Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/BrmoXsv3VbADy8f_1hx54ULeNJ8.roa
File:                     BrmoXsv3VbADy8f_1hx54ULeNJ8.roa (raw, json)
Hash identifier:          1DNOxOaaY/XM7HxzjmlS7f+BFs1KXcUKlFD9REBWx2Q=
Subject key identifier:   06:B9:A8:5E:CB:F7:55:B0:03:CB:C7:FF:D6:1C:79:E1:42:DE:34:9F
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       01856F0227D1EF4C502F51471BD5B3350574
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/BrmoXsv3VbADy8f_1hx54ULeNJ8.roa
Signing time:             Sun 01 Jan 2023 20:24:50 +0000
ROA not before:           Sun 01 Jan 2023 20:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50518
IP address blocks:        83.231.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:27:d1:ef:4c:50:2f:51:47:1b:d5:b3:35:05:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 20:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=06b9a85ecbf755b003cbc7ffd61c79e142de349f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:3e:26:d7:95:c7:19:bb:78:d4:d7:23:ba:
                    5e:e3:08:81:b2:22:10:13:6c:6f:23:21:aa:93:9c:
                    62:65:aa:3f:21:28:92:c3:1a:d5:ac:49:d6:63:37:
                    ae:a5:b2:f9:d0:17:43:9e:e8:ff:2a:88:cc:79:cf:
                    35:e0:04:27:35:5c:ed:56:ad:81:75:b6:c3:3b:93:
                    05:04:37:aa:61:cf:dc:15:6e:81:9e:cf:77:b9:a0:
                    89:8d:83:2a:0a:1c:a2:e4:f3:6d:67:ef:77:4d:02:
                    d2:d0:e6:d1:5b:4e:1f:b0:7c:1d:3f:17:c7:87:05:
                    2d:cd:26:26:8f:1d:d3:8b:84:94:71:7a:b1:f0:9d:
                    88:d8:57:db:30:a1:4d:3b:7f:95:1c:bf:3c:22:71:
                    92:f3:d3:48:48:fc:00:67:00:c7:af:73:07:7b:89:
                    da:3a:cf:8d:92:cc:85:3e:d9:2d:0d:c3:ce:9a:c7:
                    5b:0a:0e:c6:a4:cf:43:b0:5c:e1:df:6c:dc:a3:3c:
                    9f:43:31:cc:b0:31:af:c2:81:f1:90:57:44:50:b0:
                    f8:2f:b2:7b:22:88:6d:f6:7e:90:d8:d8:f3:b2:c9:
                    e4:e4:42:4b:d0:99:9a:69:ba:b4:cf:ed:eb:cc:a3:
                    e0:07:ed:40:20:60:ce:cd:40:e4:bf:57:bf:94:b4:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B9:A8:5E:CB:F7:55:B0:03:CB:C7:FF:D6:1C:79:E1:42:DE:34:9F
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/BrmoXsv3VbADy8f_1hx54ULeNJ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.231.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:40:ca:c6:9d:cd:0e:2a:fd:8c:5d:a7:1e:1d:55:65:bd:7d:
         e6:87:fc:ce:42:a8:6d:2a:f4:c3:68:c5:7e:fd:32:a5:82:20:
         19:2e:a5:5c:2b:76:40:77:9c:c9:bb:e0:7b:d9:c9:58:77:f2:
         66:a3:c3:c0:06:bd:f0:51:fb:83:65:df:7d:b7:3b:db:b9:17:
         2e:96:21:66:6a:dd:83:60:a9:be:0c:b7:5c:4d:44:48:f8:7c:
         ea:30:92:6c:d6:63:b8:25:23:b3:12:47:27:c7:a3:70:7c:d9:
         65:34:f5:e4:2e:7d:35:dd:bb:b9:e1:e0:fc:9d:3d:ed:8a:0e:
         43:37:62:ce:50:b4:d0:c1:45:d1:29:f2:bd:a4:c4:17:7d:3b:
         a2:82:4a:dc:a1:93:b2:9e:d8:45:f7:e9:4c:05:da:a5:0d:de:
         f1:b4:a3:ec:03:3d:fe:1c:9f:40:5c:2e:42:4f:ae:ec:0d:de:
         7b:ba:b8:20:5e:27:89:fe:69:54:6b:61:2a:0f:81:89:0e:13:
         8c:d9:a2:ca:4f:e2:4b:50:9c:88:d6:7d:f8:8d:d4:15:e2:64:
         73:ea:b5:5b:81:30:a3:9e:5e:f8:ac:dd:72:62:58:f7:f8:f7:
         3b:26:9e:2b:c3:a3:46:93:08:78:6f:08:51:7e:d5:44:e7:dd:
         e2:52:2e:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAifR70xQL1FHG9WzNQV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZGFiNTA3YzA4OTc2Y2MyOWQxNzczNzNkZTYyN2ExY2U4
NmVmYWUwHhcNMjMwMTAxMjAyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmI5YTg1ZWNiZjc1NWIwMDNjYmM3ZmZkNjFjNzllMTQyZGUzNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+I+JteVxxm7eNTXI7pe4wiBsiIQ
E2xvIyGqk5xiZao/ISiSwxrVrEnWYzeupbL50BdDnuj/KojMec814AQnNVztVq2B
dbbDO5MFBDeqYc/cFW6Bns93uaCJjYMqChyi5PNtZ+93TQLS0ObRW04fsHwdPxfH
hwUtzSYmjx3Ti4SUcXqx8J2I2FfbMKFNO3+VHL88InGS89NISPwAZwDHr3MHe4na
Os+NksyFPtktDcPOmsdbCg7GpM9DsFzh32zcozyfQzHMsDGvwoHxkFdEULD4L7J7
Ioht9n6Q2Njzssnk5EJL0Jmaabq0z+3rzKPgB+1AIGDOzUDkv1e/lLTDxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAa5qF7L91WwA8vH/9YceeFC3jSfMB8GA1UdIwQY
MBaAFEXatQfAiXbMKdF3Nz3mJ6HOhu+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODIt
YWEwYjExNTY0YTMyLzEvQnJtb1hzdjNWYkFEeThmXzFoeDU0VUxlTko4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODItYWEwYjExNTY0YTMy
LzEvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU+eYMA0G
CSqGSIb3DQEBCwUAA4IBAQCCQMrGnc0OKv2MXaceHVVlvX3mh/zOQqhtKvTDaMV+
/TKlgiAZLqVcK3ZAd5zJu+B72clYd/Jmo8PABr3wUfuDZd99tzvbuRculiFmat2D
YKm+DLdcTURI+HzqMJJs1mO4JSOzEkcnx6NwfNllNPXkLn013bu54eD8nT3tig5D
N2LOULTQwUXRKfK9pMQXfTuigkrcoZOynthF9+lMBdqlDd7xtKPsAz3+HJ9AXC5C
T67sDd57urggXieJ/mlUa2EqD4GJDhOM2aLKT+JLUJyI1n34jdQV4mRz6rVbgTCj
nl74rN1yYlj3+Pc7Jp4rw6NGkwh4bwhRftVE593iUi4I
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org