Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/NMo_EuSZ3lRQotTbsf3qeusP4Xw.roa
File:                     NMo_EuSZ3lRQotTbsf3qeusP4Xw.roa (raw, json)
Hash identifier:          5MPe9VxBcNsb3mw3YFZWEwRWue1InUw6fq0KGoiuAAw=
Subject key identifier:   34:CA:3F:12:E4:99:DE:54:50:A2:D4:DB:B1:FD:EA:7A:EB:0F:E1:7C
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       018381F089BC76F912B587C7E8882423AB8E
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/NMo_EuSZ3lRQotTbsf3qeusP4Xw.roa
Signing time:             Wed 28 Sep 2022 02:32:48 +0000
ROA not before:           Wed 28 Sep 2022 02:32:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209737
IP address blocks:        213.139.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:81:f0:89:bc:76:f9:12:b5:87:c7:e8:88:24:23:ab:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Sep 28 02:32:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=34ca3f12e499de5450a2d4dbb1fdea7aeb0fe17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:5d:51:fb:4b:75:c8:11:e0:ac:cc:a5:de:
                    fa:1e:54:5a:98:8b:01:38:1f:41:10:0d:5f:e2:fc:
                    e3:5e:8d:da:68:96:9c:67:16:93:77:6a:41:03:c9:
                    38:1b:ac:dd:f0:15:24:27:b2:5d:85:d8:bd:76:70:
                    68:ba:e2:1e:a1:72:cb:2c:d8:6c:7a:90:f3:76:9b:
                    43:4d:3d:9c:ec:69:d2:65:5e:61:7f:16:b8:c1:a6:
                    65:c3:a9:b2:b5:28:d7:dd:88:bc:30:08:b1:10:4c:
                    94:60:74:44:49:69:a6:4a:0a:39:bc:4d:36:f4:51:
                    f6:e6:fe:7c:87:18:be:cb:40:45:cc:95:78:ca:54:
                    e7:a0:de:fd:d0:e5:55:f8:8e:f3:1d:25:04:24:29:
                    29:e9:3a:75:42:5b:f0:ef:60:7d:ff:50:a0:a7:3a:
                    a4:d4:6d:94:cc:cd:71:e4:4f:e1:95:3f:66:ef:87:
                    7d:ef:df:b9:43:5a:05:8f:29:5e:84:d3:30:aa:de:
                    cc:f2:68:97:f8:a8:46:c3:f3:93:59:8a:44:63:7e:
                    0f:f0:1d:29:95:3d:02:9c:44:15:5d:ff:ec:45:3a:
                    06:4e:35:92:11:2e:8d:73:a3:d6:04:3f:95:e1:f5:
                    6f:e8:e8:09:ba:97:b3:89:5f:27:20:89:cd:3e:1b:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CA:3F:12:E4:99:DE:54:50:A2:D4:DB:B1:FD:EA:7A:EB:0F:E1:7C
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/NMo_EuSZ3lRQotTbsf3qeusP4Xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:ac:65:24:f4:94:71:69:ae:00:d5:19:58:54:0b:d5:2b:
         b8:2c:50:9c:1a:da:21:69:7a:eb:85:11:df:55:0c:48:db:10:
         6b:5f:c3:2c:ca:8d:64:21:a7:5b:f5:93:60:d7:c0:43:70:12:
         47:87:76:3b:7b:55:fa:f1:40:4d:54:ff:4b:ae:38:b8:97:19:
         a3:88:1c:c0:13:9a:e8:50:22:80:b7:39:f9:de:f8:c1:3c:7f:
         94:6f:46:83:14:c3:77:d0:35:9f:aa:27:53:a7:1c:b9:7e:21:
         89:e7:81:71:d9:73:04:7f:f3:83:f5:1d:1c:80:e8:07:ac:d4:
         35:48:8a:ce:45:b8:be:62:6a:ad:53:16:24:69:8b:90:9f:58:
         39:33:e4:aa:ec:b0:9c:77:7f:b4:99:e9:0f:37:a6:2d:09:05:
         0b:f1:96:dc:70:96:0b:f2:c1:df:a5:b1:b1:8c:7e:34:d6:40:
         dd:d9:42:58:a9:2d:bb:9c:cc:36:e2:9d:50:66:c5:90:9e:98:
         c4:79:c8:b7:a7:e6:c1:6a:7c:9b:68:98:ae:18:e6:81:b4:3a:
         54:c7:52:91:60:b0:59:b9:f2:b7:c0:5a:95:ae:e7:26:3d:89:
         6f:1d:4b:70:fc:c7:3e:8b:53:c9:51:1b:80:ea:bc:d9:62:66:
         88:2f:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org