Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/yai-DiR8ZRjlwK_c0-mSkCxsPGU.roa
File:                     yai-DiR8ZRjlwK_c0-mSkCxsPGU.roa (raw, json)
Hash identifier:          3cczL6f4d+p09XyJTfF3zCk7os/JXQa44d+HRVFtNdA=
Subject key identifier:   C9:A8:BE:0E:24:7C:65:18:E5:C0:AF:DC:D3:E9:92:90:2C:6C:3C:65
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0487DEE9
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/yai-DiR8ZRjlwK_c0-mSkCxsPGU.roa
Signing time:             Tue 10 May 2022 10:13:03 +0000
ROA not before:           Tue 10 May 2022 10:13:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        141.11.44.0/22 maxlen: 24
                          141.11.43.0/24 maxlen: 24
                          141.11.40.0/22 maxlen: 24
                          141.11.39.0/24 maxlen: 24
                          141.11.42.0/24 maxlen: 24
                          141.11.41.0/24 maxlen: 24
                          141.11.45.0/24 maxlen: 24
                          141.11.47.0/24 maxlen: 24
                          141.11.46.0/24 maxlen: 24
                          141.11.80.0/20 maxlen: 24
                          141.11.2.0/24 maxlen: 24
                          141.11.1.0/24 maxlen: 24
                          141.11.0.0/24 maxlen: 24
                          141.11.10.0/23 maxlen: 24
                          141.11.17.0/24 maxlen: 24
                          141.11.22.0/24 maxlen: 24
                          141.11.21.0/24 maxlen: 24
                          141.11.18.0/24 maxlen: 24
                          141.11.25.0/24 maxlen: 24
                          141.11.31.0/24 maxlen: 24
                          141.11.28.0/24 maxlen: 24
                          141.11.37.0/24 maxlen: 24
                          141.11.33.0/24 maxlen: 24
                          141.11.32.0/22 maxlen: 24
                          141.11.35.0/24 maxlen: 24
                          141.11.160.0/24 maxlen: 24
                          141.11.176.0/24 maxlen: 24
                          141.11.182.0/23 maxlen: 24
                          141.11.192.0/19 maxlen: 24
                          141.11.92.0/22 maxlen: 24
                          141.11.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76013289 (0x487dee9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 10 10:13:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9a8be0e247c6518e5c0afdcd3e992902c6c3c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:7e:48:4f:66:12:c8:7c:41:f1:35:3a:51:
                    9a:65:94:93:bc:30:e2:8c:9e:dc:9f:42:e0:51:0e:
                    a7:81:62:e8:76:5e:8a:dc:e6:ed:93:24:d9:28:04:
                    5e:e2:f0:8f:9d:8f:60:80:ca:21:59:ce:53:2d:ac:
                    2e:cf:2a:1a:fc:7d:fe:11:ab:a8:ba:03:62:f2:06:
                    a8:74:5c:00:8d:75:21:1e:b6:7a:3e:72:60:76:0c:
                    c6:a0:c4:e9:74:b7:63:05:c8:3f:31:3d:77:a6:b4:
                    84:3b:2d:e1:54:22:9c:c8:51:a8:e7:74:ac:9c:53:
                    47:d6:35:4d:f8:3b:b2:0f:62:c2:03:3c:3c:27:04:
                    f2:73:e3:48:1c:7d:73:20:0d:b6:ee:54:31:43:26:
                    44:8d:ab:90:a3:e1:37:f3:df:09:a6:a3:09:5a:12:
                    68:91:b6:3f:65:04:76:3b:84:ab:2f:da:c6:6d:82:
                    ce:2f:bc:75:95:33:71:88:81:62:ce:5b:71:f0:14:
                    e3:3d:8f:78:1d:28:c2:01:a4:af:57:d6:61:d9:0f:
                    e5:b4:c0:a2:30:f3:c5:0c:da:8b:e4:62:4b:4d:b7:
                    47:bf:0c:71:e8:f4:19:96:13:dd:a1:b9:34:03:e2:
                    62:13:92:58:00:29:83:11:64:d0:4b:ed:66:8a:b8:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A8:BE:0E:24:7C:65:18:E5:C0:AF:DC:D3:E9:92:90:2C:6C:3C:65
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/yai-DiR8ZRjlwK_c0-mSkCxsPGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.0.0-141.11.2.255
                  141.11.10.0/23
                  141.11.17.0-141.11.18.255
                  141.11.21.0-141.11.22.255
                  141.11.25.0/24
                  141.11.28.0/24
                  141.11.31.0-141.11.35.255
                  141.11.37.0/24
                  141.11.39.0-141.11.47.255
                  141.11.80.0/20
                  141.11.128.0-141.11.160.255
                  141.11.176.0/24
                  141.11.182.0/23
                  141.11.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:f1:d1:b1:15:a5:be:98:40:c9:5c:5e:a4:cc:0a:59:01:
         56:3f:2e:5f:f2:bc:b6:62:f7:fa:54:17:bb:ec:cc:60:25:22:
         7b:27:a7:ee:e4:c1:8e:29:25:72:4d:e4:47:cd:cb:f4:5a:28:
         0d:9d:c0:18:8a:fc:e4:89:bc:2b:ea:f8:e5:d9:73:74:96:65:
         fe:81:98:86:7d:47:65:3c:0c:4f:a9:04:30:7a:6b:57:2f:2f:
         63:3b:c0:e7:91:53:23:f7:8c:3b:79:6e:02:fa:2f:73:df:38:
         3c:96:c5:52:33:80:fb:13:8b:9c:bb:a1:0c:9c:04:8a:2e:82:
         09:8d:f0:d2:c4:69:4f:d8:e6:1c:09:09:a3:1e:e5:42:2e:22:
         db:12:ea:59:92:23:89:4f:c6:f6:b9:43:4e:36:90:f6:96:40:
         16:b5:48:a7:f6:d7:c1:c5:da:41:1c:4b:16:e5:0f:99:b8:c7:
         81:94:50:62:e7:45:12:ec:d3:dc:c5:53:77:01:c5:d2:cc:2f:
         bb:0b:0a:19:34:38:f6:9f:da:22:8a:45:6b:91:2b:35:21:b4:
         31:c8:c7:30:1e:a7:a4:c2:ae:94:5c:fe:22:68:1a:6a:5e:ce:
         8e:b4:25:42:1d:e8:d9:34:e0:de:8e:13:98:08:c0:e7:98:5f:
         ea:82:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-fra.rpki-client.org