Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/jcGAMC_IbA51rfE1awbhAjIl6x8.roa
File:                     jcGAMC_IbA51rfE1awbhAjIl6x8.roa (raw, json)
Hash identifier:          SUHErlefGeA17SXIkVTGs/uEQ0AG4XwSxpmNTf/P47Q=
Subject key identifier:   8D:C1:80:30:2F:C8:6C:0E:75:AD:F1:35:6B:06:E1:02:32:25:EB:1F
Certificate issuer:       /CN=90266c7f48eba7017f8d8511104bcd7624382b8d
Certificate serial:       0185720C7B298E527FD5EA1FF91F9BC9D540
Authority key identifier: 90:26:6C:7F:48:EB:A7:01:7F:8D:85:11:10:4B:CD:76:24:38:2B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kCZsf0jrpwF_jYUREEvNdiQ4K40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/jcGAMC_IbA51rfE1awbhAjIl6x8.roa
Signing time:             Mon 02 Jan 2023 10:34:58 +0000
ROA not before:           Mon 02 Jan 2023 10:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39070
IP address blocks:        193.58.116.0/22 maxlen: 22
                          2a0d:eb40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:7b:29:8e:52:7f:d5:ea:1f:f9:1f:9b:c9:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90266c7f48eba7017f8d8511104bcd7624382b8d
        Validity
            Not Before: Jan  2 10:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8dc180302fc86c0e75adf1356b06e1023225eb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:29:c7:5f:01:8c:ba:19:4f:6b:d9:4b:a6:
                    35:26:53:4d:66:d7:26:c6:8d:f7:83:f2:69:b2:99:
                    a8:b9:95:be:fa:aa:5d:82:ad:e5:fa:e0:75:ae:64:
                    92:f2:2d:b4:d5:e2:ec:be:b5:78:1b:f4:4b:bf:95:
                    25:29:38:e8:b9:0c:54:2e:54:18:74:1e:37:e6:34:
                    8e:89:44:58:84:c6:22:79:3f:96:ee:ae:e5:36:57:
                    7d:43:a5:1d:3d:3b:91:e1:62:b6:e0:c6:26:0e:a2:
                    71:af:fc:2e:35:60:ab:6e:79:c2:e5:55:64:d6:53:
                    38:79:46:33:e6:fb:8d:cb:a9:0e:52:7e:dc:67:71:
                    56:e6:fb:60:bb:ef:7c:2c:64:38:d8:b2:17:ca:07:
                    e0:f6:fa:5e:0f:7b:e0:df:24:ff:8f:4a:9b:54:91:
                    2e:ef:09:1f:47:7c:92:14:b9:1f:f0:dc:a3:99:d9:
                    5a:9b:41:6f:bd:0d:3f:b7:a7:82:0a:b5:6e:08:c9:
                    27:57:78:40:02:93:c0:2c:37:fe:4c:80:8f:43:c0:
                    28:22:d2:88:af:9c:72:62:c4:54:18:ec:5d:f2:59:
                    ae:cc:ff:5b:52:2e:74:a0:da:5c:ba:b2:85:06:7f:
                    3f:23:48:f6:1b:b7:61:1b:11:57:3f:77:1e:ec:60:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C1:80:30:2F:C8:6C:0E:75:AD:F1:35:6B:06:E1:02:32:25:EB:1F
            X509v3 Authority Key Identifier:
                keyid:90:26:6C:7F:48:EB:A7:01:7F:8D:85:11:10:4B:CD:76:24:38:2B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCZsf0jrpwF_jYUREEvNdiQ4K40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/jcGAMC_IbA51rfE1awbhAjIl6x8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/kCZsf0jrpwF_jYUREEvNdiQ4K40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.116.0/22
                IPv6:
                  2a0d:eb40::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:a3:07:91:ca:55:bf:6e:2d:c2:85:23:a9:74:6e:01:a2:ed:
         61:17:4a:ea:d4:c2:db:3a:b9:98:4b:84:37:9d:6b:ed:56:d6:
         86:de:c4:a0:4b:2b:58:a0:e5:4b:c9:f3:d8:08:22:27:cf:6e:
         0a:cc:b6:0e:8c:d1:84:f0:7b:8e:84:ec:9d:48:5c:a8:e7:ad:
         55:ee:36:b8:fc:de:ae:15:ca:7c:64:b8:2f:a4:87:b6:00:a2:
         27:82:d4:5f:db:7c:84:a2:f4:18:b7:e3:f9:b5:d6:bd:b0:92:
         2a:89:56:a2:b9:7b:9b:dd:66:80:ab:9f:7a:3c:64:08:f2:65:
         da:68:aa:ec:1a:20:a5:03:cb:36:8a:1f:63:bb:9c:49:cc:7d:
         26:d8:50:38:6b:37:ac:ce:b9:b9:69:8d:f9:0f:42:0b:49:90:
         f5:17:b1:ca:96:42:e9:92:4a:60:d4:04:7c:ca:c7:a8:0a:01:
         0e:8a:cc:ab:15:6b:27:60:f7:53:da:99:63:c4:d9:5d:31:0a:
         0a:e9:93:b7:72:95:29:fe:c8:71:06:90:6a:19:55:d4:ed:f6:
         d4:13:72:87:5d:28:d3:ac:ea:9a:c0:af:56:28:d6:d9:1e:ff:
         90:fe:79:d8:72:ae:61:b1:ea:1d:a6:16:d1:99:c3:39:3a:06:
         9c:57:b6:0d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVyDHspjlJ/1eof+R+bydVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMjY2YzdmNDhlYmE3MDE3ZjhkODUxMTEwNGJjZDc2MjQz
ODJiOGQwHhcNMjMwMTAyMTAzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGMxODAzMDJmYzg2YzBlNzVhZGYxMzU2YjA2ZTEwMjMyMjVlYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZwpx18BjLoZT2vZS6Y1JlNNZtcm
xo33g/JpspmouZW++qpdgq3l+uB1rmSS8i201eLsvrV4G/RLv5UlKTjouQxULlQY
dB435jSOiURYhMYieT+W7q7lNld9Q6UdPTuR4WK24MYmDqJxr/wuNWCrbnnC5VVk
1lM4eUYz5vuNy6kOUn7cZ3FW5vtgu+98LGQ42LIXygfg9vpeD3vg3yT/j0qbVJEu
7wkfR3ySFLkf8Nyjmdlam0FvvQ0/t6eCCrVuCMknV3hAApPALDf+TICPQ8AoItKI
r5xyYsRUGOxd8lmuzP9bUi50oNpcurKFBn8/I0j2G7dhGxFXP3ce7GCf/QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI3BgDAvyGwOda3xNWsG4QIyJesfMB8GA1UdIwQY
MBaAFJAmbH9I66cBf42FERBLzXYkOCuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0Nac2YwanJwd0ZfallVUkVFdk5kaVE0SzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNTk1MDUtMmE4ZC00N2QwLTllZTct
NWE5ZDRmYmZiMDRjLzEvamNHQU1DX0liQTUxcmZFMWF3YmhBaklsNng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hNTk1MDUtMmE4ZC00N2QwLTllZTctNWE5ZDRmYmZiMDRj
LzEva0Nac2YwanJwd0ZfallVUkVFdk5kaVE0SzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwTp0MA0E
AgACMAcDBQMqDetAMA0GCSqGSIb3DQEBCwUAA4IBAQCXoweRylW/bi3ChSOpdG4B
ou1hF0rq1MLbOrmYS4Q3nWvtVtaG3sSgSytYoOVLyfPYCCInz24KzLYOjNGE8HuO
hOydSFyo561V7ja4/N6uFcp8ZLgvpIe2AKIngtRf23yEovQYt+P5tda9sJIqiVai
uXub3WaAq596PGQI8mXaaKrsGiClA8s2ih9ju5xJzH0m2FA4azeszrm5aY35D0IL
SZD1F7HKlkLpkkpg1AR8yseoCgEOisyrFWsnYPdT2pljxNldMQoK6ZO3cpUp/shx
BpBqGVXU7fbUE3KHXSjTrOqawK9WKNbZHv+Q/nnYcq5hseodphbRmcM5OgacV7YN
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:32 2024 by rpki-client on console-ams.rpki-client.org