Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ai8YefmXDmK6lGh1APQ8xiB4XII.roa
File:                     ai8YefmXDmK6lGh1APQ8xiB4XII.roa (raw, json)
Hash identifier:          v7WJivilsLo6PF8U7MktrrOlt6CPYrsWtfJexZrFzkY=
Subject key identifier:   6A:2F:18:79:F9:97:0E:62:BA:94:68:75:00:F4:3C:C6:20:78:5C:82
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       018317D4C4F1F19B740AA8187403E77D9BC6
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ai8YefmXDmK6lGh1APQ8xiB4XII.roa
Signing time:             Wed 07 Sep 2022 12:02:43 +0000
ROA not before:           Wed 07 Sep 2022 12:02:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.164.1.0/24 maxlen: 24
                          45.146.80.0/23 maxlen: 23
                          45.146.82.0/23 maxlen: 23
                          193.142.4.0/24 maxlen: 24
                          194.5.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:17:d4:c4:f1:f1:9b:74:0a:a8:18:74:03:e7:7d:9b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Sep  7 12:02:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a2f1879f9970e62ba94687500f43cc620785c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:40:6a:ab:55:30:b0:9f:df:a6:b2:b8:ca:
                    90:6e:02:f0:64:2c:4e:c7:e3:31:5e:43:b6:ee:97:
                    31:3c:74:8b:fb:29:80:1c:21:ce:f1:6a:ca:fb:7a:
                    fd:fa:72:fe:72:a7:63:08:81:c2:02:fa:d2:88:f3:
                    54:c3:7f:64:03:06:8f:0d:e6:2f:5a:46:0b:7c:fd:
                    45:6a:7e:8d:d3:d6:9e:23:91:6c:6d:77:ac:ac:e8:
                    2b:fc:cd:bc:2b:8e:e7:f6:6f:9e:96:50:c4:e8:3a:
                    ae:fe:38:8a:a3:3e:9b:ba:d4:b0:0c:ce:be:8c:90:
                    bc:22:90:7b:78:de:2a:2d:fd:08:bf:65:7e:fc:59:
                    c9:35:1b:20:b7:ae:5d:76:1a:76:df:48:f9:0a:9a:
                    7a:1f:7d:58:fc:e0:ca:00:a3:92:75:fe:76:de:24:
                    dc:20:37:59:c5:7c:f8:53:56:bf:db:8f:31:cc:5e:
                    f5:b4:e4:a7:ee:bb:84:66:09:cd:36:b2:89:df:13:
                    0c:81:8c:c4:13:ed:e4:4e:74:a0:95:28:79:4f:4e:
                    17:67:1e:6f:f2:9b:f1:e1:99:9c:f2:cc:98:98:2c:
                    13:d6:e9:49:ff:4c:55:d5:54:33:5e:f9:06:7e:12:
                    b4:b4:3d:af:01:cb:bf:52:a3:8e:af:2a:c2:70:e4:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:18:79:F9:97:0E:62:BA:94:68:75:00:F4:3C:C6:20:78:5C:82
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ai8YefmXDmK6lGh1APQ8xiB4XII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.80.0/22
                  193.142.4.0/24
                  193.164.1.0/24
                  194.5.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:80:48:22:7a:cc:eb:e2:8c:0d:b7:88:41:c3:85:6a:70:
         e9:a0:7e:66:2c:4c:01:17:43:58:4a:14:e6:db:a1:c8:8a:f3:
         51:7a:88:3e:d6:77:d2:d4:f3:ac:b6:c7:a0:b6:09:49:2b:ae:
         58:45:d0:43:db:2e:48:36:0b:94:2b:bc:bc:b9:cc:42:7b:d3:
         2e:aa:a0:50:e6:c1:0f:2a:31:84:18:7f:2c:14:c8:24:c1:62:
         6b:3e:7f:29:90:b1:cf:15:f1:4c:60:0b:44:d5:02:09:86:c6:
         29:ea:3b:67:8c:ed:a4:ed:80:2e:cb:5f:2e:ca:21:9f:3a:86:
         16:d7:70:24:33:78:99:47:c4:ea:d7:8e:b0:e7:a0:df:a0:67:
         43:b6:6d:f5:41:c8:79:57:b0:ea:c2:de:a7:c6:3b:5a:a6:c2:
         a7:44:40:42:4b:25:15:c2:ce:e7:ee:d9:06:bc:0a:4b:71:52:
         7a:f3:d6:16:76:66:70:48:20:57:f7:1c:99:a1:7e:70:42:00:
         5b:e6:bd:c8:37:b1:1d:d5:b7:6d:55:82:29:aa:2c:89:cf:00:
         2f:95:a6:bc:c7:ce:bc:81:18:4b:15:41:ec:dd:47:40:4e:9f:
         06:9b:4b:9a:a5:88:84:67:90:46:4f:be:14:4d:a7:77:bf:e3:
         78:02:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org