Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/V9TlN-8jD4cc9cfa5gLDaQKkKIs.roa
File:                     V9TlN-8jD4cc9cfa5gLDaQKkKIs.roa (raw, json)
Hash identifier:          a4jB3lW2goOiNguA4StII3cN7Ld1lkT8KVBoP9dLHps=
Subject key identifier:   57:D4:E5:37:EF:23:0F:87:1C:F5:C7:DA:E6:02:C3:69:02:A4:28:8B
Certificate issuer:       /CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Certificate serial:       01856F26B92063129E216446474E13450FAE
Authority key identifier: 78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/V9TlN-8jD4cc9cfa5gLDaQKkKIs.roa
Signing time:             Sun 01 Jan 2023 21:04:46 +0000
ROA not before:           Sun 01 Jan 2023 21:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212833
IP address blocks:        188.215.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:26:b9:20:63:12:9e:21:64:46:47:4e:13:45:0f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
        Validity
            Not Before: Jan  1 21:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57d4e537ef230f871cf5c7dae602c36902a4288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:c9:b5:01:7c:73:71:dc:5f:9d:57:a4:ae:
                    29:00:d4:73:2d:4d:a8:3b:e4:53:86:1d:c5:b3:a2:
                    50:28:89:66:09:62:f6:87:91:99:27:d9:7c:87:f4:
                    ec:1b:30:99:47:fb:68:8c:95:6f:35:1c:bc:d4:99:
                    be:95:d7:cc:37:cc:f3:62:56:c5:3b:d3:1c:36:28:
                    25:84:ae:d4:60:67:f5:2a:6c:1f:fb:03:31:12:e3:
                    b6:16:b3:9c:22:16:64:4b:39:9f:54:78:64:8e:54:
                    1c:27:c3:39:04:99:dc:00:9c:3c:27:b2:7b:99:31:
                    2b:b5:52:b6:a1:07:19:c8:f1:0f:cc:b4:bc:f6:71:
                    56:51:d4:37:28:e5:84:4a:65:5d:3c:4f:90:1d:67:
                    e6:60:a3:fb:c0:4f:34:27:60:88:1b:1c:89:af:43:
                    37:fc:63:64:cc:06:9f:74:57:cd:f3:ca:93:29:fc:
                    a0:3c:0f:67:01:23:7a:29:66:95:b2:7c:5f:37:b1:
                    44:cf:45:f2:47:99:b4:03:2c:72:1d:b4:af:79:5a:
                    6d:6c:9f:59:21:f0:a9:3e:02:e6:3c:90:14:85:48:
                    36:57:93:b5:47:a9:84:13:8a:e4:65:db:10:95:87:
                    04:50:2a:11:6f:9d:ba:0d:02:da:0b:62:53:50:97:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:E5:37:EF:23:0F:87:1C:F5:C7:DA:E6:02:C3:69:02:A4:28:8B
            X509v3 Authority Key Identifier:
                keyid:78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/V9TlN-8jD4cc9cfa5gLDaQKkKIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/eLxmIayciJJ701pq73kdb_YpxpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:68:e9:f0:1c:4c:08:ac:99:89:c1:2e:12:f9:cd:02:0c:
         26:35:ae:a8:a5:71:a7:92:48:d1:40:74:1d:d5:8f:9b:aa:30:
         f2:c1:75:43:d4:eb:37:48:ee:52:6f:5b:6c:a8:43:c4:f6:32:
         0e:80:f1:d1:bb:9a:88:21:1a:ab:83:0e:8d:c2:d9:59:6c:f6:
         ac:98:96:18:a1:a4:e0:9c:ea:fe:49:87:fe:f0:3e:ad:17:80:
         42:59:fd:d8:09:77:56:4d:bb:cc:6d:f4:ec:94:9f:f7:12:c1:
         31:cf:55:84:b0:7c:f1:b3:47:34:0e:2b:98:95:ce:99:30:72:
         58:5d:86:24:4a:65:d0:4a:af:0a:8b:97:9e:5f:26:21:02:25:
         b5:b2:94:9d:20:4b:ed:ef:c0:cc:7f:e0:ac:31:1f:36:2d:0d:
         09:1d:46:68:25:14:5c:cb:3b:7a:0f:2a:bc:f4:75:12:39:a7:
         f1:d2:1c:68:ff:59:39:a2:79:c1:78:50:26:c6:fe:e3:d0:98:
         89:a2:e7:8e:e4:59:ed:3e:86:36:b2:6b:31:02:38:65:03:8c:
         a8:58:55:01:e0:24:d4:d0:4c:68:4f:c9:d1:9e:c2:4d:70:67:
         7b:7d:14:8d:c6:a4:75:7d:8a:b0:f3:49:86:ab:36:27:de:04:
         ab:37:78:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJrkgYxKeIWRGR04TRQ+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YmM2NjIxYWM5Yzg4OTI3YmQzNWE2YWVmNzkxZDZmZjYy
OWM2OTYwHhcNMjMwMTAxMjEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Q0ZTUzN2VmMjMwZjg3MWNmNWM3ZGFlNjAyYzM2OTAyYTQyODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2jJtQF8c3HcX51XpK4pANRzLU2o
O+RThh3Fs6JQKIlmCWL2h5GZJ9l8h/TsGzCZR/tojJVvNRy81Jm+ldfMN8zzYlbF
O9McNiglhK7UYGf1Kmwf+wMxEuO2FrOcIhZkSzmfVHhkjlQcJ8M5BJncAJw8J7J7
mTErtVK2oQcZyPEPzLS89nFWUdQ3KOWESmVdPE+QHWfmYKP7wE80J2CIGxyJr0M3
/GNkzAafdFfN88qTKfygPA9nASN6KWaVsnxfN7FEz0XyR5m0AyxyHbSveVptbJ9Z
IfCpPgLmPJAUhUg2V5O1R6mEE4rkZdsQlYcEUCoRb526DQLaC2JTUJf2RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFfU5TfvIw+HHPXH2uYCw2kCpCiLMB8GA1UdIwQY
MBaAFHi8ZiGsnIiSe9Naau95HW/2KcaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUx4bUlheWNpSko3MDFwcTcza2RiX1lweHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YmI3MjMtNzg0MC00YzEzLTg2ZGUt
NGEwMjljZGU0YzJhLzEvVjlUbE4tOGpENGNjOWNmYTVnTERhUUtrS0lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85YmI3MjMtNzg0MC00YzEzLTg2ZGUtNGEwMjljZGU0YzJh
LzEvZUx4bUlheWNpSko3MDFwcTcza2RiX1lweHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNfgMA0G
CSqGSIb3DQEBCwUAA4IBAQBWW2jp8BxMCKyZicEuEvnNAgwmNa6opXGnkkjRQHQd
1Y+bqjDywXVD1Os3SO5Sb1tsqEPE9jIOgPHRu5qIIRqrgw6NwtlZbPasmJYYoaTg
nOr+SYf+8D6tF4BCWf3YCXdWTbvMbfTslJ/3EsExz1WEsHzxs0c0DiuYlc6ZMHJY
XYYkSmXQSq8Ki5eeXyYhAiW1spSdIEvt78DMf+CsMR82LQ0JHUZoJRRcyzt6Dyq8
9HUSOafx0hxo/1k5onnBeFAmxv7j0JiJoueO5FntPoY2smsxAjhlA4yoWFUB4CTU
0ExoT8nRnsJNcGd7fRSNxqR1fYqw80mGqzYn3gSrN3hn
-----END CERTIFICATE-----
Generated at Mon Nov 6 10:35:12 2023 by rpki-client on console-fra.rpki-client.org