Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa
File:                     q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa (raw, json)
Hash identifier:          b9vc/Tnq40WhNSaPvW6nwFRkAP3a/QEuchVnpRCObEA=
Subject key identifier:   AB:B7:87:3C:81:37:B6:C9:F6:28:4D:B1:60:09:51:1E:35:84:F9:53
Certificate issuer:       /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial:       0186547E12723D0FE1B3B7EDE8BC1BEE6772
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa
Signing time:             Wed 15 Feb 2023 09:53:13 +0000
ROA not before:           Wed 15 Feb 2023 09:53:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207326
IP address blocks:        45.85.92.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:54:7e:12:72:3d:0f:e1:b3:b7:ed:e8:bc:1b:ee:67:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
        Validity
            Not Before: Feb 15 09:53:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abb7873c8137b6c9f6284db16009511e3584f953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:94:23:ac:69:4e:05:76:d4:aa:dd:e2:b1:
                    22:e0:59:c3:e5:1f:f0:d2:e6:14:62:43:ca:60:2d:
                    1d:b9:26:6e:4f:d2:c3:c2:85:be:76:e3:1d:a8:1c:
                    4e:a6:8a:0a:24:5d:05:d7:60:f7:08:5a:17:6d:22:
                    c3:26:c7:98:41:3b:42:a6:15:4d:34:97:ff:1f:91:
                    78:81:da:b3:c6:54:2a:64:02:c2:54:8f:c7:3a:c8:
                    52:da:ce:2d:10:49:30:27:bb:e5:53:76:fb:b7:71:
                    c5:04:04:78:f6:96:c8:f6:33:e4:3c:f8:89:7d:66:
                    a8:b7:fb:5c:24:ec:88:2e:e3:c5:4a:42:21:37:ae:
                    bd:0a:81:17:92:8a:e6:67:32:1a:e6:a2:b5:bc:a3:
                    1b:4f:c2:5c:41:9c:1f:4a:f8:d6:37:39:c1:a5:c7:
                    3a:7b:9f:c6:af:df:89:a5:b1:5d:9b:97:10:3d:b3:
                    e7:c7:0d:56:43:ad:39:ae:c7:51:02:38:14:b5:11:
                    a2:60:80:d2:44:c1:4a:c5:d7:45:1e:0b:9d:88:59:
                    7c:6a:5c:6d:03:c8:1b:51:3e:85:40:1e:ac:86:23:
                    2f:5b:7c:cb:df:7c:b7:2a:0a:c6:21:76:7e:d8:b0:
                    32:0d:b1:3a:47:49:8e:f5:64:56:3f:e4:2a:f3:f8:
                    ce:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B7:87:3C:81:37:B6:C9:F6:28:4D:B1:60:09:51:1E:35:84:F9:53
            X509v3 Authority Key Identifier:
                keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/q7eHPIE3tsn2KE2xYAlRHjWE-VM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:d9:e2:9d:7d:06:bf:ac:1e:89:dc:25:17:20:9e:0f:c8:72:
         2d:bf:97:89:ef:51:9f:71:8a:13:c0:91:68:e9:dc:cc:6b:14:
         d1:60:b8:ab:a7:b7:34:41:2b:03:96:a6:2e:3b:9d:02:c3:b9:
         94:ce:77:8c:4b:ba:b8:d1:0c:fd:9b:d8:0b:3d:63:2a:b8:09:
         91:57:f1:ef:3d:8e:ed:8e:ff:5b:28:4e:b5:b8:57:34:06:7c:
         20:64:34:59:f3:c0:29:28:2f:b5:b0:91:dd:60:60:54:eb:4f:
         34:f1:3d:d1:63:3b:ca:ae:e4:c4:f4:40:b7:57:54:65:16:a6:
         51:7a:8b:50:9d:5b:88:c5:9d:f8:02:a7:19:59:47:0c:09:a5:
         0b:ba:6a:f0:5e:96:a7:cd:88:38:0e:62:a6:57:9b:83:e6:a0:
         23:7f:40:5f:ae:6a:1d:04:be:0d:18:1a:b7:2b:77:13:b9:79:
         79:65:09:5e:bd:82:45:c0:9a:88:2e:f1:cb:5d:e7:df:34:70:
         82:65:2f:54:fc:80:50:58:c6:93:5e:08:91:8a:a0:97:00:e9:
         d9:b1:ff:55:ab:91:f8:d6:5d:78:08:8d:9f:69:15:66:e8:bf:
         bd:cc:ce:e5:0e:07:fd:70:66:40:88:b9:11:d5:73:85:f6:a5:
         a1:30:b1:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZUfhJyPQ/hs7ft6Lwb7mdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjYyYjNjZmE4YjkwNTkwNjhjMjlkNDZiOTkyNjNiYTJk
ZTUwYzEwHhcNMjMwMjE1MDk1MzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmI3ODczYzgxMzdiNmM5ZjYyODRkYjE2MDA5NTExZTM1ODRmOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK2UI6xpTgV21Krd4rEi4FnD5R/w
0uYUYkPKYC0duSZuT9LDwoW+duMdqBxOpooKJF0F12D3CFoXbSLDJseYQTtCphVN
NJf/H5F4gdqzxlQqZALCVI/HOshS2s4tEEkwJ7vlU3b7t3HFBAR49pbI9jPkPPiJ
fWaot/tcJOyILuPFSkIhN669CoEXkormZzIa5qK1vKMbT8JcQZwfSvjWNznBpcc6
e5/Gr9+JpbFdm5cQPbPnxw1WQ605rsdRAjgUtRGiYIDSRMFKxddFHgudiFl8alxt
A8gbUT6FQB6shiMvW3zL33y3KgrGIXZ+2LAyDbE6R0mO9WRWP+Qq8/jOtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKu3hzyBN7bJ9ihNsWAJUR41hPlTMB8GA1UdIwQY
MBaAFJ9mKzz6i5BZBowp1GuZJjui3lDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJZclBQcUxrRmtHakNuVWE1a21PNkxlVU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yNTEyYzUtMjUyYi00OTY3LTg5YTct
NmExZjk3ZmY4ZDM0LzEvcTdlSFBJRTN0c24yS0UyeFlBbFJIaldFLVZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yNTEyYzUtMjUyYi00OTY3LTg5YTctNmExZjk3ZmY4ZDM0
LzEvbjJZclBQcUxrRmtHakNuVWE1a21PNkxlVU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVVcMA0G
CSqGSIb3DQEBCwUAA4IBAQAL2eKdfQa/rB6J3CUXIJ4PyHItv5eJ71GfcYoTwJFo
6dzMaxTRYLirp7c0QSsDlqYuO50Cw7mUzneMS7q40Qz9m9gLPWMquAmRV/HvPY7t
jv9bKE61uFc0BnwgZDRZ88ApKC+1sJHdYGBU60808T3RYzvKruTE9EC3V1RlFqZR
eotQnVuIxZ34AqcZWUcMCaULumrwXpanzYg4DmKmV5uD5qAjf0BfrmodBL4NGBq3
K3cTuXl5ZQlevYJFwJqILvHLXeffNHCCZS9U/IBQWMaTXgiRiqCXAOnZsf9Vq5H4
1l14CI2faRVm6L+9zM7lDgf9cGZAiLkR1XOF9qWhMLG+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:33 2024 by rpki-client on console-fra.rpki-client.org