Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/bpcgprQzxf0IOGzQCxtI5uobGbg.roa
File:                     bpcgprQzxf0IOGzQCxtI5uobGbg.roa (raw, json)
Hash identifier:          HGEUIj3f5+Y+TtlsLrjCh9tSVFNtArR23FQCSnNzfGI=
Subject key identifier:   6E:97:20:A6:B4:33:C5:FD:08:38:6C:D0:0B:1B:48:E6:EA:1B:19:B8
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       018C8D289CB17B1F4614532ED3253974C209
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/bpcgprQzxf0IOGzQCxtI5uobGbg.roa
Signing time:             Thu 21 Dec 2023 16:14:58 +0000
ROA not before:           Thu 21 Dec 2023 16:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136038
IP address blocks:        185.202.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8d:28:9c:b1:7b:1f:46:14:53:2e:d3:25:39:74:c2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Dec 21 16:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e9720a6b433c5fd08386cd00b1b48e6ea1b19b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:4c:43:8c:ae:89:9c:59:3d:74:4a:f3:77:
                    d5:0e:92:ad:54:d6:b2:f6:81:ea:18:f7:14:1e:2f:
                    4f:d8:03:e8:e3:61:4b:1e:62:6c:d8:18:44:5b:65:
                    82:98:c2:1b:43:75:21:1d:5b:61:f3:4b:4b:a2:84:
                    50:cf:7a:ee:e7:35:c0:93:90:f5:58:73:b9:a9:0a:
                    b1:33:1f:a2:f8:ee:fb:87:10:03:77:24:61:11:ea:
                    25:ab:05:a1:ab:a9:17:e1:f7:c3:33:a5:df:6e:ec:
                    1b:5e:25:c9:ef:9b:09:5d:f6:fd:4a:04:c5:e0:d2:
                    1f:56:0c:da:a6:f5:d4:5e:8d:f4:12:38:9a:7a:44:
                    66:29:d8:3f:31:11:88:ef:8b:c3:0d:68:e6:ca:b6:
                    14:8e:4b:b7:b7:d5:88:19:0b:a8:4e:a4:cb:e1:d4:
                    dd:6e:01:24:5f:39:b4:70:94:97:88:dc:69:2f:5b:
                    9c:24:b7:5c:09:80:12:7f:c6:54:64:54:cd:d2:89:
                    89:74:df:5b:03:37:c5:22:21:4f:b6:eb:64:b3:e9:
                    3c:14:66:2d:80:a9:8e:92:f9:bb:dd:1b:04:92:d6:
                    01:ac:18:8e:5b:c5:c0:c3:88:62:28:56:02:7c:b7:
                    d5:18:3e:50:19:18:de:ef:f5:c7:b8:ea:f1:30:c5:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:20:A6:B4:33:C5:FD:08:38:6C:D0:0B:1B:48:E6:EA:1B:19:B8
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/bpcgprQzxf0IOGzQCxtI5uobGbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:7a:c1:77:9e:83:56:18:d8:25:23:6c:52:f9:25:4a:ea:
         3c:37:75:e4:17:3d:39:ae:ba:c8:e9:84:77:1f:b9:f9:94:f9:
         41:db:39:5a:13:be:1a:32:02:be:93:cd:49:26:73:18:d3:41:
         22:2d:6a:5a:be:c9:c6:b6:6b:d1:25:4b:bb:9e:3d:28:c3:00:
         9f:9d:c9:21:1a:af:93:71:94:49:9b:93:f2:c7:82:f6:74:14:
         f7:54:4c:ef:b0:e8:26:e1:24:80:db:08:c2:49:ed:25:f6:50:
         9c:87:d5:dd:0d:df:75:c9:e9:4e:ba:c0:d2:d8:cc:3f:1b:9d:
         29:db:b5:97:c2:8b:86:58:39:72:f4:be:05:1f:1b:69:50:e9:
         2f:dd:81:13:c8:d6:ff:b0:c3:7a:b2:1f:70:94:64:97:ec:dc:
         7a:c4:4d:0f:dd:0d:26:f2:86:ed:10:ed:b7:65:f6:48:6a:b7:
         d2:f5:85:14:44:39:90:7a:88:24:aa:8f:45:b4:a5:04:30:19:
         9e:35:4c:d1:42:61:b2:93:a8:35:98:39:03:48:bf:37:6a:b8:
         a0:07:fc:4b:33:0f:a9:4d:33:a9:60:4b:e6:71:ce:51:f2:2a:
         9c:d1:a0:77:2d:4c:70:a4:20:15:57:c3:8b:69:ae:bb:96:67:
         43:27:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org