Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/PL89Q9gI5sKJrJdliYb0ZEpRpvA.roa
File:                     PL89Q9gI5sKJrJdliYb0ZEpRpvA.roa (raw, json)
Hash identifier:          29/iOg/C/wTmCMI85WdKpzPHFEGVLMfrTzv1vjl1PyY=
Subject key identifier:   3C:BF:3D:43:D8:08:E6:C2:89:AC:97:65:89:86:F4:64:4A:51:A6:F0
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       0DAEF65A
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/PL89Q9gI5sKJrJdliYb0ZEpRpvA.roa
Signing time:             Sat 01 Jan 2022 08:59:36 +0000
ROA not before:           Sat 01 Jan 2022 08:59:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198461
IP address blocks:        81.93.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229570138 (0xdaef65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 08:59:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3cbf3d43d808e6c289ac97658986f4644a51a6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:f5:ae:1f:97:22:6a:41:9c:9a:9c:15:9f:
                    f8:51:31:7a:df:28:4a:0e:65:99:ec:52:04:55:ad:
                    3e:f2:f4:b1:ba:f9:a4:f3:ad:ae:98:47:4e:e1:72:
                    ab:4b:b5:e2:8d:54:8a:a4:c7:84:cf:5e:b6:85:98:
                    30:99:44:5f:dd:c5:61:3f:96:b9:e4:ed:7d:67:9b:
                    f6:8b:af:71:81:db:71:1f:15:8f:d7:22:9b:dc:1a:
                    c6:47:33:f9:32:ea:7a:dd:26:9e:2d:1e:48:03:91:
                    52:d0:cb:62:b6:b3:26:f1:2d:98:4e:15:93:80:24:
                    fa:ca:48:57:c1:d2:6c:4a:bb:fa:3b:80:a2:8e:44:
                    d9:b5:d3:ae:14:56:da:ef:91:da:f4:0a:89:cf:ee:
                    70:eb:ec:d6:67:6e:1e:e0:d4:99:9d:b9:b9:5c:30:
                    51:18:75:bb:89:96:00:00:29:0b:da:14:4e:0c:1f:
                    2a:3b:a1:aa:e0:03:1b:d5:48:5d:b5:ce:e3:64:b4:
                    48:a0:9d:44:84:a4:61:7b:af:24:a3:74:c8:e2:c5:
                    b7:75:c7:07:6f:ff:26:dd:0c:24:8b:36:0d:ba:ee:
                    74:5d:6f:a7:0b:e8:6c:4d:53:81:64:86:16:da:1f:
                    db:55:db:69:c6:6c:18:5a:fd:ab:f9:91:80:de:d6:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BF:3D:43:D8:08:E6:C2:89:AC:97:65:89:86:F4:64:4A:51:A6:F0
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/PL89Q9gI5sKJrJdliYb0ZEpRpvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.93.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:08:46:95:2c:dd:57:cf:e7:6a:6d:c2:7f:66:fc:fc:19:fe:
         4a:7b:0d:0b:00:db:92:88:59:66:a2:d5:7e:de:2b:36:35:90:
         15:45:75:16:e8:ab:b9:36:5a:0b:6d:ae:b0:f1:88:92:a6:d4:
         e6:06:87:88:3f:c0:7c:39:27:ec:90:7d:34:d6:55:59:18:f8:
         b9:17:36:6f:b6:b3:1a:69:c2:b0:bc:85:35:c8:b8:db:de:22:
         2b:56:4d:ad:91:26:4f:16:77:20:7a:23:d0:e5:2f:97:32:5e:
         05:f6:a3:31:93:81:17:44:85:41:76:1f:49:28:ca:c3:6d:2d:
         1e:51:ef:0d:98:74:62:8b:3b:26:3d:97:72:45:cc:cd:b5:c3:
         5e:25:7e:18:93:91:46:41:f0:1b:bd:1a:34:04:0e:5a:86:39:
         16:0f:ce:ba:25:14:8f:9f:76:46:79:3b:9e:7f:33:52:af:90:
         33:5b:ea:4a:9f:8b:cd:d7:dd:43:f9:35:d0:d9:3e:1c:0b:53:
         5d:11:09:f4:1b:0c:04:bd:67:6a:6e:a7:9e:98:79:3a:cf:c1:
         99:77:24:f6:09:f4:db:74:87:3f:63:1c:01:b1:41:fe:f2:18:
         66:a6:a5:d4:9f:13:03:6c:08:fa:38:53:a0:84:51:b1:ab:d8:
         0e:fb:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org