Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/ER49jxuHyz_eU3XN1wWttd8-yvo.roa
File:                     ER49jxuHyz_eU3XN1wWttd8-yvo.roa (raw, json)
Hash identifier:          bg7y8KWtiwa6cFU3dstLnEl2ZJYLS5oT2jYd+Aoc368=
Subject key identifier:   11:1E:3D:8F:1B:87:CB:3F:DE:53:75:CD:D7:05:AD:B5:DF:3E:CA:FA
Certificate issuer:       /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial:       0172915A
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/ER49jxuHyz_eU3XN1wWttd8-yvo.roa
Signing time:             Wed 02 Feb 2022 11:39:59 +0000
ROA not before:           Wed 02 Feb 2022 11:39:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        130.193.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24285530 (0x172915a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
        Validity
            Not Before: Feb  2 11:39:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=111e3d8f1b87cb3fde5375cdd705adb5df3ecafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:21:b5:d7:b1:1a:94:6a:55:4f:b2:6d:00:
                    09:a5:28:b7:4e:dc:f7:3e:26:7d:a6:1a:e4:4b:52:
                    4b:f6:09:e4:61:05:fe:5e:01:51:37:f8:7c:51:14:
                    b5:26:f9:a5:2d:e0:5e:65:13:5a:fb:ea:06:b4:e3:
                    38:c8:67:df:87:03:e6:74:a9:c4:88:9a:61:38:f9:
                    90:40:b1:d8:cf:bb:bf:38:69:6d:a7:20:04:04:1f:
                    1b:d3:6a:18:77:7e:8c:c3:72:37:cf:ad:cb:85:f2:
                    56:5e:25:d1:09:6b:35:97:0e:ab:33:10:bb:8c:2c:
                    fa:30:cd:f3:af:e6:81:4c:83:f9:0a:7b:86:69:40:
                    93:7e:e7:a7:bd:df:b9:5b:98:df:65:0c:d2:a6:98:
                    cf:a0:2b:64:98:85:ae:e1:71:c6:02:54:6d:e9:f4:
                    8f:eb:09:4f:35:8b:06:30:12:1a:40:f3:cb:d5:a5:
                    8d:94:fd:fa:09:88:da:a5:19:89:4b:b5:83:07:b6:
                    91:13:3a:a5:6c:fe:30:9b:ff:87:03:a6:6c:ec:b0:
                    2c:f7:f4:cc:d8:86:25:98:03:b9:ff:83:42:f4:52:
                    80:40:f3:2b:bb:ab:db:66:90:25:e7:9c:e1:63:2a:
                    58:4b:09:7a:a6:e4:05:f0:50:03:8f:14:1b:45:07:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1E:3D:8F:1B:87:CB:3F:DE:53:75:CD:D7:05:AD:B5:DF:3E:CA:FA
            X509v3 Authority Key Identifier:
                keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/ER49jxuHyz_eU3XN1wWttd8-yvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:17:c0:0c:bf:93:61:bb:60:b8:98:ec:c9:81:17:53:bb:ab:
         4a:09:10:04:e6:68:77:d0:22:0a:62:98:b9:14:ee:7a:b0:98:
         99:61:ea:95:62:19:9e:e0:23:fc:39:59:00:e4:9e:76:90:d3:
         cc:76:a3:a2:dd:8c:23:73:ce:79:0a:46:80:f1:1d:ec:05:9b:
         7e:4c:85:26:01:25:e5:af:7e:94:52:c6:da:e1:47:e6:08:48:
         cb:7d:17:9a:40:49:3e:df:50:77:33:d8:95:58:df:52:85:81:
         40:d2:89:0d:af:75:22:a4:ff:45:39:67:2a:03:dc:8a:92:3a:
         41:eb:2b:bc:b2:e3:b2:d2:5f:7a:ce:ec:f0:3a:5f:e0:f1:a4:
         46:55:c6:ea:02:2d:c1:75:06:b2:05:5e:d7:44:57:9c:74:98:
         c4:b0:bd:44:e2:91:3e:6f:5a:87:55:29:78:92:92:77:3f:34:
         38:ed:af:e8:8b:20:be:b3:6d:78:e0:2d:83:6f:bf:ff:f4:56:
         6d:d2:a5:28:c4:6e:c2:dd:f6:db:5d:1d:91:4e:0d:e2:09:13:
         e5:ca:e2:d5:c9:a8:92:ba:57:0b:dd:24:04:23:0c:3d:cc:b3:
         4f:16:87:c1:c5:3a:16:3a:85:72:0b:89:a5:31:1a:88:ee:6c:
         4b:28:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org