Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/99DwEc2cf1yw3BHq7gNvWmU1120.roa
File:                     99DwEc2cf1yw3BHq7gNvWmU1120.roa (raw, json)
Hash identifier:          Dadg7l/x1rSMBK84ymjnVLizuSJKclnzqxNz+AXzqUg=
Subject key identifier:   F7:D0:F0:11:CD:9C:7F:5C:B0:DC:11:EA:EE:03:6F:5A:65:35:D7:6D
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0184864C17E7D3D8DD50851C407F3856C025
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/99DwEc2cf1yw3BHq7gNvWmU1120.roa
Signing time:             Thu 17 Nov 2022 15:54:04 +0000
ROA not before:           Thu 17 Nov 2022 15:54:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     53667
IP address blocks:        193.25.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:4c:17:e7:d3:d8:dd:50:85:1c:40:7f:38:56:c0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Nov 17 15:54:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7d0f011cd9c7f5cb0dc11eaee036f5a6535d76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:5a:0b:cd:e8:21:91:93:e1:b6:db:25:10:
                    35:6f:5e:0d:19:36:69:84:f4:29:07:9a:7e:c3:28:
                    d4:9b:e0:b8:e6:73:4b:13:96:dd:3f:9c:48:37:bd:
                    2a:ee:9b:5f:59:73:6f:30:82:a0:70:5a:a5:b9:aa:
                    4a:1c:0e:03:e0:58:0b:36:7e:73:37:3e:e1:54:a2:
                    64:27:01:20:d4:ed:91:fd:66:0a:64:03:80:64:45:
                    99:7e:2a:72:51:d2:79:9f:4f:72:a9:c1:48:b1:f5:
                    01:c4:14:4d:66:79:02:26:81:07:a1:4b:73:c7:de:
                    2b:6e:07:ab:d9:f3:61:a8:84:09:c5:eb:06:13:b9:
                    0c:a7:2b:12:7a:a6:40:0d:46:72:62:b2:9a:23:31:
                    e4:bb:46:8d:38:f7:a8:7d:05:c2:66:e0:df:01:f8:
                    72:1e:9d:39:13:38:3d:ef:35:a0:f7:68:46:f6:34:
                    4e:04:da:4b:a3:c1:90:ed:1e:23:75:48:66:49:93:
                    2b:39:07:68:c5:9a:19:a0:84:a2:d9:e3:0c:3d:25:
                    4e:f4:67:4c:9c:03:ac:53:52:35:45:9c:af:fc:c9:
                    74:b9:56:df:0d:f9:03:14:1c:08:4b:36:7b:6f:f5:
                    d9:ec:c1:89:61:25:03:55:c4:06:39:c4:9d:ba:48:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:F0:11:CD:9C:7F:5C:B0:DC:11:EA:EE:03:6F:5A:65:35:D7:6D
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/99DwEc2cf1yw3BHq7gNvWmU1120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:98:29:3e:fc:59:04:e5:00:2d:cb:5a:65:b8:ee:06:16:
         61:0a:26:65:3e:db:78:dc:87:b7:67:60:7b:17:b2:1e:18:cd:
         9c:54:df:e8:9e:c8:3d:b4:1e:71:e6:0d:f7:ce:d2:1f:7e:ae:
         8b:5f:73:d3:7d:73:66:f9:e7:e9:23:41:23:36:25:ce:88:36:
         7d:4e:3a:8d:8e:6b:14:cb:31:87:32:03:0b:12:21:a2:2b:00:
         01:aa:6f:2d:f3:db:ba:5f:fd:cd:88:35:5a:13:05:36:b2:bd:
         49:f8:e4:18:f4:d5:30:46:25:22:58:b0:23:12:d8:4e:d3:79:
         39:60:3c:1b:db:b7:c4:76:d9:32:63:a2:d0:8c:81:74:01:9e:
         4f:6e:93:1d:52:58:eb:95:9f:fb:59:61:3e:6a:48:b6:20:0d:
         5c:98:c6:c2:ad:90:18:02:e5:bb:44:5b:9d:9e:c7:ac:3b:e7:
         eb:40:b0:89:d4:84:c5:fe:eb:a7:e6:0d:9f:96:20:94:8e:80:
         cf:a3:c6:c4:3a:d4:89:df:02:67:f6:b4:af:3e:27:95:f5:d6:
         8b:62:88:01:06:5f:7b:56:87:ea:94:ee:24:c4:da:40:e4:4b:
         5a:4b:1b:cc:56:88:af:7c:5a:8c:85:5f:16:0e:8a:df:c4:0b:
         af:3f:03:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSGTBfn09jdUIUcQH84VsAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMTE3MTU1NDA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2QwZjAxMWNkOWM3ZjVjYjBkYzExZWFlZTAzNmY1YTY1MzVkNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliFaC83oIZGT4bbbJRA1b14NGTZp
hPQpB5p+wyjUm+C45nNLE5bdP5xIN70q7ptfWXNvMIKgcFqluapKHA4D4FgLNn5z
Nz7hVKJkJwEg1O2R/WYKZAOAZEWZfipyUdJ5n09yqcFIsfUBxBRNZnkCJoEHoUtz
x94rbger2fNhqIQJxesGE7kMpysSeqZADUZyYrKaIzHku0aNOPeofQXCZuDfAfhy
Hp05Ezg97zWg92hG9jROBNpLo8GQ7R4jdUhmSZMrOQdoxZoZoISi2eMMPSVO9GdM
nAOsU1I1RZyv/Ml0uVbfDfkDFBwISzZ7b/XZ7MGJYSUDVcQGOcSdukh6AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfQ8BHNnH9csNwR6u4Db1plNddtMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvOTlEd0VjMmNmMXl3M0JIcTdnTnZXbVUxMTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnPMA0G
CSqGSIb3DQEBCwUAA4IBAQBz2JgpPvxZBOUALctaZbjuBhZhCiZlPtt43Ie3Z2B7
F7IeGM2cVN/onsg9tB5x5g33ztIffq6LX3PTfXNm+efpI0EjNiXOiDZ9TjqNjmsU
yzGHMgMLEiGiKwABqm8t89u6X/3NiDVaEwU2sr1J+OQY9NUwRiUiWLAjEthO03k5
YDwb27fEdtkyY6LQjIF0AZ5PbpMdUljrlZ/7WWE+aki2IA1cmMbCrZAYAuW7RFud
nsesO+frQLCJ1ITF/uun5g2fliCUjoDPo8bEOtSJ3wJn9rSvPieV9daLYogBBl97
VofqlO4kxNpA5EtaSxvMVoivfFqMhV8WDorfxAuvPwN6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org