Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/99zYbdbF7PWeHYw4kCF68pN_MWM.roa
File:                     99zYbdbF7PWeHYw4kCF68pN_MWM.roa (raw, json)
Hash identifier:          6xl3q9GDun6LOnL4ZRQIX4HXchiL4lRx0PDC+bJk/D0=
Subject key identifier:   F7:DC:D8:6D:D6:C5:EC:F5:9E:1D:8C:38:90:21:7A:F2:93:7F:31:63
Certificate issuer:       /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial:       05B746
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/99zYbdbF7PWeHYw4kCF68pN_MWM.roa
Signing time:             Thu 03 Feb 2022 19:58:03 +0000
ROA not before:           Thu 03 Feb 2022 19:58:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211936
IP address blocks:        93.113.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374598 (0x5b746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Validity
            Not Before: Feb  3 19:58:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7dcd86dd6c5ecf59e1d8c3890217af2937f3163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:ea:2e:d5:2e:34:bb:9c:1c:13:6c:01:7d:
                    f7:61:92:df:ee:31:8d:59:9e:41:c3:f6:59:65:a9:
                    a4:89:67:ad:ae:0f:68:bb:3b:49:85:ad:97:05:6e:
                    52:a2:bc:a6:ee:82:79:11:29:c8:76:de:e8:ea:21:
                    47:c3:2d:74:55:c3:4c:a3:c6:75:1e:0e:52:f9:b8:
                    a6:d1:eb:26:cf:d6:38:b0:b6:bd:19:da:4f:d9:f1:
                    0d:ec:74:5c:52:8a:80:99:bd:aa:cc:cc:83:78:37:
                    33:c3:e3:5c:54:18:6b:b4:46:d0:7a:b4:44:16:68:
                    88:db:15:c5:83:87:78:66:9b:ee:12:1a:31:bf:73:
                    04:da:85:29:99:25:3a:a1:48:66:2a:2c:61:63:cd:
                    29:e2:c2:c2:fd:38:cf:3b:b5:9d:f2:2e:55:46:ee:
                    07:c4:75:ac:3e:3d:94:dd:b8:a0:a8:bb:d7:3a:55:
                    9a:46:db:49:a2:5a:f1:98:86:68:e9:e2:bd:1a:7f:
                    f5:58:ed:86:6f:f4:51:c4:8e:10:1b:c6:14:b6:0b:
                    c9:53:fc:74:68:a0:9e:5b:06:1c:f1:8d:8d:63:c6:
                    0b:d4:8a:2d:d2:78:00:1f:37:96:e0:da:58:a7:05:
                    02:2b:67:7b:e3:34:65:05:be:df:44:f0:90:80:46:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DC:D8:6D:D6:C5:EC:F5:9E:1D:8C:38:90:21:7A:F2:93:7F:31:63
            X509v3 Authority Key Identifier:
                keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/99zYbdbF7PWeHYw4kCF68pN_MWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:af:75:40:6f:b0:fd:c0:fb:5b:b1:0c:ab:b1:6a:52:28:e6:
         5b:bf:d6:0f:02:c5:66:66:25:b2:60:a7:5b:c8:a8:31:40:da:
         b7:1e:12:14:c4:0b:cb:10:35:ea:ae:37:6f:b3:4e:eb:cd:a4:
         05:3e:80:b9:dd:f0:77:c0:cd:dc:f0:5d:03:13:23:27:0c:70:
         91:6b:27:0b:72:35:89:31:7b:f6:4c:63:f9:c3:96:76:66:ae:
         f5:ee:0d:96:e8:d8:70:9e:55:0f:ad:55:cb:5c:a6:a4:30:62:
         ac:6f:1e:7e:be:10:71:f3:88:31:fb:c3:2d:06:2a:0f:b2:ad:
         b0:ad:07:ee:f4:8a:99:67:68:ca:63:65:d1:5b:9b:4a:35:28:
         c7:e4:7b:d6:0e:be:7a:af:eb:b9:d3:48:e7:dd:6f:89:f1:3c:
         39:13:32:df:e9:21:43:8c:fa:22:ec:b0:ac:cb:28:99:f8:97:
         0b:ab:ab:68:3f:b6:20:e6:01:71:6d:b6:db:c0:ef:13:89:66:
         91:86:07:48:5f:8f:58:c2:02:9f:b1:54:7a:59:cf:b6:e8:19:
         73:3f:72:46:46:0d:01:e7:84:87:af:ce:ce:c1:15:3d:50:fb:
         5a:93:80:3b:11:45:e2:9b:51:b1:b8:88:38:c9:0d:e0:64:a6:
         ba:24:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org