Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/AVew-Ktvxv7HxL7wHvyQNIM0c9E.roa
File:                     AVew-Ktvxv7HxL7wHvyQNIM0c9E.roa (raw, json)
Hash identifier:          0VtzDm6GNzVxfey2uLzE1dgtO3sJL3Fe5usY+3pTWcg=
Subject key identifier:   01:57:B0:F8:AB:6F:C6:FE:C7:C4:BE:F0:1E:FC:90:34:83:34:73:D1
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       690218
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/AVew-Ktvxv7HxL7wHvyQNIM0c9E.roa
Signing time:             Sat 25 Jun 2022 19:49:51 +0000
ROA not before:           Sat 25 Jun 2022 19:49:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        213.139.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6881816 (0x690218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Jun 25 19:49:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0157b0f8ab6fc6fec7c4bef01efc9034833473d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:7c:c1:f5:bd:06:95:3a:63:f4:3c:b2:56:
                    52:38:31:26:8a:e9:74:85:b4:60:2f:f7:5f:c9:dd:
                    c2:b9:de:21:67:9f:6c:98:06:9b:5e:88:2f:40:59:
                    42:78:23:26:a4:8b:e2:36:24:3c:f1:19:65:5f:09:
                    f2:e3:fe:27:55:5e:11:11:c5:49:18:fa:18:cd:1a:
                    a0:4a:f5:80:82:0e:82:59:22:37:72:47:11:f1:b5:
                    fa:f6:3e:d6:49:b0:c4:17:df:82:7e:f3:bf:33:52:
                    16:dc:72:19:b1:c2:63:ef:cc:8c:e8:0c:45:14:eb:
                    d8:c0:91:79:42:08:31:6e:cf:0d:48:e2:56:43:85:
                    8c:d0:ef:f1:c9:1e:1d:6c:34:a1:da:d9:f4:38:d1:
                    ec:aa:f6:d6:ef:54:e5:53:c1:f6:f3:b1:97:c1:63:
                    d8:76:fb:ab:b1:cb:74:91:d6:2b:5e:bd:e0:57:53:
                    78:f8:cb:83:ec:1f:5e:0c:b6:ab:5b:40:eb:cd:94:
                    7a:0f:a1:8c:85:a4:04:eb:aa:a0:8f:f5:fc:d5:25:
                    be:45:2c:4b:80:45:f0:4f:fa:ba:51:8f:b3:84:2b:
                    af:12:02:9c:cf:c5:38:8f:39:57:8c:24:f0:2b:99:
                    84:f2:43:25:59:ae:a0:c3:71:19:76:50:60:9c:2c:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:57:B0:F8:AB:6F:C6:FE:C7:C4:BE:F0:1E:FC:90:34:83:34:73:D1
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/AVew-Ktvxv7HxL7wHvyQNIM0c9E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:4f:47:08:2b:15:96:05:ea:3f:70:6f:7d:da:b1:ae:c3:
         cb:44:cc:26:26:65:6a:44:2d:b9:12:f5:03:77:16:57:99:ea:
         7e:67:44:bf:b4:b3:19:6b:b0:6b:63:ec:28:b9:11:4d:a1:0e:
         0b:4d:62:ca:13:1d:72:f0:d8:b8:7d:dd:a3:3c:bc:15:0d:57:
         00:ee:e7:9d:b6:fd:39:f6:05:65:ac:2f:c9:ea:86:53:60:78:
         d1:a2:17:03:7b:87:31:3e:75:12:61:1d:5e:71:4a:54:ee:83:
         41:b6:d3:b9:5f:68:29:5a:fe:e2:c6:a7:08:24:59:36:12:00:
         c6:11:a0:86:23:3d:4e:0f:44:1c:26:0b:0e:67:a9:e3:f5:a6:
         51:d5:e0:3a:30:e6:0b:2e:d1:76:41:2f:34:e2:be:e5:19:d0:
         4a:7e:c7:80:bb:9e:e4:6c:95:bd:77:78:48:05:92:69:ea:8d:
         50:f0:e2:ae:af:bb:dd:07:0c:fd:a5:d5:4b:d3:08:cc:0e:d0:
         54:d1:b1:d3:d1:8e:cf:9a:9b:19:15:88:36:12:31:9c:04:ef:
         f4:ae:b1:20:01:f8:67:03:1e:54:1c:f3:bb:91:cf:14:d8:07:
         0a:bb:7e:f3:db:2a:d5:21:99:8d:5a:b6:6a:d9:80:27:15:4a:
         c4:59:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:03 2023 by rpki-client on console-fra.rpki-client.org