Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/N0B0dvvP4H5nbDp8rGIzzuJqlC8.roa
File:                     N0B0dvvP4H5nbDp8rGIzzuJqlC8.roa (raw, json)
Hash identifier:          QktMtwHybVk3NOCayQDUNaYcmOfGhbkTSNkTGptkjT8=
Subject key identifier:   37:40:74:76:FB:CF:E0:7E:67:6C:3A:7C:AC:62:33:CE:E2:6A:94:2F
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       04E66997
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/N0B0dvvP4H5nbDp8rGIzzuJqlC8.roa
Signing time:             Wed 15 Jun 2022 05:17:45 +0000
ROA not before:           Wed 15 Jun 2022 05:17:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204721
IP address blocks:        91.199.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82209175 (0x4e66997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jun 15 05:17:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37407476fbcfe07e676c3a7cac6233cee26a942f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:ac:0e:24:06:36:63:c6:66:de:c3:a9:de:
                    c0:86:8b:99:10:c3:64:8c:ac:75:e6:2d:e2:96:74:
                    5e:a8:de:73:c6:f6:24:d7:b6:3a:19:52:c6:8b:11:
                    23:7f:2e:30:f8:e4:b2:89:0d:4f:a1:89:fc:13:af:
                    ec:d8:89:13:7d:eb:b3:3a:3f:95:60:1d:55:25:4d:
                    3a:82:e6:ea:e8:13:30:18:8b:1a:36:3d:db:8a:45:
                    f0:10:ce:72:09:d1:25:7c:d8:e1:6a:c6:52:c2:58:
                    bf:c6:64:7a:fd:f4:63:24:78:57:b6:52:c8:c9:e1:
                    3b:43:b2:8c:1d:74:80:b9:2a:84:bb:5f:6f:ef:06:
                    52:e8:12:25:24:14:70:41:2e:d6:ab:c7:7d:30:8b:
                    fb:15:99:13:0d:df:66:33:2b:f6:56:2a:0f:f7:a6:
                    9c:53:23:fe:97:91:8b:eb:c6:f3:9f:7e:40:4d:f2:
                    cc:bc:6c:53:7f:9d:18:cc:31:54:d0:24:48:52:38:
                    23:28:3c:e8:46:5d:fa:e7:a9:f5:5c:79:68:ed:73:
                    c2:80:62:2b:8a:6f:37:7c:60:20:80:3e:fe:d5:4c:
                    78:6a:c3:18:17:b8:2c:df:c0:21:6c:d1:6e:75:2e:
                    df:f8:87:8a:75:29:39:e2:6f:9e:fa:0c:a6:b9:aa:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:74:76:FB:CF:E0:7E:67:6C:3A:7C:AC:62:33:CE:E2:6A:94:2F
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/N0B0dvvP4H5nbDp8rGIzzuJqlC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:99:b7:81:26:d8:6c:99:5c:c1:78:57:4d:a3:9d:4d:b5:5d:
         f5:cd:d7:12:25:df:0b:60:78:d0:15:bf:30:87:6e:6e:29:2f:
         63:9f:59:de:3d:51:10:bf:05:31:61:9e:46:46:1f:67:0a:f0:
         d6:99:61:0d:0f:b2:92:8a:e3:5f:fb:79:71:c9:56:04:48:49:
         b6:d2:df:1d:1b:e2:9f:24:19:a5:ef:12:05:17:13:c1:0a:d7:
         ca:b0:88:ae:48:6f:cc:93:86:52:ae:b8:ec:85:01:92:f8:c6:
         97:63:1a:c1:65:ca:40:28:18:68:73:dc:64:aa:ee:b4:49:ee:
         53:96:cf:46:f5:83:c6:b1:e1:04:64:5a:76:be:40:ff:58:dd:
         6a:31:79:0c:93:46:fd:e0:43:4e:a8:35:b3:78:97:56:6d:82:
         e2:d1:e6:fc:0e:28:df:04:27:ec:27:c9:06:aa:35:52:8c:08:
         16:35:04:ba:82:c7:ac:ec:cb:58:c9:a8:26:e7:2a:22:f2:3e:
         76:49:90:76:ea:f4:37:4f:bc:52:4c:37:e7:96:59:1e:e9:9e:
         0a:f9:a1:34:c5:4e:70:fd:9e:5f:e6:b7:c4:10:21:7c:c0:39:
         83:85:80:77:e7:b6:de:12:49:3b:be:2e:11:4f:de:76:ab:04:
         71:6d:8a:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOZplzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDYx
NTA1MTc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc0MDc0NzZmYmNm
ZTA3ZTY3NmMzYTdjYWM2MjMzY2VlMjZhOTQyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6OrA4kBjZjxmbew6newIaLmRDDZIysdeYt4pZ0Xqjec8b2
JNe2OhlSxosRI38uMPjksokNT6GJ/BOv7NiJE33rszo/lWAdVSVNOoLm6ugTMBiL
GjY924pF8BDOcgnRJXzY4WrGUsJYv8Zkev30YyR4V7ZSyMnhO0OyjB10gLkqhLtf
b+8GUugSJSQUcEEu1qvHfTCL+xWZEw3fZjMr9lYqD/emnFMj/peRi+vG859+QE3y
zLxsU3+dGMwxVNAkSFI4Iyg86EZd+uep9Vx5aO1zwoBiK4pvN3xgIIA+/tVMeGrD
GBe4LN/AIWzRbnUu3/iHinUpOeJvnvoMprmq+ccCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ3QHR2+8/gfmdsOnysYjPO4mqULzAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L04wQjBkdnZQNEg1bmJEcDhyR0l6enVKcWxDOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHrDANBgkqhkiG9w0BAQsFAAOC
AQEAw5m3gSbYbJlcwXhXTaOdTbVd9c3XEiXfC2B40BW/MIdubikvY59Z3j1REL8F
MWGeRkYfZwrw1plhDQ+ykorjX/t5cclWBEhJttLfHRvinyQZpe8SBRcTwQrXyrCI
rkhvzJOGUq647IUBkvjGl2MawWXKQCgYaHPcZKrutEnuU5bPRvWDxrHhBGRadr5A
/1jdajF5DJNG/eBDTqg1s3iXVm2C4tHm/A4o3wQn7CfJBqo1UowIFjUEuoLHrOzL
WMmoJucqIvI+dkmQdur0N0+8Ukw355ZZHumeCvmhNMVOcP2eX+a3xBAhfMA5g4WA
d+e23hJJO74uEU/edqsEcW2Kdg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org