Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/QPadtN1q-j8V9YJ2ZZiNqZlbB_Y.roa
File:                     QPadtN1q-j8V9YJ2ZZiNqZlbB_Y.roa (raw, json)
Hash identifier:          oI5vtEKuuRHaVPBOcB8rvKzOgPU4gZhVQ5E0nQRv1RI=
Subject key identifier:   40:F6:9D:B4:DD:6A:FA:3F:15:F5:82:76:65:98:8D:A9:99:5B:07:F6
Certificate issuer:       /CN=78bc7ccc151657694f5d27aee131704bf1fb89b2
Certificate serial:       01831B
Authority key identifier: 78:BC:7C:CC:15:16:57:69:4F:5D:27:AE:E1:31:70:4B:F1:FB:89:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLx8zBUWV2lPXSeu4TFwS_H7ibI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/QPadtN1q-j8V9YJ2ZZiNqZlbB_Y.roa
Signing time:             Thu 24 Mar 2022 11:35:20 +0000
ROA not before:           Thu 24 Mar 2022 11:35:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.202.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99099 (0x1831b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bc7ccc151657694f5d27aee131704bf1fb89b2
        Validity
            Not Before: Mar 24 11:35:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40f69db4dd6afa3f15f5827665988da9995b07f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a3:aa:5e:19:dc:b9:4d:1e:6d:7f:0c:ca:5f:
                    ad:39:6c:49:02:d5:43:02:56:f5:72:c5:16:6a:5c:
                    5e:54:79:03:66:1d:74:15:62:64:80:27:2c:70:25:
                    fe:7b:73:f7:01:df:9f:6a:e1:d3:6e:53:91:e9:c9:
                    4a:c9:ca:14:b2:88:97:63:bf:ef:fb:10:8a:41:ee:
                    65:f9:b0:d3:ba:d8:94:00:49:56:0b:2c:ac:95:ee:
                    bd:47:87:d7:7e:b6:cb:fc:72:c8:37:df:fd:13:02:
                    ba:44:45:1e:1e:58:8c:09:0f:69:8b:5d:9b:0b:6f:
                    50:4a:7f:5c:00:6a:2b:d0:42:4e:80:c2:70:0e:60:
                    db:4c:1c:b3:b0:c0:40:7d:82:96:66:af:8c:7c:28:
                    27:7d:48:a1:ef:b8:e4:cf:34:ec:08:0c:40:e8:4a:
                    3c:7f:ba:db:3c:0c:d3:07:86:85:7a:e7:36:e2:a2:
                    e1:46:fd:8e:67:a6:34:a7:c5:a6:bb:16:5b:80:b7:
                    b4:7b:ed:72:10:d6:83:61:2f:14:35:7c:66:56:8c:
                    c6:0c:bb:2b:d1:07:57:92:30:ec:2b:f9:c9:10:2d:
                    f7:17:f5:8b:f1:0e:86:e1:56:1f:36:2d:50:03:0d:
                    1d:45:db:c4:2d:78:28:ec:b9:43:29:f6:19:35:a8:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F6:9D:B4:DD:6A:FA:3F:15:F5:82:76:65:98:8D:A9:99:5B:07:F6
            X509v3 Authority Key Identifier:
                keyid:78:BC:7C:CC:15:16:57:69:4F:5D:27:AE:E1:31:70:4B:F1:FB:89:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLx8zBUWV2lPXSeu4TFwS_H7ibI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/QPadtN1q-j8V9YJ2ZZiNqZlbB_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0830e8-6601-4718-9a1d-5e533905175f/1/eLx8zBUWV2lPXSeu4TFwS_H7ibI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:d9:d0:ab:9e:ff:25:4a:dc:47:a5:7a:aa:34:4c:bc:1a:
         c1:73:56:1f:80:a9:4a:66:f9:95:7a:00:61:af:e4:fc:81:27:
         77:ff:01:c6:ad:62:33:38:89:9d:f7:d5:ce:75:65:61:04:8e:
         90:9b:74:26:72:e0:85:cb:92:a0:c1:cc:d3:00:cb:14:3e:91:
         6e:e2:31:1d:74:cb:68:f5:ce:8b:67:37:3a:e3:51:d6:ef:bd:
         1f:cd:84:f8:c0:e9:6c:b7:d5:90:11:39:10:aa:22:91:4a:1c:
         11:79:4f:7e:8f:fc:02:1e:4e:43:29:a1:8a:43:da:b6:84:bd:
         40:00:29:a4:ea:bb:ba:60:8a:98:f4:c3:e3:85:e5:79:27:a3:
         96:c6:53:7f:ca:be:f2:2e:6b:2e:4c:62:c6:9d:2e:61:a1:c4:
         e0:e2:0c:bc:37:43:ed:29:db:02:0f:46:d1:e9:f6:f6:66:af:
         d8:89:cc:61:93:ea:cf:fd:0d:32:29:64:4f:56:2c:ea:f7:59:
         df:50:1d:8c:c1:35:15:4b:20:ce:f6:05:37:31:2f:41:9a:23:
         80:fe:e2:00:3d:f5:ee:9e:ed:f1:f4:53:a0:62:b8:fd:5b:19:
         1e:a0:b0:49:7e:8a:c3:ee:a4:12:e1:49:2b:27:52:cc:79:09:
         9f:8c:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:47 2023 by rpki-client on console-ams.rpki-client.org