Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lPi_9vBBm93nBff4C-kS1lFEYnY.roa
File:                     lPi_9vBBm93nBff4C-kS1lFEYnY.roa (raw, json)
Hash identifier:          DZNwUhQdsD0HeUOxaLxniqA+D/Ic7xDUKr7IY0QcCK8=
Subject key identifier:   94:F8:BF:F6:F0:41:9B:DD:E7:05:F7:F8:0B:E9:12:D6:51:44:62:76
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       03E62B89
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lPi_9vBBm93nBff4C-kS1lFEYnY.roa
Signing time:             Mon 14 Mar 2022 16:47:11 +0000
ROA not before:           Mon 14 Mar 2022 16:47:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        194.113.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65416073 (0x3e62b89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Mar 14 16:47:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94f8bff6f0419bdde705f7f80be912d651446276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:4f:d2:40:cf:9d:f2:05:3f:ac:00:34:cc:
                    7c:9c:26:ed:e7:d3:5b:b6:50:ce:f3:4d:e8:a4:fa:
                    f3:c3:03:0f:37:2e:a5:5c:0a:2c:04:bb:89:91:cc:
                    f0:62:e2:a5:fc:ad:63:f9:ba:79:75:7b:49:da:37:
                    b9:25:c6:13:a2:f8:7c:d0:12:37:09:03:a6:29:89:
                    23:5b:2a:b4:5e:2f:bb:5d:f9:88:d2:53:5c:ab:68:
                    53:a7:11:7b:62:cd:a6:1f:f9:ad:ba:72:3d:27:1c:
                    66:81:b3:2e:3d:d6:3b:35:f2:15:00:d6:3b:d4:46:
                    0e:d1:e4:ce:2e:59:d1:aa:1d:36:a6:be:cf:eb:6a:
                    6c:3e:61:87:a0:f0:ee:b7:6d:95:71:fc:0f:86:7b:
                    bf:97:ed:fc:e7:c0:45:32:e3:76:5d:01:4f:81:12:
                    66:66:c4:a9:4f:6b:a9:ce:04:e6:6f:a5:47:50:e1:
                    11:77:6d:1a:6d:b2:6b:dd:ec:29:6f:dd:b9:dd:6c:
                    89:66:1d:ec:5d:8c:99:39:2d:9f:9e:0f:e1:50:8f:
                    05:41:23:7b:4f:44:f1:c0:77:3f:6f:c6:1d:72:89:
                    64:02:46:0f:6a:1c:16:27:de:b3:e9:62:c5:5a:af:
                    b0:20:a0:bc:5b:83:33:3b:bd:8e:79:5a:b9:46:0d:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:BF:F6:F0:41:9B:DD:E7:05:F7:F8:0B:E9:12:D6:51:44:62:76
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/lPi_9vBBm93nBff4C-kS1lFEYnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:2f:b0:cf:cb:de:10:8b:6a:a2:73:8d:2f:1b:70:56:ff:
         44:ad:b0:b7:05:04:25:82:90:1a:f5:9d:49:c9:55:08:37:1f:
         0e:cb:bf:05:cb:3f:56:12:3a:0c:da:56:ea:8e:b8:83:70:a1:
         6a:33:83:26:71:75:4d:49:de:7f:c5:6d:b5:9e:08:4f:eb:69:
         99:10:aa:2a:45:a9:19:9d:df:8d:8f:1f:d6:fd:39:b5:dd:77:
         99:1b:94:06:7f:e6:7b:6e:71:5e:d4:37:85:59:71:08:bf:93:
         62:be:a5:76:5e:57:70:da:ae:94:a1:78:19:a0:4e:44:b5:7d:
         f9:b2:33:ea:cf:77:76:74:08:54:f7:43:06:40:f9:d4:6e:24:
         14:27:1e:d8:89:c5:8d:a3:45:65:a7:86:97:a4:06:77:86:44:
         c8:90:12:10:76:9a:ce:51:21:bd:73:ed:ec:82:d3:bb:be:2b:
         12:31:1b:98:73:ff:a0:26:86:9b:bf:ea:4d:06:f2:c9:12:38:
         ba:24:7d:b8:9b:1f:0b:00:9e:9b:b9:2e:6a:89:d9:4a:ea:c0:
         13:5b:59:4d:c4:89:b3:a0:e1:d0:e8:cb:d6:2b:31:44:c9:7c:
         62:91:e0:90:13:d5:0e:59:36:73:f1:33:bb:3a:ee:13:fb:53:
         0e:bc:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org