Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/VGyGReoh00L-v1rQTglcCJwTevU.roa
File:                     VGyGReoh00L-v1rQTglcCJwTevU.roa (raw, json)
Hash identifier:          wp6+LIIi3jCiWMaMtjcuC8nVvu7Hb0XkK8IUE/RQvj0=
Subject key identifier:   54:6C:86:45:EA:21:D3:42:FE:BF:5A:D0:4E:09:5C:08:9C:13:7A:F5
Certificate issuer:       /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial:       03AB57DD
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/VGyGReoh00L-v1rQTglcCJwTevU.roa
Signing time:             Thu 27 Jan 2022 18:17:07 +0000
ROA not before:           Thu 27 Jan 2022 18:17:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29262
IP address blocks:        141.98.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61560797 (0x3ab57dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
        Validity
            Not Before: Jan 27 18:17:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=546c8645ea21d342febf5ad04e095c089c137af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:53:8f:c4:1f:24:68:85:c9:26:9c:3f:f1:
                    d9:83:60:dc:68:19:c0:60:c8:1c:80:50:10:fb:95:
                    dc:26:23:e8:f6:fd:5c:eb:c9:8c:79:e6:1b:63:3a:
                    f0:fd:db:d1:81:cd:08:08:38:6e:98:dc:3c:42:be:
                    11:cd:29:e8:28:9e:6c:f4:c5:4f:97:36:ea:8a:9a:
                    13:a1:c9:54:b6:bb:d8:5c:20:52:05:54:4d:86:bf:
                    f9:72:83:42:b7:6b:30:46:30:68:9c:2a:3f:b4:03:
                    cf:a9:30:32:3c:e3:12:ae:7c:4d:08:1b:b4:13:79:
                    c1:e7:ef:94:cd:a3:a3:b6:f4:52:74:52:eb:3f:30:
                    6d:76:76:bd:d9:6d:99:3a:4a:a3:12:25:8e:18:1c:
                    68:05:cf:19:10:de:62:ef:28:18:31:03:54:49:1e:
                    ae:86:ff:b2:dc:ca:b6:23:fc:94:15:b8:e5:05:e3:
                    2c:cb:39:51:e8:16:d8:5f:d7:f6:10:c6:00:50:d5:
                    70:17:b5:39:d7:6a:9f:4b:8b:eb:72:9f:8d:38:12:
                    b8:0c:2e:17:73:f7:bf:2a:c5:07:89:7c:7d:5c:53:
                    4b:f8:55:b5:55:da:b6:50:dc:f2:dd:b9:e4:e7:09:
                    31:51:47:1b:c5:81:bb:52:f1:68:f0:58:ae:68:82:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6C:86:45:EA:21:D3:42:FE:BF:5A:D0:4E:09:5C:08:9C:13:7A:F5
            X509v3 Authority Key Identifier:
                keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/VGyGReoh00L-v1rQTglcCJwTevU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:38:bd:13:b5:32:7d:1e:99:bf:10:43:87:b1:1a:f5:14:cf:
         f4:d2:f3:5b:76:1b:2d:1b:99:10:ea:cd:45:81:78:09:5e:b4:
         45:e1:d5:71:6e:6f:7c:82:c6:9f:4b:e1:1c:cb:31:47:66:70:
         cf:d0:ce:a0:00:1b:19:62:ff:3b:dd:8a:37:5a:7f:fd:70:1f:
         1c:cc:39:07:7a:6f:15:60:a7:55:0f:bb:f0:a9:ef:7c:07:74:
         dd:e2:34:8f:36:53:d8:8a:50:d9:ac:7e:20:e8:22:96:19:77:
         d0:41:ac:8c:89:10:7d:a7:62:bb:f4:1a:0a:f8:ae:18:7d:db:
         3a:c1:1d:51:5d:15:c4:ad:53:26:e7:55:3b:c5:26:f4:57:4e:
         da:20:14:e1:80:58:a0:54:7f:cc:c4:ae:b9:50:16:14:29:81:
         2d:5b:52:62:24:13:ec:52:3a:eb:65:7e:e7:11:36:af:4d:3b:
         f8:73:30:34:7d:ee:33:dd:2d:f8:44:36:1b:e6:46:46:03:66:
         38:a7:38:19:ed:33:cf:68:88:8d:8e:12:a6:99:e9:a9:e8:10:
         f9:c9:e0:19:eb:31:ce:be:0a:4b:14:f7:ef:95:eb:a6:27:1c:
         27:73:45:35:26:bb:84:b5:31:4e:c5:a3:15:8b:43:4a:9d:19:
         35:df:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org