Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/FgVAwKWY9_-99gf8yRnHdEivBWQ.roa
File:                     FgVAwKWY9_-99gf8yRnHdEivBWQ.roa (raw, json)
Hash identifier:          SjBaY9NNEaFz0WJUckoY+wwmxuivO76U/TS4cJRUYjQ=
Subject key identifier:   16:05:40:C0:A5:98:F7:FF:BD:F6:07:FC:C9:19:C7:74:48:AF:05:64
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       61328E
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/FgVAwKWY9_-99gf8yRnHdEivBWQ.roa
Signing time:             Tue 21 Jun 2022 13:01:46 +0000
ROA not before:           Tue 21 Jun 2022 13:01:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        213.139.80.0/22 maxlen: 24
                          213.139.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6369934 (0x61328e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Jun 21 13:01:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=160540c0a598f7ffbdf607fcc919c77448af0564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:78:5c:0b:b9:15:9e:64:cc:30:75:42:13:
                    00:6d:46:4d:15:b1:c5:c9:11:71:21:88:76:34:37:
                    4d:ca:4b:9e:7f:1f:a9:21:b4:88:4f:ee:4e:b9:e2:
                    15:16:e9:fd:ef:aa:6a:bd:4e:9f:af:4b:e4:a5:1a:
                    8c:77:f9:25:48:4c:83:17:a6:42:ad:fd:b0:15:b6:
                    f4:81:20:0b:59:84:17:84:f3:d9:51:2d:fa:33:66:
                    f4:8a:11:e1:36:fc:f6:08:90:0c:16:ac:d3:c1:48:
                    33:69:6d:82:13:d4:d7:1b:d1:62:1b:ff:7c:86:cd:
                    1f:a6:36:d1:47:37:53:d8:39:91:e0:2e:04:3b:9e:
                    89:95:de:4b:6b:88:a2:9b:9e:26:3b:4c:b4:b5:cb:
                    9b:b7:b8:b5:fa:1c:4f:c2:39:df:2e:06:ce:ae:83:
                    59:8c:f7:9c:13:25:7f:d8:18:f0:ae:14:e3:65:56:
                    5c:ae:d7:c5:67:98:82:78:3d:a9:8b:a7:e5:06:3e:
                    53:57:fd:20:21:a7:e4:6e:ea:cd:ef:94:75:9d:56:
                    21:4c:27:d9:58:6d:c9:ca:64:bd:96:92:54:ce:75:
                    5c:9b:3a:33:51:41:28:44:66:e1:82:2f:3b:27:3b:
                    54:99:66:da:66:da:6c:63:5e:d2:b0:90:6a:b3:86:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:05:40:C0:A5:98:F7:FF:BD:F6:07:FC:C9:19:C7:74:48:AF:05:64
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/FgVAwKWY9_-99gf8yRnHdEivBWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.80.0/22
                  213.139.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:60:62:82:b0:02:52:96:8b:ea:de:08:76:32:20:df:96:11:
         d1:42:57:9c:f7:18:04:4c:1f:7d:f0:92:17:58:4f:b2:9d:26:
         d1:c6:96:ea:c0:e6:77:ed:ba:1e:6e:11:a4:28:a7:fe:1f:3e:
         cd:a9:ee:5a:3b:70:e9:13:29:79:90:0c:9e:9c:a0:56:61:52:
         95:24:3c:8a:f7:31:98:92:56:19:69:30:9a:cd:08:96:8f:54:
         ab:37:94:e2:6e:8d:27:ef:46:d2:2f:eb:2f:e2:14:24:e0:e0:
         18:f3:90:c4:da:f1:e2:0e:9d:7e:f3:5a:81:46:f1:4c:e8:46:
         9c:8a:5d:b2:f5:09:dc:ec:3b:91:36:b2:ae:e7:bb:8a:f2:3f:
         97:9c:2f:9c:57:c9:80:b4:12:15:a8:56:3a:4c:79:58:77:69:
         11:05:a5:28:17:f9:a3:56:33:3a:d5:ea:47:0d:08:db:35:1b:
         1a:94:48:cb:94:25:29:1c:cd:7a:b6:da:b0:bb:e4:c7:66:ca:
         f2:b9:c3:81:06:59:a6:e6:bf:5b:32:ff:49:6d:4f:ad:1f:13:
         4e:3d:a5:e6:45:ce:ac:61:0f:06:98:b1:f7:9d:eb:39:78:ef:
         6f:7c:4d:3a:ba:cf:65:c7:a1:0a:3c:15:47:70:30:2c:c3:8d:
         7e:ed:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org