Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/cy-SDfTOGBaHbwi4WjbKcymF1QI.roa
File:                     cy-SDfTOGBaHbwi4WjbKcymF1QI.roa (raw, json)
Hash identifier:          tICQZS8EI2As9urFGpBMR7XHUm6f6coQuX6edrsUM2M=
Subject key identifier:   73:2F:92:0D:F4:CE:18:16:87:6F:08:B8:5A:36:CA:73:29:85:D5:02
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       018211A289DF638AC10DA059D294992DD16F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/cy-SDfTOGBaHbwi4WjbKcymF1QI.roa
Signing time:             Mon 18 Jul 2022 14:07:20 +0000
ROA not before:           Mon 18 Jul 2022 14:07:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399471
IP address blocks:        194.147.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:11:a2:89:df:63:8a:c1:0d:a0:59:d2:94:99:2d:d1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jul 18 14:07:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=732f920df4ce1816876f08b85a36ca732985d502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:7a:da:6f:08:78:fa:de:23:08:93:77:b4:
                    28:3c:e0:9f:5c:3d:f7:fb:0b:5a:d0:45:81:9c:df:
                    4d:27:84:87:b2:89:ea:34:91:ac:d8:01:2e:de:53:
                    18:9e:0e:70:b8:9f:8e:22:f1:b5:ed:8f:5c:a4:7e:
                    e7:e2:63:c1:98:12:fd:3b:9f:d8:c1:77:e3:44:75:
                    c3:0f:7b:69:2e:06:77:48:e5:5d:77:5d:07:21:ff:
                    6c:7a:62:0f:17:5b:b0:96:05:31:b9:e9:47:f8:43:
                    2a:3b:bd:a8:f2:87:06:63:19:25:15:80:cc:90:89:
                    96:76:fb:f5:1d:d4:04:15:08:c0:35:93:5d:be:45:
                    ea:9a:9c:04:9c:85:d5:88:99:eb:4b:fe:41:81:ad:
                    31:b7:30:78:0e:27:76:65:83:2b:36:89:44:e6:b2:
                    eb:fe:83:4f:eb:28:09:b3:51:f8:02:8f:98:39:b4:
                    28:e1:a2:43:5f:e5:83:b8:37:ea:8e:2b:d3:be:cb:
                    ae:2b:bb:d6:a7:52:fa:79:a2:84:ad:22:04:0d:30:
                    63:7e:80:96:7e:13:09:12:2a:9a:46:f0:da:9c:cf:
                    e9:8e:ae:d1:0e:6e:7a:86:8b:ff:d4:9c:0f:00:a9:
                    79:34:5f:62:f9:97:64:cc:ca:dc:26:2c:1e:3c:98:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:92:0D:F4:CE:18:16:87:6F:08:B8:5A:36:CA:73:29:85:D5:02
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/cy-SDfTOGBaHbwi4WjbKcymF1QI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b5:8d:c7:ee:8e:b0:eb:6d:78:3e:3d:ca:c9:f4:12:a5:a9:
         b9:35:02:ad:e2:92:dd:cc:cb:61:ba:b5:02:34:24:dc:8b:1c:
         62:a4:7f:6a:29:ab:6e:f5:8e:6b:8d:07:d4:c3:5d:94:9e:a8:
         13:21:75:e9:43:61:de:8d:b9:ad:09:94:36:8e:e3:f6:59:a0:
         43:3e:ea:97:9d:5a:62:4c:ba:cb:50:d9:a5:4d:32:49:9b:04:
         55:9e:96:8c:00:b3:de:22:b3:6a:16:0f:f7:c3:19:22:48:42:
         66:d5:52:03:8e:e3:b9:b3:f7:58:60:89:a6:1d:4c:4e:e6:dd:
         be:0b:10:f8:b1:56:0f:85:78:a1:51:77:17:37:39:89:d1:28:
         55:06:f0:e2:ee:39:03:ca:a5:07:94:9e:ad:b0:c1:4d:c0:c6:
         88:36:4e:8c:e7:de:32:04:32:59:e7:be:45:de:79:55:5b:52:
         61:2c:9a:cf:04:af:33:93:dd:db:78:b7:d4:63:ae:e7:57:c6:
         d8:af:58:16:0a:bf:e0:50:11:e0:e5:cb:f6:33:c7:1a:1c:ad:
         d3:48:c7:5e:3d:ca:42:7c:2d:2e:76:c3:7a:6d:b5:07:ff:f3:
         2f:0d:4a:43:5c:cc:63:12:39:15:11:78:b9:cf:c8:a6:1b:96:
         68:6b:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org