Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/7bDCezDkFo35kHoN8kA-d5cTSj4.roa
File:                     7bDCezDkFo35kHoN8kA-d5cTSj4.roa (raw, json)
Hash identifier:          KhVWqcnioD31Y2DXSeUH1WatRzmr8fLRRzgeSuODWiY=
Subject key identifier:   ED:B0:C2:7B:30:E4:16:8D:F9:90:7A:0D:F2:40:3E:77:97:13:4A:3E
Certificate issuer:       /CN=7973123521d75d8d31c99058e869e996b917b278
Certificate serial:       CF9A13
Authority key identifier: 79:73:12:35:21:D7:5D:8D:31:C9:90:58:E8:69:E9:96:B9:17:B2:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXMSNSHXXY0xyZBY6GnplrkXsng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/7bDCezDkFo35kHoN8kA-d5cTSj4.roa
Signing time:             Sat 01 Jan 2022 03:56:42 +0000
ROA not before:           Sat 01 Jan 2022 03:56:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.37.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13605395 (0xcf9a13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973123521d75d8d31c99058e869e996b917b278
        Validity
            Not Before: Jan  1 03:56:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edb0c27b30e4168df9907a0df2403e7797134a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:e1:db:45:e2:96:98:65:d4:e6:53:40:bb:
                    cb:45:c8:b8:2c:aa:82:f8:d5:87:27:f9:c8:7e:71:
                    0b:34:fb:41:46:c2:5e:41:2a:dc:e5:cb:05:eb:e3:
                    66:bb:af:90:a5:b1:f3:0a:1b:b2:23:6b:aa:af:a1:
                    25:9d:e2:06:e9:69:22:97:d1:7d:30:c3:f0:c9:a8:
                    00:ea:90:4e:39:43:f6:92:3c:e4:ed:ec:63:35:5d:
                    ab:98:43:52:45:00:26:a0:f4:16:f4:a2:2b:21:19:
                    f9:ab:fc:54:be:8b:d9:2c:2c:98:5c:79:a2:eb:52:
                    19:56:78:a0:5c:89:9b:60:0e:d7:3a:2a:da:86:6b:
                    71:57:4c:6a:76:e8:fb:7e:44:d6:3b:f0:91:4a:a6:
                    db:d2:e1:4a:4b:f8:09:9b:79:d7:11:6f:23:6a:b8:
                    ab:5c:4c:3f:5f:36:84:48:1c:49:14:84:32:e5:bc:
                    dc:82:2a:39:e0:b0:61:d8:85:cd:ed:28:71:69:7d:
                    45:32:19:fb:cb:c1:cf:60:6a:15:a2:fe:45:a3:e4:
                    d7:a0:63:1a:55:d6:a9:11:78:44:be:32:b5:e4:b3:
                    33:10:05:6b:97:14:d3:ff:40:fe:bf:86:f9:85:77:
                    0a:f2:91:ca:a2:05:7b:04:11:b5:fd:fa:e7:86:e3:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B0:C2:7B:30:E4:16:8D:F9:90:7A:0D:F2:40:3E:77:97:13:4A:3E
            X509v3 Authority Key Identifier:
                keyid:79:73:12:35:21:D7:5D:8D:31:C9:90:58:E8:69:E9:96:B9:17:B2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMSNSHXXY0xyZBY6GnplrkXsng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/7bDCezDkFo35kHoN8kA-d5cTSj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/eXMSNSHXXY0xyZBY6GnplrkXsng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:e5:ce:0c:17:ba:6c:62:fd:dd:d0:d7:f9:ed:87:a6:7d:
         37:37:33:02:02:19:f3:8d:66:1c:1a:a1:bc:6a:e1:db:c4:ee:
         96:ff:dc:20:9a:cc:94:dd:79:2b:04:66:77:a1:77:f4:06:35:
         d5:eb:21:73:8f:8b:34:fa:09:e9:f6:6a:64:35:09:e8:20:b6:
         5b:7b:3b:01:2d:08:2f:f2:84:eb:e9:b9:f6:60:71:15:2b:cc:
         de:82:ca:15:9f:bc:2e:49:ca:09:87:d2:b3:e3:55:1d:a1:76:
         ed:8e:32:79:43:a3:e8:76:36:0f:fe:bb:f2:37:de:ad:6f:e9:
         d8:56:ed:a2:e6:d2:29:4b:84:d8:1a:36:cf:64:77:c4:b7:1b:
         f6:9d:77:e4:58:da:d6:17:27:b2:7b:4a:b8:cd:a3:db:7d:64:
         2c:31:9c:c3:8b:1e:80:72:2b:9c:c9:d3:7d:1f:27:d0:eb:ce:
         97:38:9b:d1:09:5d:1f:f2:5b:b8:52:96:87:99:e2:82:80:71:
         9b:94:91:cc:d4:7f:28:ae:8c:cb:c5:f7:e9:b9:26:ab:58:ce:
         80:21:aa:8a:77:11:57:77:15:5e:d5:62:5c:01:65:e3:d9:8c:
         91:8c:0f:4f:c0:31:79:63:08:09:d5:5d:d1:d6:b3:31:6f:84:
         c5:52:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org