Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/C3GOPDMyPcTACLSR4lnMvrSZtEU.roa
File:                     C3GOPDMyPcTACLSR4lnMvrSZtEU.roa (raw, json)
Hash identifier:          u4H3HfcAKGgVnxJNRptkVNjLoN+PcylQ3s0I3I3Y5Ck=
Subject key identifier:   0B:71:8E:3C:33:32:3D:C4:C0:08:B4:91:E2:59:CC:BE:B4:99:B4:45
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       01856F022BB3E0CC4DDDABC579EF0B4E4F76
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/C3GOPDMyPcTACLSR4lnMvrSZtEU.roa
Signing time:             Sun 01 Jan 2023 20:24:51 +0000
ROA not before:           Sun 01 Jan 2023 20:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399734
IP address blocks:        83.231.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:2b:b3:e0:cc:4d:dd:ab:c5:79:ef:0b:4e:4f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 20:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b718e3c33323dc4c008b491e259ccbeb499b445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:4c:0f:59:8d:df:46:0e:d5:dc:37:6c:53:
                    3b:08:23:59:b9:64:39:9e:8d:4a:15:5a:51:73:a9:
                    5e:25:55:58:46:99:dd:d3:2b:8f:1f:0c:e8:41:c0:
                    62:eb:b3:3f:91:ed:a1:5f:de:39:ad:00:95:2d:9a:
                    b4:23:bd:d1:e7:2d:f0:39:0f:2a:84:53:dc:58:d7:
                    73:45:88:fe:00:02:38:12:e2:2b:0e:5f:e3:90:a0:
                    41:72:fd:cf:39:b7:aa:91:63:77:90:19:55:64:ad:
                    f0:2e:e0:c2:8f:e0:34:55:fb:f2:a9:7e:14:08:a4:
                    43:bb:04:40:a7:de:87:06:7d:fb:5e:46:f8:45:78:
                    92:2a:b9:d9:ec:16:83:50:79:f9:d0:31:7c:a8:94:
                    84:af:d5:77:ec:83:18:26:8c:0e:34:02:53:bb:27:
                    23:3c:88:18:26:51:ae:a2:09:77:93:28:96:29:ac:
                    06:28:31:45:6b:d7:c3:17:08:e0:e4:39:f8:f7:4d:
                    ec:63:69:a8:3c:53:39:0e:f6:a2:29:36:9a:04:ab:
                    89:be:88:1d:11:0c:c7:05:25:20:40:8d:e1:b3:fa:
                    57:e0:3c:28:75:fc:eb:69:36:40:16:55:1f:bd:18:
                    68:5d:12:ca:ad:1b:b3:8a:f5:c5:f8:e8:a5:49:91:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:71:8E:3C:33:32:3D:C4:C0:08:B4:91:E2:59:CC:BE:B4:99:B4:45
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/C3GOPDMyPcTACLSR4lnMvrSZtEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.231.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:11:3b:64:36:f3:e1:10:ed:5c:58:5b:df:5d:4d:67:50:
         76:ad:49:d8:6f:b5:29:cc:ba:71:2e:1c:2f:55:d1:f4:f8:38:
         2c:95:47:81:5d:f1:c3:f8:74:ef:72:be:f6:e6:db:3c:d6:be:
         e6:de:cd:3b:d9:9e:97:e4:f1:c2:fc:8c:f9:25:0a:22:c0:d4:
         53:a3:61:de:7e:2f:27:8d:2a:f1:cb:fc:cd:55:b2:5e:cc:1b:
         03:f1:ca:09:40:0e:2c:b2:46:9a:c4:ee:71:26:0a:df:c4:a8:
         85:18:45:ca:fb:32:ab:94:dc:1e:2d:69:7b:f7:fe:15:61:5f:
         b2:bb:18:0d:6b:d5:68:eb:20:05:3e:32:22:8d:36:31:e6:a8:
         3d:45:f5:2e:c3:a4:fa:8b:8d:c2:4a:23:8c:51:9b:52:18:5b:
         1b:84:81:b3:1e:2c:44:fa:7e:c0:76:fb:d3:2a:65:88:d7:a3:
         a0:fb:64:a9:0e:3e:10:1e:e9:bd:78:92:05:63:da:36:7a:d5:
         44:ea:0b:1c:3f:1a:89:f9:4f:d0:9c:85:fe:81:aa:c5:74:8d:
         61:0e:f4:44:6a:b7:2d:12:fd:77:2d:fc:b7:a0:e9:b2:89:a9:
         f0:4f:0e:a3:e9:ca:a7:8e:05:15:d4:cb:6d:ca:16:87:2e:b0:
         94:0c:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org