Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/A8GHIgIGsKJxsxa92e5bdcfjfEc.roa
File:                     A8GHIgIGsKJxsxa92e5bdcfjfEc.roa (raw, json)
Hash identifier:          6fMeVYPyrN87S5mBQZL/q312YN5rx3QCh4nz0dPZCmM=
Subject key identifier:   03:C1:87:22:02:06:B0:A2:71:B3:16:BD:D9:EE:5B:75:C7:E3:7C:47
Certificate issuer:       /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial:       01856F825399DA61EB6C7BDC4541C2D5E1B3
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/A8GHIgIGsKJxsxa92e5bdcfjfEc.roa
Signing time:             Sun 01 Jan 2023 22:44:50 +0000
ROA not before:           Sun 01 Jan 2023 22:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206492
IP address blocks:        62.65.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:53:99:da:61:eb:6c:7b:dc:45:41:c2:d5:e1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
        Validity
            Not Before: Jan  1 22:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03c187220206b0a271b316bdd9ee5b75c7e37c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:31:d0:bf:08:25:ee:f3:b3:fe:a6:96:74:
                    d7:75:91:3a:dd:e9:5d:a9:28:a8:34:96:e3:74:57:
                    1e:22:a4:25:27:fd:14:45:92:1c:cf:5a:f5:27:44:
                    40:11:c0:2f:67:7c:60:9c:cc:fd:15:76:3e:65:dd:
                    91:c1:db:b3:a4:c7:4d:30:ae:cc:77:7a:d3:92:3b:
                    aa:eb:ef:c1:1b:73:38:08:fe:dd:c7:d9:69:fc:cb:
                    f2:83:32:29:58:7b:e1:68:bc:61:d0:df:be:00:ae:
                    4b:dd:c5:f7:68:a7:f1:31:a5:66:66:5c:39:1a:6d:
                    fe:aa:10:2b:23:dc:0f:bb:e3:ff:3c:b1:57:44:60:
                    af:6a:01:de:d2:e5:50:18:f9:8e:69:20:8e:92:d0:
                    71:a8:99:23:da:cd:94:86:49:4c:a1:79:e4:a4:13:
                    75:97:72:88:61:07:c6:43:63:d0:00:a3:bb:71:07:
                    37:59:38:72:22:f6:f5:09:cb:9d:26:b1:fc:d4:88:
                    d1:24:db:a1:b8:59:e0:df:f8:f7:6d:c4:49:ee:a5:
                    b0:3b:a3:17:2c:a5:36:5d:f1:b5:60:b2:84:1d:1a:
                    37:5d:2f:7c:cc:a6:b6:dc:cb:c3:92:69:e6:01:77:
                    23:21:77:82:ec:43:e8:b8:d3:89:cb:5a:a5:07:9d:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:87:22:02:06:B0:A2:71:B3:16:BD:D9:EE:5B:75:C7:E3:7C:47
            X509v3 Authority Key Identifier:
                keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/A8GHIgIGsKJxsxa92e5bdcfjfEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.65.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:b8:45:35:a4:70:31:db:27:2d:96:66:ed:5d:40:f0:80:
         32:07:dc:bd:9b:bf:61:25:43:35:e2:c1:20:f9:64:92:33:c3:
         bd:64:44:ad:09:d6:ae:58:5d:1f:61:56:04:68:e5:fc:2d:7a:
         6d:7a:93:98:28:fa:b0:18:0f:77:02:65:17:67:9b:3d:b0:6f:
         c3:9f:c8:42:0f:1d:4a:ae:7c:81:d1:e0:29:af:75:18:d1:4f:
         54:f9:8a:6b:d4:b1:82:9d:bb:cb:33:26:f4:ef:4f:85:87:1f:
         c8:e5:74:e9:d6:36:1f:4a:f5:a6:4a:15:83:65:14:22:b3:d9:
         93:c6:a7:8f:b9:1c:48:57:48:20:b6:d8:b3:8a:71:82:12:d5:
         02:ed:ae:96:05:17:3c:78:50:0e:c1:4e:f8:28:6d:82:6c:c2:
         f4:8a:ab:d1:0e:17:0a:1a:25:b4:58:0f:32:b4:10:d3:96:71:
         27:a1:7e:e4:5e:24:82:b6:ec:b3:b4:f4:0b:3e:62:4f:fc:90:
         d0:df:cc:75:d0:11:9c:72:1d:be:10:4f:ce:0d:8c:dc:a6:f7:
         4c:87:69:68:5c:a8:28:7a:94:14:f1:73:01:99:e4:42:0e:3e:
         be:97:1a:de:c3:b6:c9:3a:ca:39:a7:39:00:5c:a1:37:ec:92:
         66:20:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:16 2023 by rpki-client on console-fra.rpki-client.org