Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BcJy3emWnAGQZVfxa_8K_1pvlLI.roa
File:                     BcJy3emWnAGQZVfxa_8K_1pvlLI.roa (raw, json)
Hash identifier:          wbJwqHCooR59NBk8vchr/wxzf5NCVqVtL0TBFEzVpGQ=
Subject key identifier:   05:C2:72:DD:E9:96:9C:01:90:65:57:F1:6B:FF:0A:FF:5A:6F:94:B2
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0182357AE760654EA30DFBB83C61A8703B49
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BcJy3emWnAGQZVfxa_8K_1pvlLI.roa
Signing time:             Mon 25 Jul 2022 13:10:23 +0000
ROA not before:           Mon 25 Jul 2022 13:10:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        193.151.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:35:7a:e7:60:65:4e:a3:0d:fb:b8:3c:61:a8:70:3b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jul 25 13:10:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05c272dde9969c01906557f16bff0aff5a6f94b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:4a:2b:c7:0d:59:bc:59:57:15:06:7d:b0:
                    29:9e:80:7f:06:bd:e3:5a:0b:4c:07:17:62:88:68:
                    4b:86:0e:e3:3f:c4:f9:5e:81:bb:6a:05:7f:0c:eb:
                    e4:ce:28:92:6e:74:ee:bf:34:00:0c:40:1a:ce:17:
                    42:9f:af:c8:cc:c5:24:8d:56:1d:49:98:09:79:62:
                    59:b6:0a:81:01:b1:a4:2a:5e:fe:20:bd:55:ff:f4:
                    00:e6:ad:2c:59:b7:97:3a:46:a7:c0:20:c0:18:53:
                    f5:b7:bf:de:34:f9:eb:ef:bb:53:04:35:8b:ae:19:
                    d8:d7:4f:6d:67:49:5a:71:10:c6:76:6d:aa:69:11:
                    8f:72:30:df:02:4d:82:7d:83:ec:2d:55:27:02:40:
                    1c:58:22:a4:34:fa:34:80:50:74:35:b4:12:c8:e0:
                    14:6a:56:0d:b5:a8:f6:71:6c:77:ec:a3:ad:b5:86:
                    6b:70:51:dc:01:df:a0:b8:40:d5:f9:38:11:b6:50:
                    9f:b0:5c:f6:bd:c3:61:14:51:77:0c:29:12:24:d3:
                    44:92:ab:d2:91:a7:71:47:f7:42:be:b1:4a:09:d2:
                    ed:07:25:c2:18:a2:21:e8:70:ee:4d:e3:fb:20:ea:
                    d8:76:d6:80:44:cc:66:fa:01:1d:2d:d3:cc:9a:c6:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:72:DD:E9:96:9C:01:90:65:57:F1:6B:FF:0A:FF:5A:6F:94:B2
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BcJy3emWnAGQZVfxa_8K_1pvlLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:2b:a7:26:2a:73:27:3b:8a:b8:e0:92:4f:ea:20:2f:95:99:
         67:00:5f:cd:d6:b5:67:2c:f3:9f:9f:c9:87:6e:bb:8c:55:4b:
         ea:0f:62:c5:71:9f:58:67:ed:a8:43:c3:87:c8:29:82:a2:8c:
         34:fe:21:f4:c5:a3:2b:72:de:82:48:be:1a:be:f0:ce:d9:8d:
         8b:16:46:ac:93:fb:fa:a8:98:36:59:0c:00:c4:d8:b0:f9:97:
         6d:fb:5c:19:46:c9:3b:15:6c:4d:92:1e:79:6e:bb:3a:a4:59:
         e4:c7:39:27:bf:a4:74:e7:34:2d:2d:4f:e3:b5:01:8e:d9:49:
         51:bc:47:2c:a1:10:db:97:fc:96:2b:ab:ac:0a:2a:1c:40:95:
         2a:7b:ae:a3:49:db:bf:03:0d:42:6d:dd:a4:55:bb:94:e2:51:
         4e:4f:94:28:88:d2:7f:21:78:fa:ef:02:c0:e2:58:bc:43:8a:
         6a:6f:c7:71:d8:91:b5:3b:d6:93:c8:dd:49:db:6e:78:6a:2d:
         12:ee:9a:2d:2f:11:89:a4:e5:76:fc:20:65:5c:82:23:7a:96:
         16:24:fa:df:6d:16:ed:91:cf:b0:f3:0e:0b:21:f1:46:14:8e:
         67:32:2e:d5:75:a1:72:13:ab:c6:b2:5d:3b:2e:8a:5d:fb:1c:
         70:8a:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org