Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GTbr_jdBSMiJvfm3l4KGBU-EpK4.roa
File:                     GTbr_jdBSMiJvfm3l4KGBU-EpK4.roa (raw, json)
Hash identifier:          LPYNrZ61lFsAcI9bFoZiLO/r0pbtcGAwYRW51bHIui0=
Subject key identifier:   19:36:EB:FE:37:41:48:C8:89:BD:F9:B7:97:82:86:05:4F:84:A4:AE
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       01827CEE6E1C64CABE3A144CDD6FCAA64ADD
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GTbr_jdBSMiJvfm3l4KGBU-EpK4.roa
Signing time:             Mon 08 Aug 2022 10:09:36 +0000
ROA not before:           Mon 08 Aug 2022 10:09:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        141.11.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7c:ee:6e:1c:64:ca:be:3a:14:4c:dd:6f:ca:a6:4a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Aug  8 10:09:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1936ebfe374148c889bdf9b7978286054f84a4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:cc:41:fb:a4:22:19:d4:2d:69:6d:61:5c:
                    de:3d:3f:52:92:ed:ea:c9:db:4d:f3:43:21:ca:e4:
                    0b:dc:34:f3:05:1c:18:88:bb:b9:f4:af:0e:1d:5e:
                    ed:a1:a7:30:0e:fc:77:6a:0d:14:f4:58:13:19:c5:
                    0a:ff:f5:b2:33:02:63:c6:01:c6:9f:55:b9:08:07:
                    85:a1:aa:81:e8:94:31:75:c7:9f:e7:89:7a:f2:ad:
                    fb:59:f5:b9:98:bb:83:38:dd:02:7f:38:04:90:9f:
                    ab:f0:fd:5c:ba:f5:2a:0b:99:28:63:6d:a7:ed:51:
                    98:9c:e1:0b:c1:67:5e:a5:5e:d5:57:63:cc:9d:b8:
                    c1:b2:4a:5b:25:62:55:26:46:06:fd:bd:39:50:5c:
                    23:96:80:43:0c:af:28:70:84:d0:89:13:19:25:a8:
                    79:26:75:3b:45:c7:d7:67:a1:16:a3:b5:5f:e6:1f:
                    5e:0c:d1:be:33:d8:53:cc:1b:27:c4:2b:c3:0f:30:
                    40:5f:94:c9:8b:59:ca:7a:e4:a3:1b:7a:f9:c1:98:
                    4f:a1:34:49:e6:68:7c:dd:91:49:fb:41:ef:ef:60:
                    0d:28:5c:5c:2f:fc:e7:01:75:5c:b9:42:96:72:e6:
                    38:57:47:0d:3e:ac:b3:e0:eb:eb:d4:74:d4:ae:a8:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:EB:FE:37:41:48:C8:89:BD:F9:B7:97:82:86:05:4F:84:A4:AE
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/GTbr_jdBSMiJvfm3l4KGBU-EpK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:b0:7a:d0:06:10:77:9d:7e:1b:98:19:ef:88:f6:59:81:
         1b:07:31:82:09:02:ae:a9:ae:85:bb:2c:60:e1:43:17:32:46:
         e8:7d:ad:a5:0d:c9:99:1b:33:f7:ec:f7:da:18:77:13:c4:36:
         d1:f7:d9:51:ab:96:1e:82:3a:07:8a:d8:6a:20:ba:3d:0e:1e:
         7f:6a:c9:3a:95:8d:6e:87:5e:0b:1c:24:dc:c1:03:fb:38:33:
         e9:4a:76:e8:d4:ee:38:d9:cb:55:f6:d3:c7:e9:a6:89:1e:db:
         bf:e0:94:51:db:b4:ab:0f:be:ab:8f:62:8e:67:b3:42:8c:7e:
         c6:c4:3f:0a:16:ca:54:2a:df:2f:bd:43:60:13:97:99:4d:c7:
         06:d2:d7:0c:00:eb:fd:fc:c7:d6:7b:e3:31:71:aa:e3:fe:43:
         4b:df:96:cb:7a:32:43:45:28:c9:a1:cb:21:da:a8:5f:39:25:
         8b:34:be:3d:cf:c8:7d:1a:3b:ec:fd:5b:49:84:19:05:ce:38:
         fc:1e:b6:d8:f3:f9:56:41:a5:59:76:81:0d:69:96:16:a4:1b:
         a3:04:0b:62:26:3f:cb:15:85:20:58:db:ce:1a:eb:70:31:47:
         48:58:05:d4:c5:18:bd:65:5c:76:d3:6b:2b:7b:02:39:8d:d3:
         68:ac:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org