Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/GYB9PIdRDV7vh-6LuJYd-UUUdAk.roa
File:                     GYB9PIdRDV7vh-6LuJYd-UUUdAk.roa (raw, json)
Hash identifier:          FYkvE/0vbytWgkDCofI/wDPaK9AojtVv8f6iK8L9y8I=
Subject key identifier:   19:80:7D:3C:87:51:0D:5E:EF:87:EE:8B:B8:96:1D:F9:45:14:74:09
Certificate issuer:       /CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
Certificate serial:       018713E683B5A8FD35E88A8EA9F839864021
Authority key identifier: E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/GYB9PIdRDV7vh-6LuJYd-UUUdAk.roa
Signing time:             Fri 24 Mar 2023 13:54:46 +0000
ROA not before:           Fri 24 Mar 2023 13:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210255
IP address blocks:        193.22.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:13:e6:83:b5:a8:fd:35:e8:8a:8e:a9:f8:39:86:40:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
        Validity
            Not Before: Mar 24 13:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19807d3c87510d5eef87ee8bb8961df945147409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:92:a6:72:0c:6c:9a:1c:62:6f:51:d2:f7:
                    3f:5e:95:75:53:c3:5b:51:35:89:af:ab:af:1b:c3:
                    64:d6:36:57:65:27:7c:cc:56:95:5e:ca:bd:4e:c0:
                    00:e4:ad:43:a3:ad:24:e8:d7:d6:0c:a9:a6:f8:57:
                    7d:61:50:93:bf:c1:ba:1f:2e:3c:fe:c1:b0:2b:f3:
                    b7:04:ea:89:98:2a:ae:09:22:09:86:51:d4:c0:a1:
                    97:eb:0b:95:7e:34:8b:82:e0:c9:79:67:72:00:2a:
                    8b:4a:1e:b1:8d:e7:cd:5c:13:62:eb:75:86:6b:54:
                    81:7e:6d:5f:52:79:fc:4b:e1:0d:a1:47:84:70:ef:
                    67:35:a1:d9:9c:eb:a8:45:8a:a5:61:4b:3d:74:07:
                    96:53:29:39:37:43:42:c9:43:45:d8:73:89:0a:43:
                    9e:41:63:66:e2:1f:52:1a:07:57:2b:ec:7d:e3:49:
                    5b:0d:c4:d5:b8:2d:0a:ab:b7:44:89:12:54:41:db:
                    1c:2d:5f:ab:ef:13:fa:22:0f:79:84:0e:f4:bb:c2:
                    fa:c1:2e:60:83:f7:c6:4a:c7:58:62:a1:e1:fd:fe:
                    55:62:af:63:bb:ee:18:36:bf:e0:90:d1:dd:20:eb:
                    a8:12:1b:53:7c:93:f7:f7:03:37:b4:cc:47:30:43:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:7D:3C:87:51:0D:5E:EF:87:EE:8B:B8:96:1D:F9:45:14:74:09
            X509v3 Authority Key Identifier:
                keyid:E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/GYB9PIdRDV7vh-6LuJYd-UUUdAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d4:bb:27:e2:e0:3d:df:ef:34:7c:58:b2:7c:fc:97:89:60:
         cd:bf:f0:88:13:30:76:e9:92:e8:d2:b2:ad:02:4f:81:1c:a6:
         80:8f:44:c8:a3:f6:95:be:be:b4:1f:a7:1c:01:d7:5e:b9:43:
         99:58:1f:d1:2d:cc:39:b8:92:36:3c:93:f4:05:1a:02:3c:5d:
         4d:ab:6c:f8:44:f6:df:84:d9:21:0f:9a:31:f0:a1:5c:1f:5f:
         9c:55:ba:30:aa:02:62:e6:67:51:12:be:89:70:b1:2a:2e:ed:
         3e:30:81:42:ae:55:b8:7d:b8:bc:f4:1f:e0:a5:bc:f8:eb:da:
         ef:09:89:1e:c0:87:37:0f:59:75:e4:71:5b:b7:52:3e:1f:bd:
         b2:ca:8d:0b:2d:fd:17:4f:50:cf:c1:53:09:4e:e7:77:32:9b:
         57:08:04:14:3c:0b:34:77:01:d8:dd:6d:4c:36:8f:a9:bd:4e:
         63:4e:28:d0:51:1a:22:37:75:93:81:d1:3f:9f:31:ea:c0:b7:
         c6:a2:26:ca:50:bb:fb:4e:ee:1e:53:1c:09:ce:1e:e2:87:72:
         76:c1:f7:af:f0:5f:ff:20:8e:4e:48:f4:96:0c:ae:47:16:53:
         63:a3:31:88:02:db:fa:57:c2:1f:66:80:81:f7:0b:7f:f3:25:
         77:18:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:07:35 2023 by rpki-client on console-fra.rpki-client.org