Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ltvGwrhivUbJDueN9s6jAuwWo-s.roa
File:                     ltvGwrhivUbJDueN9s6jAuwWo-s.roa (raw, json)
Hash identifier:          iba2dM4BnhOhI5sZ2kQgwFg1/B0E5btjr8kCbYISIWE=
Subject key identifier:   96:DB:C6:C2:B8:62:BD:46:C9:0E:E7:8D:F6:CE:A3:02:EC:16:A3:EB
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       01849E50F42B9AC91C008ED1110C125D66C9
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ltvGwrhivUbJDueN9s6jAuwWo-s.roa
Signing time:             Tue 22 Nov 2022 07:50:16 +0000
ROA not before:           Tue 22 Nov 2022 07:50:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140947
IP address blocks:        147.78.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:9e:50:f4:2b:9a:c9:1c:00:8e:d1:11:0c:12:5d:66:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Nov 22 07:50:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96dbc6c2b862bd46c90ee78df6cea302ec16a3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:37:ef:e7:37:26:81:ee:66:fe:42:51:94:
                    ff:da:14:d0:52:ad:5e:86:83:94:ee:4f:4c:3b:0c:
                    a6:10:e4:af:1f:bd:1e:e2:18:5a:44:d0:92:5d:36:
                    e7:10:7c:4d:f0:4a:44:93:b4:3c:67:ff:db:84:15:
                    39:da:f0:5a:6f:8d:fe:e8:13:53:a2:06:4b:07:94:
                    7a:0f:bc:69:28:7b:9a:2c:d5:f9:91:60:cc:b2:22:
                    ae:81:fa:fd:ab:19:e3:b8:97:c8:8b:55:b1:98:61:
                    3c:d7:be:51:c0:bc:f8:a7:33:81:5c:41:41:45:a2:
                    0a:48:96:59:e0:ca:19:b0:c7:07:da:5d:8f:dc:db:
                    4e:bf:67:19:d1:58:57:f8:69:4f:60:0e:71:7d:7e:
                    e1:27:f1:ef:e8:bc:f2:ed:68:c2:70:87:96:c8:af:
                    7f:e2:a1:b8:8c:82:f4:b1:ce:33:9d:84:dc:ee:f8:
                    a8:3e:54:42:9a:36:a9:06:70:2d:29:4d:c7:99:0a:
                    fa:a9:5f:90:9f:f8:22:d0:42:ff:0f:b9:f7:de:43:
                    67:9d:3f:2e:64:1a:c4:d1:b2:35:c8:ec:0b:6d:16:
                    b5:19:0a:6d:cf:dc:0c:4f:5f:78:a0:4d:92:da:23:
                    a2:5c:b3:4a:e7:ab:c2:45:63:12:ce:19:1e:96:c3:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:C6:C2:B8:62:BD:46:C9:0E:E7:8D:F6:CE:A3:02:EC:16:A3:EB
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ltvGwrhivUbJDueN9s6jAuwWo-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:78:da:77:56:e8:d9:c6:15:62:78:09:ea:dc:85:a3:0a:
         0a:e4:b5:ec:0d:c5:fb:30:f9:88:fa:d4:f1:0f:44:81:28:b0:
         6f:92:7c:35:b6:6a:3b:89:a9:82:7e:9f:9a:c5:36:24:c0:1c:
         a3:b7:2d:62:bc:41:ae:c2:f6:6a:bc:27:89:e7:16:89:31:6a:
         72:e6:d2:fc:98:45:5d:c3:bc:34:96:24:5e:2a:55:3d:6f:06:
         7c:e5:d4:65:8c:e3:b2:dc:5c:46:cc:31:6a:65:e9:a3:67:33:
         10:73:b4:72:2a:84:62:ba:e1:9f:75:13:70:52:9f:0e:66:95:
         f7:a0:dd:85:b1:da:af:c4:3c:53:ea:a3:04:79:f3:1f:dd:ef:
         60:70:11:aa:d5:a6:fd:41:fc:8d:fc:f1:f7:c8:31:9a:b6:d4:
         97:99:0e:26:c0:ac:4a:a5:0c:1d:df:91:8a:aa:57:03:3e:21:
         b1:f2:6a:37:f9:b2:48:b4:48:5a:0f:2a:1e:9b:73:9f:72:4c:
         49:5f:07:19:ce:3e:28:85:64:41:9e:0c:5e:73:4f:fd:89:36:
         6d:40:aa:26:a7:3e:7d:2d:42:be:aa:d2:fe:1d:e1:a7:1f:0d:
         0a:99:7d:62:a2:9c:6e:3e:7d:86:45:39:c8:82:10:c7:b0:30:
         ed:43:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org