Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M__eWFnaYbVi7sY8oFI4aMB-TMw.roa
File:                     M__eWFnaYbVi7sY8oFI4aMB-TMw.roa (raw, json)
Hash identifier:          RyR/gaYaxMLd5mhQM7n+Jugtv6SxBr8cw5kBUbcOHS8=
Subject key identifier:   33:FF:DE:58:59:DA:61:B5:62:EE:C6:3C:A0:52:38:68:C0:7E:4C:CC
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       028F94C1
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M__eWFnaYbVi7sY8oFI4aMB-TMw.roa
Signing time:             Fri 07 Jan 2022 10:27:30 +0000
ROA not before:           Fri 07 Jan 2022 10:27:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212634
IP address blocks:        141.11.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42964161 (0x28f94c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jan  7 10:27:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33ffde5859da61b562eec63ca0523868c07e4ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:93:5a:f2:2d:f6:52:6d:54:04:10:e1:b8:
                    1e:28:d7:9d:80:97:e3:a0:d7:bb:e4:63:1d:ad:b8:
                    a3:2c:12:15:79:71:68:22:fc:44:80:48:90:89:f8:
                    7a:d6:8c:40:53:73:a9:7e:bc:7e:ae:c6:b5:d7:92:
                    15:f1:1b:78:96:1c:75:c6:5a:c9:08:c7:37:f1:c8:
                    7f:4b:b6:17:83:f6:5b:e4:8f:6f:8e:8a:83:94:f2:
                    3e:fe:df:0c:5c:f1:06:16:34:51:c7:52:ff:a1:5e:
                    3d:6a:cd:44:fb:b7:6a:cb:7b:d4:d5:7d:1a:c9:cb:
                    02:df:dd:5e:2f:72:34:c9:0c:d5:4e:9d:7b:15:cb:
                    cf:77:81:38:4b:a0:ae:62:f2:1b:e2:b7:b8:bd:bd:
                    c5:e6:ab:59:21:1f:83:7a:5d:38:6c:ca:0d:7e:f6:
                    73:b7:73:97:13:49:8e:f9:45:87:9e:6c:f1:c0:66:
                    a6:9b:9c:42:ac:44:df:e8:13:6c:22:7a:c6:e2:32:
                    2e:5c:8c:f5:33:34:58:89:8c:1c:c9:93:72:06:8a:
                    c3:7a:1a:c0:74:e0:61:8c:23:e0:f1:5a:b3:9e:54:
                    d3:77:6f:21:51:4c:71:10:76:50:15:85:84:20:b8:
                    94:43:23:d3:ee:8e:c3:ec:71:dc:c2:0e:62:0d:08:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FF:DE:58:59:DA:61:B5:62:EE:C6:3C:A0:52:38:68:C0:7E:4C:CC
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/M__eWFnaYbVi7sY8oFI4aMB-TMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:8e:c5:4f:8a:79:58:07:da:8a:9c:aa:d3:33:f6:6a:59:
         eb:1b:48:de:97:6b:29:3f:a4:97:42:9e:dd:ad:85:0a:8e:e4:
         a2:a1:23:a0:8f:12:e0:05:c8:21:53:8f:4b:96:0f:96:a4:a6:
         66:83:93:15:c0:b0:79:c1:bc:ac:7e:7f:8e:4e:e8:62:1c:6c:
         63:02:b4:c0:bb:04:d0:2e:0b:d6:ee:fe:73:71:18:49:42:b1:
         8c:33:80:30:f7:72:9e:a8:de:04:e7:b3:fa:a7:d0:b1:ee:13:
         7d:e5:70:c8:33:66:32:c9:a8:a2:df:ed:ca:ff:b9:d0:82:e3:
         7b:83:48:3e:ef:89:78:83:ee:42:4a:a6:90:51:a5:04:63:13:
         16:b8:04:36:3e:f7:4a:d9:bf:50:51:38:d1:78:3e:cb:a8:a2:
         cc:66:63:08:8e:55:27:f2:cb:63:41:55:a9:a3:34:75:c4:e5:
         0d:f9:eb:c8:fe:3a:96:db:f7:ff:55:73:a9:2c:7f:70:97:80:
         aa:23:d8:be:84:12:77:e5:1e:fd:a8:1b:72:f5:7b:81:27:dd:
         45:3d:32:83:38:85:ac:8b:b3:9b:d6:c2:28:d1:0e:14:6e:a0:
         86:5c:f7:78:64:05:f3:f9:a1:fd:9e:c6:5b:56:bf:93:45:63:
         fb:82:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org