Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wuI_nR_abPOoT43aXF8U7Bw-k2Q.roa
File:                     wuI_nR_abPOoT43aXF8U7Bw-k2Q.roa (raw, json)
Hash identifier:          Z+yxw81LHv7Hp+nNbdmrRNKme4JP60yA5spEgyZCXZ0=
Subject key identifier:   C2:E2:3F:9D:1F:DA:6C:F3:A8:4F:8D:DA:5C:5F:14:EC:1C:3E:93:64
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       04874E0F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wuI_nR_abPOoT43aXF8U7Bw-k2Q.roa
Signing time:             Thu 12 May 2022 16:02:01 +0000
ROA not before:           Thu 12 May 2022 16:02:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        91.199.163.0/24 maxlen: 24
                          45.152.240.0/23 maxlen: 24
                          194.113.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75976207 (0x4874e0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: May 12 16:02:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2e23f9d1fda6cf3a84f8dda5c5f14ec1c3e9364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:27:89:2c:0e:33:b1:21:a2:27:8e:be:8a:
                    be:4e:d2:e4:be:17:71:60:5f:12:b5:6a:61:6b:77:
                    3d:7c:bf:95:f4:06:b9:71:06:a9:4a:7f:06:40:63:
                    db:a8:c7:3f:6e:50:7a:86:ed:85:fe:4b:d6:29:0c:
                    81:83:18:86:0d:b4:87:d5:77:88:22:59:21:80:67:
                    b1:28:8f:09:1f:2a:4a:69:ec:af:bd:19:aa:f7:bb:
                    70:89:fe:13:22:9b:f4:48:ef:59:cb:19:56:b1:f1:
                    5a:c3:b3:9b:87:d7:64:99:1c:85:9a:69:80:cb:2e:
                    fc:9b:51:41:a3:32:34:1e:fb:c5:6d:ed:1e:2c:1f:
                    52:ec:d5:4d:10:d6:35:03:4f:1b:70:c2:fc:90:d8:
                    fd:cb:b6:10:53:08:30:3d:38:bf:87:37:a5:48:02:
                    ab:a9:02:cf:3a:a2:3c:09:9a:cc:56:5b:59:ae:6e:
                    98:1f:ff:1d:eb:58:29:4f:00:e1:0c:d9:e8:cd:8a:
                    0c:39:cb:ff:97:b8:10:fd:50:aa:0e:87:a3:36:ed:
                    d9:1d:5b:6c:2a:2d:a4:cc:49:84:e5:21:4b:58:49:
                    57:74:f9:9b:5f:09:b6:08:d7:d0:e1:41:ff:85:b3:
                    df:9c:33:a6:fc:9f:d1:fa:dd:a3:6a:b2:a0:df:9e:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E2:3F:9D:1F:DA:6C:F3:A8:4F:8D:DA:5C:5F:14:EC:1C:3E:93:64
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wuI_nR_abPOoT43aXF8U7Bw-k2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.240.0/23
                  91.199.163.0/24
                  194.113.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:92:34:25:e0:50:4f:fb:15:ae:f5:37:20:47:cb:27:7b:b3:
         a1:f4:14:18:ca:63:f4:12:d4:0f:10:76:e8:ad:90:f8:74:ed:
         3e:c8:b6:bf:18:5e:de:fc:f5:11:98:ad:9c:ec:42:81:c6:91:
         f7:8d:fc:31:de:b6:b7:f7:cb:0f:0a:0a:6a:f6:6b:94:8d:3c:
         a3:38:07:cb:ab:9b:ba:3a:43:e1:5d:e0:33:89:40:3d:d4:ab:
         17:1e:f7:eb:2d:ac:31:91:96:aa:d4:ff:3a:7d:91:7e:9f:3f:
         5a:cf:9f:5e:37:84:75:37:2d:e1:0f:4b:7a:d9:a0:1d:e7:11:
         64:5e:eb:3e:da:d1:50:69:44:b6:62:83:e3:53:9b:a2:1b:01:
         18:9f:be:df:a4:33:91:d1:10:73:b0:32:be:24:fb:02:f8:53:
         7c:35:4a:7a:82:cd:36:ba:88:79:40:bd:02:b6:4c:6f:38:b7:
         fd:ba:e1:54:5f:91:9e:54:8b:bf:d3:7d:1f:1b:8e:1c:74:90:
         2b:bf:53:f9:11:4b:14:81:47:f5:2c:c4:26:c3:7d:51:b0:8b:
         9b:4e:f4:01:49:d1:0c:cb:69:a1:b1:c7:1b:12:03:ea:42:0b:
         1f:ec:90:b3:00:dc:41:4b:9b:51:d5:c3:e0:45:6a:5c:fa:d0:
         b6:42:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org