Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UwGJVkCaYH9OC63L5YDi4ijoZVM.roa
File:                     UwGJVkCaYH9OC63L5YDi4ijoZVM.roa (raw, json)
Hash identifier:          3PQ7zU7E6zW6EDpB0XOFBMSIVDDytmlMcv3dPjpMzbo=
Subject key identifier:   53:01:89:56:40:9A:60:7F:4E:0B:AD:CB:E5:80:E2:E2:28:E8:65:53
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       043AA153
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UwGJVkCaYH9OC63L5YDi4ijoZVM.roa
Signing time:             Sat 16 Apr 2022 03:21:46 +0000
ROA not before:           Sat 16 Apr 2022 03:21:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        193.176.129.0/24 maxlen: 24
                          194.113.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70951251 (0x43aa153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Apr 16 03:21:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53018956409a607f4e0badcbe580e2e228e86553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:b3:c3:24:17:5a:c4:be:fd:11:5c:1f:6f:
                    39:74:ea:f5:e5:b9:1b:0d:c3:18:9c:5b:de:14:37:
                    98:67:88:1f:b2:97:61:02:73:b6:88:24:38:f1:ce:
                    58:d3:51:77:e7:47:5c:5c:da:fe:d8:b3:3a:92:d4:
                    a9:46:fc:14:dc:5f:6b:e5:8d:e1:f9:19:22:a7:bb:
                    88:c2:94:e1:87:b6:7c:aa:4a:d0:61:de:65:21:87:
                    cf:24:2c:16:ab:f9:03:aa:f2:2b:56:b9:5a:1e:f7:
                    ff:88:53:d8:37:79:80:b1:24:7f:3d:04:bc:d4:d5:
                    24:af:c5:73:fb:a4:0e:a4:63:d1:86:b4:d9:7e:10:
                    74:5c:78:b1:b9:37:3c:b7:0e:2c:bc:95:db:5f:8c:
                    42:37:6c:4e:9f:83:87:6f:b8:0f:ab:04:93:9c:80:
                    ef:2e:7b:15:e7:66:39:e6:3c:6a:64:f2:32:bd:e6:
                    ea:b3:0b:5c:5b:9d:6a:22:6d:d3:ad:8b:11:6a:87:
                    1b:ef:d6:0f:0d:b2:1c:06:d9:a3:6d:e9:d8:27:fd:
                    70:5c:64:19:7e:c7:4c:93:b2:71:c9:3e:9f:9c:de:
                    80:1f:4a:66:d8:8e:bc:6b:3e:a5:a6:a9:89:27:b7:
                    95:fb:a8:36:a9:f2:a3:07:3f:a0:95:a4:8b:77:39:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:89:56:40:9A:60:7F:4E:0B:AD:CB:E5:80:E2:E2:28:E8:65:53
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UwGJVkCaYH9OC63L5YDi4ijoZVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.129.0/24
                  194.113.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:a4:49:af:39:51:a2:88:85:92:3b:4e:89:1e:90:66:81:
         f0:62:b3:9c:2b:09:9f:a2:2e:40:d6:01:34:b4:d3:2f:e6:1c:
         00:3a:23:d8:e7:f4:b1:45:42:d2:55:65:1a:48:2c:ab:aa:99:
         34:b4:c2:50:11:ce:46:ea:b0:a0:c2:f7:17:0f:1c:b0:cf:b6:
         d4:e3:06:bc:e1:fa:92:01:24:c1:fa:45:ff:f4:96:e4:4e:a4:
         c4:b1:32:9a:75:68:1c:66:e6:53:0d:66:db:39:e9:49:7c:89:
         0f:02:1d:e7:e1:8e:1e:05:86:d2:a5:63:f2:c1:e3:dd:d7:c3:
         25:8f:1b:21:7f:70:85:bd:8b:97:71:6d:f1:3f:2b:9c:90:35:
         19:72:4b:e9:02:c5:3b:e8:d9:36:3f:f3:a4:0f:02:d2:ba:cd:
         d1:b3:b3:fa:f2:63:bf:2e:93:3b:37:b0:02:24:bf:f1:2e:0a:
         e5:f1:2a:da:f1:b3:82:4e:0e:36:70:40:23:86:ff:86:c4:e5:
         eb:15:1b:b6:ef:b5:97:7e:53:20:85:c6:d8:3b:e0:cd:26:36:
         ff:7a:d1:2f:0a:d3:b6:de:e8:36:a1:6e:4a:80:ab:b9:2c:eb:
         09:fc:81:a0:f0:78:f3:30:25:82:d4:a0:b8:c6:e7:62:58:33:
         91:38:06:f1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBDqhUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDQx
NjAzMjE0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTMwMTg5NTY0MDlh
NjA3ZjRlMGJhZGNiZTU4MGUyZTIyOGU4NjU1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJews8MkF1rEvv0RXB9vOXTq9eW5Gw3DGJxb3hQ3mGeIH7KX
YQJztogkOPHOWNNRd+dHXFza/tizOpLUqUb8FNxfa+WN4fkZIqe7iMKU4Ye2fKpK
0GHeZSGHzyQsFqv5A6ryK1a5Wh73/4hT2Dd5gLEkfz0EvNTVJK/Fc/ukDqRj0Ya0
2X4QdFx4sbk3PLcOLLyV21+MQjdsTp+Dh2+4D6sEk5yA7y57FedmOeY8amTyMr3m
6rMLXFudaiJt062LEWqHG+/WDw2yHAbZo23p2Cf9cFxkGX7HTJOycck+n5zegB9K
ZtiOvGs+paapiSe3lfuoNqnyowc/oJWki3c5NKECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRTAYlWQJpgf04LrcvlgOLiKOhlUzAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L1V3R0pWa0NhWUg5T0M2M0w1WURpNGlqb1pWTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMGwgQMEAMJx3zANBgkqhkiG9w0B
AQsFAAOCAQEATjikSa85UaKIhZI7TokekGaB8GKznCsJn6IuQNYBNLTTL+YcADoj
2Of0sUVC0lVlGkgsq6qZNLTCUBHORuqwoML3Fw8csM+21OMGvOH6kgEkwfpF//SW
5E6kxLEymnVoHGbmUw1m2znpSXyJDwId5+GOHgWG0qVj8sHj3dfDJY8bIX9whb2L
l3Ft8T8rnJA1GXJL6QLFO+jZNj/zpA8C0rrN0bOz+vJjvy6TOzewAiS/8S4K5fEq
2vGzgk4ONnBAI4b/hsTl6xUbtu+1l35TIIXG2DvgzSY2/3rRLwrTtt7oNqFuSoCr
uSzrCfyBoPB48zAlgtSguMbnYlgzkTgG8Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org