Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/gEh2MUNYcUnd_J0wWtlKBtI4K7I.roa
File:                     gEh2MUNYcUnd_J0wWtlKBtI4K7I.roa (raw, json)
Hash identifier:          M3GFuBF0ax+oITHy2UvrSlVXh040H53WqmsGmDpdmzA=
Subject key identifier:   80:48:76:31:43:58:71:49:DD:FC:9D:30:5A:D9:4A:06:D2:38:2B:B2
Certificate issuer:       /CN=d78e527a8dde83f76ac7bd409ee6429ab8fd553b
Certificate serial:       90C73E
Authority key identifier: D7:8E:52:7A:8D:DE:83:F7:6A:C7:BD:40:9E:E6:42:9A:B8:FD:55:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/145Seo3eg_dqx71AnuZCmrj9VTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/gEh2MUNYcUnd_J0wWtlKBtI4K7I.roa
Signing time:             Tue 14 Jun 2022 13:03:44 +0000
ROA not before:           Tue 14 Jun 2022 13:03:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21379
IP address blocks:        194.104.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9488190 (0x90c73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78e527a8dde83f76ac7bd409ee6429ab8fd553b
        Validity
            Not Before: Jun 14 13:03:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8048763143587149ddfc9d305ad94a06d2382bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:c1:00:a3:ab:e5:7f:a1:b2:97:5f:32:9b:
                    86:9f:14:2f:b4:d3:50:bc:07:d9:30:af:fc:4b:d1:
                    fd:2f:bb:9c:df:31:26:f3:04:72:2d:6e:e3:8a:26:
                    d8:2c:1f:c1:45:5a:e5:26:0c:be:3f:8a:a3:cf:e5:
                    e1:36:c7:cc:e8:32:53:6d:ff:51:38:80:63:2d:33:
                    cd:a6:f5:4a:2c:12:af:1d:b1:ff:82:8a:55:de:2a:
                    39:d2:77:00:7f:98:3d:2c:56:2e:cb:88:db:ca:7b:
                    1d:5b:00:9f:6c:23:a1:18:d7:c1:3f:19:af:aa:db:
                    62:ae:5f:6c:2e:7f:b1:72:d5:8d:5e:01:e9:21:73:
                    6b:54:83:d0:67:17:86:09:29:ee:4a:59:9b:ad:b7:
                    9e:b4:7d:bd:19:93:e8:2b:e5:4a:b1:34:9a:da:bd:
                    bb:c7:b7:2a:d1:df:fa:65:46:6d:5b:ad:10:14:88:
                    6d:d3:27:27:ef:f4:7a:05:44:3b:b2:a0:94:3e:98:
                    ab:c2:f1:ab:67:cf:b5:28:4c:46:47:f4:91:da:dc:
                    15:8f:20:83:1c:d0:f9:dd:1d:96:3b:d4:50:da:e0:
                    57:ad:96:a4:33:38:d4:40:24:24:77:7d:4b:d4:3a:
                    7d:96:e4:21:56:bc:b9:ac:a2:16:33:cf:c7:6a:f7:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:76:31:43:58:71:49:DD:FC:9D:30:5A:D9:4A:06:D2:38:2B:B2
            X509v3 Authority Key Identifier:
                keyid:D7:8E:52:7A:8D:DE:83:F7:6A:C7:BD:40:9E:E6:42:9A:B8:FD:55:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/145Seo3eg_dqx71AnuZCmrj9VTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/gEh2MUNYcUnd_J0wWtlKBtI4K7I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0278d4-28df-45fd-9771-a33c684cb2a3/1/145Seo3eg_dqx71AnuZCmrj9VTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:be:b8:6f:f2:82:24:c9:ef:5e:44:04:41:a8:6b:bd:ed:
         3e:85:75:b8:13:a0:c0:31:f3:e3:cf:13:28:ad:64:c5:90:76:
         65:4b:7f:ce:53:dc:11:47:60:49:bb:17:05:45:7f:2c:16:42:
         6e:d5:da:c7:41:e0:ed:3d:d3:b6:f9:4e:e5:45:32:36:31:ab:
         83:c6:c4:90:37:67:48:17:49:5b:05:08:38:e0:28:9d:bf:56:
         72:4b:89:51:99:7e:a3:c7:b5:5d:74:6e:3f:d2:7f:74:fc:ed:
         54:35:6f:b4:f8:91:16:97:12:d6:3e:ac:37:7a:e5:e7:e4:75:
         9e:63:e6:47:67:47:d3:9a:6e:1a:d7:1d:b7:14:ba:e9:96:7c:
         d9:c5:f4:71:2c:cd:b8:6f:9f:33:c9:12:05:37:92:67:1f:ba:
         d2:36:8d:ed:f9:30:18:6d:a8:ba:a1:7a:d2:0b:4a:dc:c4:bd:
         be:1d:ea:d1:52:f7:ec:93:65:00:65:18:ec:d4:78:91:cc:c7:
         94:64:9e:67:4b:c8:61:ae:80:b9:87:bc:05:98:e3:24:ff:b8:
         fe:9d:3f:1b:f7:82:0c:b8:6d:44:9c:72:df:67:9c:a5:b6:91:
         88:62:d2:4e:1c:5f:16:e9:d9:14:80:09:02:45:05:72:06:d3:
         2f:4b:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:24 2023 by rpki-client on console-fra.rpki-client.org