Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ke5qlZyBLv_yowuXvwqrxuVpw3k.roa
File:                     ke5qlZyBLv_yowuXvwqrxuVpw3k.roa (raw, json)
Hash identifier:          Tdj2FxtS33mr2pf3GNP1jbL5I+TJSG8kP6wMt+WOYxI=
Subject key identifier:   91:EE:6A:95:9C:81:2E:FF:F2:A3:0B:97:BF:0A:AB:C6:E5:69:C3:79
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0183DA7B00ED0D15047F8B677C8F02FABD85
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ke5qlZyBLv_yowuXvwqrxuVpw3k.roa
Signing time:             Sat 15 Oct 2022 07:10:37 +0000
ROA not before:           Sat 15 Oct 2022 07:10:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.111.125.0/24 maxlen: 24
                          147.78.122.0/23 maxlen: 24
                          194.104.156.0/24 maxlen: 24
                          194.113.226.0/24 maxlen: 24
                          45.146.81.0/24 maxlen: 24
                          45.146.80.0/24 maxlen: 24
                          45.149.186.0/23 maxlen: 24
                          194.105.21.0/24 maxlen: 24
                          192.166.82.0/24 maxlen: 24
                          192.166.83.0/24 maxlen: 24
                          193.176.128.0/24 maxlen: 24
                          45.152.240.0/23 maxlen: 24
                          193.142.4.0/24 maxlen: 24
                          194.5.148.0/23 maxlen: 24
                          45.158.10.0/23 maxlen: 24
                          45.158.8.0/24 maxlen: 24
                          45.158.8.0/23 maxlen: 23
                          192.166.114.0/24 maxlen: 24
                          45.153.4.0/24 maxlen: 24
                          45.153.4.0/23 maxlen: 24
                          45.153.6.0/23 maxlen: 24
                          45.153.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:da:7b:00:ed:0d:15:04:7f:8b:67:7c:8f:02:fa:bd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Oct 15 07:10:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=91ee6a959c812efff2a30b97bf0aabc6e569c379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:a6:41:c0:b6:09:74:db:e9:83:fd:e2:ba:
                    f6:d4:b0:8e:01:cb:a4:2e:bb:96:3d:58:7a:fa:49:
                    d1:6e:e4:16:11:52:51:65:b9:f6:d8:48:6d:d9:b6:
                    d8:f6:b2:f4:c8:91:31:7b:59:2a:13:0a:4d:a6:d6:
                    14:61:11:4b:8b:98:a3:b9:d2:c2:14:ba:5b:ff:d7:
                    17:a2:a4:b1:2b:e2:a5:1e:ae:57:be:df:47:d0:ca:
                    65:21:01:f3:3a:e6:c4:c9:eb:81:b3:c9:4e:00:6b:
                    72:3f:23:a2:fb:8b:b0:26:b8:93:18:d8:9d:65:1a:
                    48:f1:82:89:54:9e:cf:6f:ab:c3:25:76:d3:be:46:
                    14:a6:26:07:b7:b7:86:96:aa:d0:4b:45:b0:76:82:
                    45:5e:92:7e:bd:f1:eb:20:5e:3d:cb:ca:16:88:c6:
                    17:76:fa:2e:58:0b:04:e0:2e:d5:07:e0:e3:87:a6:
                    5d:3d:f5:c4:e3:37:0c:1a:10:09:bf:2c:39:c4:7f:
                    bf:dd:26:00:91:b4:a4:2d:e1:e9:d8:a9:82:0a:ca:
                    81:62:03:66:e5:07:7e:0a:76:5e:2d:fe:c1:72:d0:
                    f9:77:20:3d:fa:66:be:8d:59:57:41:51:88:c5:65:
                    a3:0c:8f:44:15:e8:81:d0:2b:9f:3f:29:5a:a0:bc:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EE:6A:95:9C:81:2E:FF:F2:A3:0B:97:BF:0A:AB:C6:E5:69:C3:79
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ke5qlZyBLv_yowuXvwqrxuVpw3k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.80.0/23
                  45.149.186.0/23
                  45.152.240.0/23
                  45.153.4.0/22
                  45.158.8.0/22
                  147.78.122.0/23
                  192.166.82.0/23
                  192.166.114.0/24
                  193.111.125.0/24
                  193.142.4.0/24
                  193.176.128.0/24
                  194.5.148.0/23
                  194.104.156.0/24
                  194.105.21.0/24
                  194.113.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:21:85:ae:d5:1d:52:39:0c:0d:d9:53:fa:6f:11:b4:b3:87:
         76:60:7b:0f:55:e8:a6:be:64:e2:c4:c4:ae:9d:14:ab:1b:8b:
         d1:58:8c:51:92:26:88:0e:f1:e1:60:89:dc:e1:3d:a6:a5:81:
         e6:a7:3c:89:06:95:87:3d:57:11:bd:89:70:1a:9b:29:06:97:
         7e:3a:a1:f6:b7:e0:2e:51:5f:27:3f:2e:bb:99:55:d9:4b:c5:
         9f:a4:d5:a6:18:ca:d2:bf:9a:ef:18:dd:34:93:f9:bf:dc:7d:
         9d:dd:d6:73:c2:e1:81:d9:6a:00:b2:d0:e0:ac:b3:54:70:71:
         b4:cd:8a:a8:3b:b7:9d:a1:35:4e:42:5d:39:ca:a0:0f:06:2c:
         9c:20:e5:11:78:f9:85:79:67:38:18:e8:03:ed:7e:5b:2b:f8:
         20:24:33:60:a3:b7:da:d1:50:91:f2:29:3b:49:35:2d:3a:23:
         68:e4:0f:44:34:52:39:73:30:55:e6:ba:ac:88:5a:f8:ad:27:
         7d:6f:35:ab:21:72:47:69:2b:15:8a:3e:e8:bb:7f:19:2a:86:
         68:1d:f8:6a:77:86:b5:5a:ae:2f:a0:b8:29:19:e1:4d:18:0b:
         d9:44:68:cf:a7:36:5c:bc:65:79:31:ce:c7:a0:f2:e3:91:84:
         2b:42:9a:75
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYPaewDtDRUEf4tnfI8C+r2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDE1MDcxMDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWVlNmE5NTljODEyZWZmZjJhMzBiOTdiZjBhYWJjNmU1NjljMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3KmQcC2CXTb6YP94rr21LCOAcuk
LruWPVh6+knRbuQWEVJRZbn22Eht2bbY9rL0yJExe1kqEwpNptYUYRFLi5ijudLC
FLpb/9cXoqSxK+KlHq5Xvt9H0MplIQHzOubEyeuBs8lOAGtyPyOi+4uwJriTGNid
ZRpI8YKJVJ7Pb6vDJXbTvkYUpiYHt7eGlqrQS0WwdoJFXpJ+vfHrIF49y8oWiMYX
dvouWAsE4C7VB+Djh6ZdPfXE4zcMGhAJvyw5xH+/3SYAkbSkLeHp2KmCCsqBYgNm
5Qd+CnZeLf7BctD5dyA9+ma+jVlXQVGIxWWjDI9EFeiB0CufPylaoLz0iwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFJHuapWcgS7/8qMLl78Kq8blacN5MB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEva2U1cWxaeUJMdl95b3d1WHZ3cXJ4dVZwdzNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQBLZJQAwQB
LZW6AwQBLZjwAwQCLZkEAwQCLZ4IAwQBk056AwQBwKZSAwQAwKZyAwQAwW99AwQA
wY4EAwQAwbCAAwQBwgWUAwQAwmicAwQAwmkVAwQAwnHiMA0GCSqGSIb3DQEBCwUA
A4IBAQCdIYWu1R1SOQwN2VP6bxG0s4d2YHsPVeimvmTixMSunRSrG4vRWIxRkiaI
DvHhYInc4T2mpYHmpzyJBpWHPVcRvYlwGpspBpd+OqH2t+AuUV8nPy67mVXZS8Wf
pNWmGMrSv5rvGN00k/m/3H2d3dZzwuGB2WoAstDgrLNUcHG0zYqoO7edoTVOQl05
yqAPBiycIOURePmFeWc4GOgD7X5bK/ggJDNgo7fa0VCR8ik7STUtOiNo5A9ENFI5
czBV5rqsiFr4rSd9bzWrIXJHaSsVij7ou38ZKoZoHfhqd4a1Wq4voLgpGeFNGAvZ
RGjPpzZcvGV5Mc7HoPLjkYQrQpp1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org