Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/E62sewNXRHkU9lo9g8Pf901OX_Q.roa
File:                     E62sewNXRHkU9lo9g8Pf901OX_Q.roa (raw, json)
Hash identifier:          drqn09qQ0CZzQiRi+abiFrHYZEkukQeTGswBeQMNofo=
Subject key identifier:   13:AD:AC:7B:03:57:44:79:14:F6:5A:3D:83:C3:DF:F7:4D:4E:5F:F4
Certificate issuer:       /CN=7844c8ceb273e29c9d5f3f55064347a7aeae932b
Certificate serial:       0181F7EBC17248F9930F9DA1830564B1EE9B
Authority key identifier: 78:44:C8:CE:B2:73:E2:9C:9D:5F:3F:55:06:43:47:A7:AE:AE:93:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eETIzrJz4pydXz9VBkNHp66ukys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/E62sewNXRHkU9lo9g8Pf901OX_Q.roa
Signing time:             Wed 13 Jul 2022 14:17:11 +0000
ROA not before:           Wed 13 Jul 2022 14:17:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202755
IP address blocks:        185.155.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:eb:c1:72:48:f9:93:0f:9d:a1:83:05:64:b1:ee:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7844c8ceb273e29c9d5f3f55064347a7aeae932b
        Validity
            Not Before: Jul 13 14:17:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13adac7b0357447914f65a3d83c3dff74d4e5ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:53:3d:29:73:43:b0:8c:6f:fe:08:26:d1:
                    16:85:ab:d6:69:9d:6a:be:ed:33:43:22:62:98:b7:
                    e3:6f:5d:b9:57:9a:f4:f4:32:db:82:01:2c:3b:c9:
                    bc:10:2e:7b:95:d2:a5:c1:e4:0c:62:f5:7a:82:cd:
                    ce:d3:1a:5a:0b:b4:53:50:fc:46:65:1b:3e:f1:da:
                    ad:dd:39:95:81:19:6a:28:97:93:13:f1:7e:2a:6d:
                    84:1e:ac:b1:70:aa:ac:24:04:02:95:08:f2:67:81:
                    7e:47:e8:f4:8a:4b:e8:1b:c7:25:29:dc:b1:e9:0a:
                    10:ab:2c:59:d1:8a:ee:85:70:2f:49:b6:e2:ac:a8:
                    d5:b1:9f:fa:ef:5a:84:3b:80:72:a4:6f:fd:1d:56:
                    cb:2b:7b:ef:44:ba:8e:6f:2a:65:28:37:bc:96:38:
                    aa:31:2c:42:73:eb:70:ec:51:4e:1f:d6:06:a0:55:
                    b4:f3:2f:0b:7b:7c:cf:b2:0e:00:03:6b:7a:d3:67:
                    3f:80:33:e0:b0:7e:34:31:b3:b9:de:c0:9e:26:a8:
                    b8:ad:5b:65:3a:1d:02:e2:9c:dd:c7:86:63:0d:d7:
                    3c:cc:ee:f0:4e:c0:bf:71:3d:80:20:2c:47:8e:7f:
                    ee:68:fc:92:f8:f1:68:48:24:c2:dd:45:1d:fe:d1:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:AC:7B:03:57:44:79:14:F6:5A:3D:83:C3:DF:F7:4D:4E:5F:F4
            X509v3 Authority Key Identifier:
                keyid:78:44:C8:CE:B2:73:E2:9C:9D:5F:3F:55:06:43:47:A7:AE:AE:93:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eETIzrJz4pydXz9VBkNHp66ukys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/E62sewNXRHkU9lo9g8Pf901OX_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d489f5-b4d9-45ff-a9a5-497b0bb6517e/1/eETIzrJz4pydXz9VBkNHp66ukys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:69:69:86:28:8c:9b:9f:ba:e1:cb:f5:ec:61:2e:f5:dc:
         45:84:7a:94:98:33:7b:aa:fd:ab:c9:2a:2f:a8:08:89:31:f4:
         33:58:68:74:ec:8b:c7:18:83:0f:9d:da:8f:6d:86:88:03:c4:
         be:0d:42:52:bf:92:e5:ae:d6:fa:d9:0e:a3:55:ab:06:64:db:
         c7:df:cd:35:66:5d:df:4f:fc:f2:0a:30:92:8f:5b:cf:c6:e2:
         ec:89:48:20:28:ba:73:85:0b:69:b0:5d:0d:1a:3a:13:fb:9c:
         ab:04:d5:bb:35:88:a4:68:62:ea:56:d5:e8:f3:73:67:6c:a5:
         19:54:07:24:e1:6f:9b:9d:43:0a:df:64:c4:23:4f:67:e1:8f:
         f0:d1:4c:7e:44:70:b9:61:4d:0d:f1:7c:cc:82:2d:dd:24:7c:
         9a:7a:d9:5d:e8:0a:b3:08:2b:2d:45:65:e7:16:9a:0d:cb:b9:
         0a:34:d5:8d:3f:f0:d7:e7:9b:b7:04:38:40:77:74:bb:92:6a:
         e3:da:55:a6:4e:d9:5d:d4:b9:68:25:31:82:e0:dc:96:98:43:
         8e:2f:a3:d9:1a:95:ba:2f:90:13:6f:95:bd:12:65:4c:e4:ea:
         f6:68:31:44:57:3b:90:91:8d:65:84:57:70:1e:02:b6:ba:7c:
         7a:d1:e6:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH368FySPmTD52hgwVkse6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NDRjOGNlYjI3M2UyOWM5ZDVmM2Y1NTA2NDM0N2E3YWVh
ZTkzMmIwHhcNMjIwNzEzMTQxNzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FkYWM3YjAzNTc0NDc5MTRmNjVhM2Q4M2MzZGZmNzRkNGU1ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaFTPSlzQ7CMb/4IJtEWhavWaZ1q
vu0zQyJimLfjb125V5r09DLbggEsO8m8EC57ldKlweQMYvV6gs3O0xpaC7RTUPxG
ZRs+8dqt3TmVgRlqKJeTE/F+Km2EHqyxcKqsJAQClQjyZ4F+R+j0ikvoG8clKdyx
6QoQqyxZ0YruhXAvSbbirKjVsZ/671qEO4BypG/9HVbLK3vvRLqObyplKDe8ljiq
MSxCc+tw7FFOH9YGoFW08y8Le3zPsg4AA2t602c/gDPgsH40MbO53sCeJqi4rVtl
Oh0C4pzdx4ZjDdc8zO7wTsC/cT2AICxHjn/uaPyS+PFoSCTC3UUd/tEXAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOtrHsDV0R5FPZaPYPD3/dNTl/0MB8GA1UdIwQY
MBaAFHhEyM6yc+KcnV8/VQZDR6eurpMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUVUSXpySno0cHlkWHo5VkJrTkhwNjZ1a3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kNDg5ZjUtYjRkOS00NWZmLWE5YTUt
NDk3YjBiYjY1MTdlLzEvRTYyc2V3TlhSSGtVOWxvOWc4UGY5MDFPWF9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kNDg5ZjUtYjRkOS00NWZmLWE5YTUtNDk3YjBiYjY1MTdl
LzEvZUVUSXpySno0cHlkWHo5VkJrTkhwNjZ1a3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZusMA0G
CSqGSIb3DQEBCwUAA4IBAQB/tWlphiiMm5+64cv17GEu9dxFhHqUmDN7qv2rySov
qAiJMfQzWGh07IvHGIMPndqPbYaIA8S+DUJSv5Llrtb62Q6jVasGZNvH3801Zl3f
T/zyCjCSj1vPxuLsiUggKLpzhQtpsF0NGjoT+5yrBNW7NYikaGLqVtXo83NnbKUZ
VAck4W+bnUMK32TEI09n4Y/w0Ux+RHC5YU0N8XzMgi3dJHyaetld6AqzCCstRWXn
FpoNy7kKNNWNP/DX55u3BDhAd3S7kmrj2lWmTtld1LloJTGC4NyWmEOOL6PZGpW6
L5ATb5W9EmVM5Or2aDFEVzuQkY1lhFdwHgK2unx60eZL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-fra.rpki-client.org