Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/3mtirkxKza23EEj7V91BRdN1DQo.roa
File:                     3mtirkxKza23EEj7V91BRdN1DQo.roa (raw, json)
Hash identifier:          +HhT0V30OobL1O6yPmpf7j0xSnlLe8JcDQaQFhDB3Mw=
Subject key identifier:   DE:6B:62:AE:4C:4A:CD:AD:B7:10:48:FB:57:DD:41:45:D3:75:0D:0A
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       03EC19CC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/3mtirkxKza23EEj7V91BRdN1DQo.roa
Signing time:             Tue 15 Mar 2022 18:41:16 +0000
ROA not before:           Tue 15 Mar 2022 18:41:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        194.113.227.0/24 maxlen: 24
                          192.166.82.0/24 maxlen: 24
                          192.166.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65804748 (0x3ec19cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Mar 15 18:41:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de6b62ae4c4acdadb71048fb57dd4145d3750d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:66:eb:96:cf:52:01:6a:01:c2:a8:8f:9c:
                    c6:2d:4a:0c:db:b0:1f:bf:82:f6:31:bf:9f:15:ab:
                    7c:5d:91:fe:ff:ac:f4:88:f7:81:1f:d7:d5:33:cc:
                    e9:19:e0:e3:39:ba:a6:ee:b7:67:56:6f:78:84:32:
                    34:80:a1:f0:86:e8:72:ee:fc:a3:fd:27:13:88:91:
                    d6:2c:3b:f9:44:b0:27:e0:0f:d8:7f:cc:04:5f:eb:
                    a9:e4:db:a3:6d:5b:aa:8b:a0:17:f0:c4:0e:37:b3:
                    68:19:39:30:79:46:c9:11:62:f7:02:4f:22:e4:80:
                    0c:21:02:1b:de:b9:8e:c7:83:c5:48:98:b5:72:8a:
                    be:32:a8:57:67:0a:22:d8:8e:8a:10:89:09:2d:94:
                    28:b1:dc:0b:ff:4c:8d:07:b5:3d:33:d6:15:3e:14:
                    91:1d:21:30:b0:63:3e:09:7f:a0:50:aa:55:c2:73:
                    97:b8:e2:c6:5b:9e:2e:8a:f5:98:0a:a7:94:0a:aa:
                    01:95:27:b7:1d:18:87:45:31:62:b2:01:b2:43:b7:
                    3e:61:e1:bd:6c:37:36:b5:44:ee:5c:8f:fc:2f:b2:
                    92:ba:cc:b3:8b:96:b8:cc:af:f5:0b:9a:84:9f:42:
                    e3:8c:53:9a:b2:ef:26:20:8f:4a:2f:4b:56:18:2c:
                    06:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6B:62:AE:4C:4A:CD:AD:B7:10:48:FB:57:DD:41:45:D3:75:0D:0A
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/3mtirkxKza23EEj7V91BRdN1DQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.82.0/23
                  194.113.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:9f:a6:10:c9:f7:79:c0:91:c6:65:5d:ba:8e:0c:cc:cd:ac:
         9e:da:48:60:23:fb:3f:76:b5:b9:fe:27:f9:c5:48:cd:d4:f1:
         9c:78:f5:86:55:24:3a:db:17:56:97:ed:29:d3:b1:94:fb:f1:
         01:0d:92:82:77:00:ab:77:96:a0:f2:1d:6d:e3:0d:5a:66:f2:
         5b:a4:9d:a9:bf:f4:04:44:36:8e:d5:87:f8:98:7b:5f:e2:3f:
         af:20:58:63:50:5e:bc:04:ad:b4:13:ad:e4:ba:e9:ca:b3:bd:
         69:66:aa:9c:b6:bf:88:06:fb:47:6b:71:31:a9:e4:23:1d:18:
         aa:6b:60:a2:07:35:0f:cc:bf:f5:c5:30:a5:85:60:c7:85:d3:
         0b:dc:2e:f2:9e:a5:e1:fa:11:9c:be:3f:f0:72:93:db:91:26:
         ae:00:24:3a:36:ea:af:30:81:4d:2e:6b:e2:c2:06:fd:2e:0f:
         45:4e:55:e8:02:8c:44:6c:96:c7:76:66:6f:bf:8c:de:68:5d:
         6d:05:29:b7:83:d4:a5:6a:69:ce:5c:09:ed:ec:b6:27:99:d0:
         4d:f2:40:ca:a8:02:fb:af:be:5d:c4:0a:41:32:40:e2:92:d0:
         a3:cd:77:81:f8:56:f5:10:cd:3d:d1:5d:5d:7d:c7:76:9f:e3:
         48:d6:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org