Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OU1mZrtPjWGsSyJMhh_rowYPagM.roa
File:                     OU1mZrtPjWGsSyJMhh_rowYPagM.roa (raw, json)
Hash identifier:          qzvQY8zQcOpHdw49Xswxp27Ga5ZULqKF95zCAtVY/iM=
Subject key identifier:   39:4D:66:66:BB:4F:8D:61:AC:4B:22:4C:86:1F:EB:A3:06:0F:6A:03
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       01837D357164D785D775D3D1F18FF302B8A3
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OU1mZrtPjWGsSyJMhh_rowYPagM.roa
Signing time:             Tue 27 Sep 2022 04:29:57 +0000
ROA not before:           Tue 27 Sep 2022 04:29:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33387
IP address blocks:        193.176.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7d:35:71:64:d7:85:d7:75:d3:d1:f1:8f:f3:02:b8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Sep 27 04:29:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=394d6666bb4f8d61ac4b224c861feba3060f6a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:a0:ba:a4:07:96:99:25:00:31:ee:79:84:
                    3e:5c:37:21:8f:fd:3f:38:d4:fe:e2:a9:84:5e:95:
                    2b:15:f7:92:98:45:4c:b7:2d:86:58:b7:ee:97:ec:
                    eb:c1:ee:18:bc:24:03:58:13:59:45:24:be:05:6c:
                    0b:84:9f:c5:01:dd:da:2d:d2:82:f4:86:b6:eb:4e:
                    07:d4:de:12:c9:70:f8:18:fc:d2:ce:bf:94:c7:e1:
                    19:ba:6c:93:1a:22:ef:06:b6:4f:4a:b1:1f:62:90:
                    d4:eb:17:0c:91:97:5f:a6:7a:dd:51:59:4d:3d:12:
                    39:a3:be:b4:fa:cf:94:6c:60:af:ea:2e:dc:1b:18:
                    e2:5b:6a:31:4c:57:bb:d3:a6:e7:55:b3:dc:0c:a3:
                    76:e3:29:e2:41:7f:fe:69:9c:50:8c:19:6a:05:6c:
                    57:f1:7b:5e:33:e0:d8:b6:cd:d7:71:83:66:e3:91:
                    c9:5c:cb:fc:54:9d:c2:9c:77:de:16:ab:fe:90:a1:
                    56:f6:a1:44:4c:10:4c:76:5c:9d:e8:09:0f:0e:89:
                    4b:65:91:28:16:5d:02:ac:cb:b7:96:38:87:5c:e9:
                    5b:70:99:5b:e5:90:5f:e8:27:8b:2c:ae:1b:a1:6e:
                    cb:da:5f:ca:d5:f1:b8:1a:4c:a6:9c:0a:3a:dc:f1:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4D:66:66:BB:4F:8D:61:AC:4B:22:4C:86:1F:EB:A3:06:0F:6A:03
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OU1mZrtPjWGsSyJMhh_rowYPagM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:ea:7f:f7:84:bc:a7:7b:33:d9:4d:62:c6:4e:11:05:01:
         49:df:68:79:6a:85:a9:de:93:1c:55:3b:a4:04:b0:5b:45:b7:
         55:24:31:8d:8e:69:cc:9a:95:db:4f:79:c1:ed:50:4c:ee:1e:
         f4:63:0b:53:ba:8f:3d:d9:75:e0:8e:3c:ae:06:3c:db:96:51:
         5a:74:55:4d:b2:95:30:f1:aa:a8:96:06:8a:f5:93:e8:d3:dd:
         df:8b:fd:86:f6:a8:e1:3e:ae:58:fb:de:0d:03:21:94:0c:a4:
         ed:c4:07:07:fe:73:1c:76:53:74:b5:bc:46:be:f6:1e:ac:13:
         d3:e4:34:02:77:b5:b6:91:53:e9:6a:21:4a:ad:5a:59:e1:08:
         87:47:46:6a:86:80:26:88:c7:52:65:a0:7c:04:e0:02:36:1d:
         9c:60:5b:50:5c:84:71:98:48:ab:32:aa:a9:68:63:e0:d7:1f:
         fd:fb:ce:cb:fa:8b:7e:ef:96:11:ae:e5:d7:52:9c:58:fa:92:
         04:15:92:db:91:bd:57:e1:52:f7:c0:bd:e1:f9:32:ec:de:f5:
         3c:27:68:21:2e:7b:d3:f2:17:1b:bc:11:00:d3:12:8b:3e:6c:
         5e:ec:36:bf:9f:8c:38:16:62:a7:2d:3a:ff:2f:97:bc:38:db:
         d1:12:d2:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN9NXFk14XXddPR8Y/zArijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwOTI3MDQyOTU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTRkNjY2NmJiNGY4ZDYxYWM0YjIyNGM4NjFmZWJhMzA2MGY2YTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkqguqQHlpklADHueYQ+XDchj/0/
ONT+4qmEXpUrFfeSmEVMty2GWLful+zrwe4YvCQDWBNZRSS+BWwLhJ/FAd3aLdKC
9Ia2604H1N4SyXD4GPzSzr+Ux+EZumyTGiLvBrZPSrEfYpDU6xcMkZdfpnrdUVlN
PRI5o760+s+UbGCv6i7cGxjiW2oxTFe706bnVbPcDKN24yniQX/+aZxQjBlqBWxX
8XteM+DYts3XcYNm45HJXMv8VJ3CnHfeFqv+kKFW9qFETBBMdlyd6AkPDolLZZEo
Fl0CrMu3ljiHXOlbcJlb5ZBf6CeLLK4boW7L2l/K1fG4GkymnAo63PFHVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlNZma7T41hrEsiTIYf66MGD2oDMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvT1UxbVpydFBqV0dzU3lKTWhoX3Jvd1lQYWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbA2MA0G
CSqGSIb3DQEBCwUAA4IBAQBaf+p/94S8p3sz2U1ixk4RBQFJ32h5aoWp3pMcVTuk
BLBbRbdVJDGNjmnMmpXbT3nB7VBM7h70YwtTuo892XXgjjyuBjzbllFadFVNspUw
8aqolgaK9ZPo093fi/2G9qjhPq5Y+94NAyGUDKTtxAcH/nMcdlN0tbxGvvYerBPT
5DQCd7W2kVPpaiFKrVpZ4QiHR0ZqhoAmiMdSZaB8BOACNh2cYFtQXIRxmEirMqqp
aGPg1x/9+87L+ot+75YRruXXUpxY+pIEFZLbkb1X4VL3wL3h+TLs3vU8J2ghLnvT
8hcbvBEA0xKLPmxe7Da/n4w4FmKnLTr/L5e8ONvREtKp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org