Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/X-Gl8GlXY_HBIp39Wi7ZIDU1Tuk.roa
File:                     X-Gl8GlXY_HBIp39Wi7ZIDU1Tuk.roa (raw, json)
Hash identifier:          WnSnjFV29JWHr7+eFD1y0QXiFaYqVLzISKsK5xHEshc=
Subject key identifier:   5F:E1:A5:F0:69:57:63:F1:C1:22:9D:FD:5A:2E:D9:20:35:35:4E:E9
Certificate issuer:       /CN=518c14d7fbd0a7b765b1960b8bea82cf7d0cb4be
Certificate serial:       1275FE31
Authority key identifier: 51:8C:14:D7:FB:D0:A7:B7:65:B1:96:0B:8B:EA:82:CF:7D:0C:B4:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYwU1_vQp7dlsZYLi-qCz30MtL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/X-Gl8GlXY_HBIp39Wi7ZIDU1Tuk.roa
Signing time:             Sat 01 Jan 2022 04:01:20 +0000
ROA not before:           Sat 01 Jan 2022 04:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397373
IP address blocks:        80.72.78.0/24 maxlen: 24
                          80.72.84.0/22 maxlen: 24
                          80.72.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309722673 (0x1275fe31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518c14d7fbd0a7b765b1960b8bea82cf7d0cb4be
        Validity
            Not Before: Jan  1 04:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fe1a5f0695763f1c1229dfd5a2ed92035354ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:00:2d:93:f7:fd:7e:09:51:2f:b5:36:0f:
                    dd:93:23:4b:db:7d:c7:8c:23:2e:be:16:64:5c:12:
                    ca:cf:0a:31:f3:2f:5a:ce:8b:f1:51:a2:d8:98:3e:
                    df:a8:07:02:64:f1:d0:54:0c:40:64:8b:1f:82:2e:
                    2b:e3:fd:d6:6d:3c:c2:53:ba:ab:d9:21:c9:a3:f2:
                    06:cd:74:51:7a:53:78:b7:a1:89:29:bd:8f:10:da:
                    53:74:eb:ae:72:ca:69:b4:86:e0:9d:9f:2a:d3:6a:
                    81:30:3f:92:fc:c3:7b:5e:ce:6b:9d:7f:f3:d2:55:
                    5f:55:92:92:c6:1a:d8:30:19:d6:79:0b:00:6b:bc:
                    37:26:19:0f:dc:73:ae:38:f9:c8:86:2e:cb:d0:28:
                    be:d5:37:1c:8f:fe:bf:ed:86:46:02:32:28:75:f0:
                    ef:5f:f7:bf:2c:2d:a7:2f:53:6f:12:23:1e:a0:90:
                    71:60:bf:ee:f6:08:5a:7b:6d:df:00:c0:15:52:34:
                    da:6a:03:0d:f0:bd:a1:95:58:7b:39:e3:33:98:68:
                    f7:89:11:40:e7:c9:fa:47:86:15:2a:3d:02:94:7c:
                    5b:d9:bc:79:b8:9b:a5:48:5f:d0:db:da:41:83:46:
                    1b:e5:f3:38:1a:c8:fd:b2:89:ca:ef:80:54:5a:a0:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E1:A5:F0:69:57:63:F1:C1:22:9D:FD:5A:2E:D9:20:35:35:4E:E9
            X509v3 Authority Key Identifier:
                keyid:51:8C:14:D7:FB:D0:A7:B7:65:B1:96:0B:8B:EA:82:CF:7D:0C:B4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYwU1_vQp7dlsZYLi-qCz30MtL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/X-Gl8GlXY_HBIp39Wi7ZIDU1Tuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/852364-ca64-4c12-b457-ca7e1ca676c8/1/UYwU1_vQp7dlsZYLi-qCz30MtL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.72.78.0/24
                  80.72.84.0-80.72.91.255

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:99:70:c2:78:7c:b3:99:4a:1e:3f:7d:74:49:27:21:11:
         97:ec:ca:75:45:89:64:52:7d:47:9b:c6:e3:ce:9b:19:4e:51:
         59:79:54:d7:11:29:7e:d9:4e:7f:1c:58:10:2d:07:a0:18:74:
         2f:72:f3:ae:73:95:41:ef:9b:fc:85:16:31:60:81:d1:ce:a0:
         22:f5:3c:e3:16:91:6d:6f:7e:51:da:8c:00:4b:00:a3:66:da:
         26:b4:23:1b:18:b4:af:bc:b9:55:ee:3f:22:e3:b3:85:d9:83:
         87:24:71:ce:2f:9c:ab:05:8d:6e:73:61:88:39:13:6d:ac:ac:
         4d:84:c4:69:8f:f1:a7:a8:50:c5:05:fb:46:b9:20:f0:98:9a:
         da:77:95:15:4d:b8:e3:e9:ff:8e:51:cc:84:5a:6b:da:23:ca:
         ac:6a:97:fd:cc:f3:fe:26:33:6e:9d:4d:22:aa:25:50:36:4f:
         53:89:76:8b:00:3d:7a:e8:d6:21:69:62:ff:43:1f:16:1e:18:
         60:c6:c1:30:d7:4d:ba:cc:15:45:ec:34:fd:4c:0a:2f:be:ea:
         90:68:99:8b:d9:0c:48:57:25:50:48:8d:30:24:71:32:50:46:
         56:0a:68:53:37:cb:87:6e:d3:53:43:1f:1f:89:83:e3:0c:09:
         eb:f9:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org