Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/vT7t6bo2RvvdhaQKiKBcRQEAIVY.roa
File:                     vT7t6bo2RvvdhaQKiKBcRQEAIVY.roa (raw, json)
Hash identifier:          sYZIamuzdvX3owaGFsbK48HrdPGrAMUd/lkETmulzRk=
Subject key identifier:   BD:3E:ED:E9:BA:36:46:FB:DD:85:A4:0A:88:A0:5C:45:01:00:21:56
Certificate issuer:       /CN=ff40503cb21a922897971726f6b7eecc253f1193
Certificate serial:       01856FB1181A680EB33B71AB648E26538ED3
Authority key identifier: FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0BQPLIakiiXlxcm9rfuzCU_EZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/vT7t6bo2RvvdhaQKiKBcRQEAIVY.roa
Signing time:             Sun 01 Jan 2023 23:35:55 +0000
ROA not before:           Sun 01 Jan 2023 23:35:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3332
IP address blocks:        193.40.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b1:18:1a:68:0e:b3:3b:71:ab:64:8e:26:53:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff40503cb21a922897971726f6b7eecc253f1193
        Validity
            Not Before: Jan  1 23:35:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd3eede9ba3646fbdd85a40a88a05c4501002156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:93:e5:6e:be:85:40:07:44:05:97:48:ba:
                    98:bd:86:db:55:c1:8d:55:b5:0c:a3:8b:ee:83:21:
                    9b:a1:bc:43:51:c1:62:de:81:c8:04:2d:b1:c7:49:
                    49:14:3a:3c:e7:21:c4:cd:2d:96:07:cb:97:7d:a1:
                    03:f2:af:16:fa:5b:53:b9:c6:92:d3:07:24:b7:51:
                    3b:87:05:65:dd:b9:c5:57:6a:db:3a:d6:42:ff:19:
                    84:a0:8b:08:90:81:85:bb:95:a8:3d:6e:aa:bc:f9:
                    33:02:09:99:e8:d1:44:d9:c8:9f:6b:2f:0a:af:44:
                    1e:1e:3f:89:b4:db:d1:8b:51:33:91:75:d1:8a:45:
                    ed:12:c0:38:23:9e:06:ca:a0:af:b7:be:fc:af:e8:
                    4d:c6:15:c2:ff:db:41:bb:2d:e3:79:6e:46:ed:9f:
                    4a:4f:c8:43:7a:1a:e6:a3:b5:62:95:f0:38:4e:51:
                    b8:69:9a:9b:ef:a0:4c:9a:35:86:a9:f0:cf:a1:8c:
                    73:75:b4:09:f9:ad:0b:f4:72:66:fd:a1:20:c1:11:
                    3b:69:18:a5:da:b0:24:90:fd:ab:a8:0f:89:7a:21:
                    ae:f4:e5:37:d5:e2:07:a2:7d:b5:34:ac:94:3d:2c:
                    c5:c6:f1:56:ef:d3:0c:7a:8f:18:e2:ac:ec:0e:6e:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3E:ED:E9:BA:36:46:FB:DD:85:A4:0A:88:A0:5C:45:01:00:21:56
            X509v3 Authority Key Identifier:
                keyid:FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0BQPLIakiiXlxcm9rfuzCU_EZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/vT7t6bo2RvvdhaQKiKBcRQEAIVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/_0BQPLIakiiXlxcm9rfuzCU_EZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.40.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f5:d7:c4:e1:b3:41:b5:a6:72:97:4c:51:b9:c2:ce:cf:04:
         ab:da:c9:b6:e0:dd:00:e7:1c:a7:b6:21:e4:1a:1e:d1:ef:9f:
         64:2d:ab:45:cd:84:ac:fa:6d:bb:53:8a:d1:11:87:01:2b:52:
         83:9a:43:9f:2e:c7:60:9a:f5:d6:05:53:73:ba:b5:2f:1f:21:
         8d:3d:6d:6c:6a:6e:6a:b6:07:4b:42:33:45:f9:62:8a:85:58:
         81:3a:34:e8:4f:ca:32:84:51:8c:64:ca:77:41:98:41:2d:29:
         ed:81:ce:3a:40:61:e9:82:56:36:35:ea:f4:d5:54:fc:82:dc:
         1e:b7:07:a3:03:c2:0f:fd:73:a3:c0:d3:0a:11:5b:2c:8a:41:
         1b:55:ea:12:cc:a4:d1:ab:b8:82:c1:79:80:5c:1b:a6:ce:c2:
         09:45:10:ea:8e:e5:f1:b1:06:be:2a:c6:fe:bc:e5:20:94:a3:
         f9:72:7c:9e:0a:7e:e1:d1:c3:1e:94:e7:05:fa:91:51:ff:89:
         bb:d6:68:a5:6b:eb:b5:38:b9:2a:02:8a:89:4f:e6:f8:fe:26:
         8a:08:40:9b:0e:9e:39:89:ba:69:0d:25:7f:ef:64:8b:08:86:
         0f:31:e1:eb:13:1c:a0:e6:5f:96:1a:47:b8:fb:19:8f:a4:7c:
         de:74:b8:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvsRgaaA6zO3GrZI4mU47TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDA1MDNjYjIxYTkyMjg5Nzk3MTcyNmY2YjdlZWNjMjUz
ZjExOTMwHhcNMjMwMTAxMjMzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDNlZWRlOWJhMzY0NmZiZGQ4NWE0MGE4OGEwNWM0NTAxMDAyMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYaT5W6+hUAHRAWXSLqYvYbbVcGN
VbUMo4vugyGbobxDUcFi3oHIBC2xx0lJFDo85yHEzS2WB8uXfaED8q8W+ltTucaS
0wckt1E7hwVl3bnFV2rbOtZC/xmEoIsIkIGFu5WoPW6qvPkzAgmZ6NFE2cifay8K
r0QeHj+JtNvRi1EzkXXRikXtEsA4I54GyqCvt778r+hNxhXC/9tBuy3jeW5G7Z9K
T8hDehrmo7VilfA4TlG4aZqb76BMmjWGqfDPoYxzdbQJ+a0L9HJm/aEgwRE7aRil
2rAkkP2rqA+JeiGu9OU31eIHon21NKyUPSzFxvFW79MMeo8Y4qzsDm7quwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0+7em6Nkb73YWkCoigXEUBACFWMB8GA1UdIwQY
MBaAFP9AUDyyGpIol5cXJva37swlPxGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBCUVBMSWFraWlYbHhjbTlyZnV6Q1VfRVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Mjk0MTQtZDdhNS00OWViLTliZDYt
Y2JmMWJiYjBmZDE4LzEvdlQ3dDZibzJSdnZkaGFRS2lLQmNSUUVBSVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81Mjk0MTQtZDdhNS00OWViLTliZDYtY2JmMWJiYjBmZDE4
LzEvXzBCUVBMSWFraWlYbHhjbTlyZnV6Q1VfRVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSjDMA0G
CSqGSIb3DQEBCwUAA4IBAQCz9dfE4bNBtaZyl0xRucLOzwSr2sm24N0A5xyntiHk
Gh7R759kLatFzYSs+m27U4rREYcBK1KDmkOfLsdgmvXWBVNzurUvHyGNPW1sam5q
tgdLQjNF+WKKhViBOjToT8oyhFGMZMp3QZhBLSntgc46QGHpglY2Ner01VT8gtwe
twejA8IP/XOjwNMKEVssikEbVeoSzKTRq7iCwXmAXBumzsIJRRDqjuXxsQa+Ksb+
vOUglKP5cnyeCn7h0cMelOcF+pFR/4m71mila+u1OLkqAoqJT+b4/iaKCECbDp45
ibppDSV/72SLCIYPMeHrExyg5l+WGke4+xmPpHzedLjG
-----END CERTIFICATE-----
Generated at Tue Dec 19 12:33:02 2023 by rpki-client on console-ams.rpki-client.org