7b:db:0e:2b:4b:18:
                    c6:ed:68:89:a1:9e:9b:43:38:12:07:e0:91:33:d1:
                    4d:b8:e3:3a:8a:a5:a9:c8:46:62:39:23:75:30:54:
                    04:7f:78:c6:ce:ee:29:8f:ca:3f:45:54:ca:90:67:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:47:FB:ED:4F:05:F1:45:13:F4:E8:46:25:DD:DD:2E:6B:77:8D:4F
            X509v3 Authority Key Identifier:
                keyid:C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/uUf77U8F8UUT9OhGJd3dLmt3jU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/x1TGBp5J0kkxN5pMkkVjhZIrRs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:4a80:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:ca:45:d3:c3:fe:f6:0a:df:10:a2:7a:3b:83:3f:45:94:
         23:09:fa:f5:13:76:b3:fe:6c:d3:f4:37:1d:68:69:0c:2e:c2:
         eb:b6:68:01:11:a7:13:15:f3:00:e6:eb:b8:97:03:b9:a4:0e:
         c6:11:ab:99:97:22:16:8b:0e:b9:b7:73:42:4f:d5:51:3d:84:
         ca:b1:43:75:4a:b1:17:20:17:9a:9c:c2:f1:48:49:a3:08:2c:
         d8:a6:f2:0b:c5:25:5a:23:37:51:83:c2:25:2d:e9:c7:98:36:
         b8:22:70:c3:09:78:06:b2:6e:66:1e:30:8c:46:d3:45:5e:f4:
         3c:d7:8f:28:eb:b5:32:8c:68:55:c6:00:7f:aa:51:4e:9f:e1:
         26:30:da:5f:e6:e6:48:cf:24:c6:45:45:c9:54:38:6f:c1:87:
         20:6e:64:01:82:0a:00:cd:bb:8b:93:77:7e:09:f7:ce:74:b1:
         33:7c:6f:e8:a6:42:5c:4d:8a:cf:0e:48:c3:c7:58:5d:80:43:
         09:9a:b5:08:61:6c:d2:79:ca:54:c3:46:37:bf:aa:ae:79:22:
         29:c1:e7:4f:72:6c:6f:1d:0f:32:b7:58:f6:af:f3:cc:2e:07:
         d0:9d:20:c9:fe:b6:69:0f:91:6a:db:15:16:d9:c9:16:94:7c:
         48:8d:a3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 08:06:01 2024 by rpki-client on console.sobornost.net