Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/NMpItkmkV9cF1En97i5-ElyjOS4.roa
File:                     NMpItkmkV9cF1En97i5-ElyjOS4.roa (raw, json)
Hash identifier:          RVjjjMTSaE4uJhHd3U113LJx7n1LDt46WNG3a8jjbuU=
Subject key identifier:   34:CA:48:B6:49:A4:57:D7:05:D4:49:FD:EE:2E:7E:12:5C:A3:39:2E
Certificate issuer:       /CN=d71ab9573edf87172cc4d61bdcf0480826f213cc
Certificate serial:       018964C089ADF4EB60DF1D10B6F75674CD5B
Authority key identifier: D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/NMpItkmkV9cF1En97i5-ElyjOS4.roa
Signing time:             Mon 17 Jul 2023 16:48:06 +0000
ROA not before:           Mon 17 Jul 2023 16:48:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        178.212.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:89:ad:f4:eb:60:df:1d:10:b6:f7:56:74:cd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d71ab9573edf87172cc4d61bdcf0480826f213cc
        Validity
            Not Before: Jul 17 16:48:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=34ca48b649a457d705d449fdee2e7e125ca3392e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8f:0e:b7:3f:0d:c3:c1:5e:77:7d:fd:dc:6b:
                    3a:2b:a2:6e:db:2d:c4:db:bf:ec:c0:21:80:21:0f:
                    88:30:56:eb:96:66:4e:8c:b8:00:ff:83:a4:82:d0:
                    3a:6f:90:57:e4:0a:58:b8:09:e3:b5:93:5b:ce:cd:
                    3f:53:ba:38:52:0b:b8:a4:47:9e:ed:2d:2c:1b:ed:
                    72:fe:c6:c0:49:6a:32:dc:3f:06:8f:3c:c4:b9:06:
                    8a:08:59:3a:f1:0e:b5:de:e1:a1:59:df:d5:fb:80:
                    d1:ff:a4:9d:3e:cc:91:1f:10:75:cf:8d:fa:3b:ea:
                    f9:5c:c8:a6:82:79:f4:f3:14:ab:f0:c7:43:c1:12:
                    22:54:ac:0d:6d:04:9d:58:1a:28:54:cc:c8:b7:1e:
                    38:48:89:0f:05:e9:9a:df:60:97:41:d1:3b:99:e1:
                    ae:0b:35:85:c0:dc:2a:56:68:14:f1:6d:a9:06:f3:
                    84:c5:e3:34:43:a2:8b:97:5e:5d:21:91:06:f1:fc:
                    25:11:69:79:b0:30:30:32:67:64:7d:73:54:09:dd:
                    7d:56:c5:4b:42:02:ae:43:33:f3:7f:d3:4e:1a:50:
                    1d:56:47:83:0b:eb:e2:10:24:d6:2a:54:d8:8b:52:
                    51:d5:e3:eb:e5:63:48:d0:d9:e5:ae:ab:9b:7a:a7:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CA:48:B6:49:A4:57:D7:05:D4:49:FD:EE:2E:7E:12:5C:A3:39:2E
            X509v3 Authority Key Identifier:
                keyid:D7:1A:B9:57:3E:DF:87:17:2C:C4:D6:1B:DC:F0:48:08:26:F2:13:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xq5Vz7fhxcsxNYb3PBICCbyE8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/NMpItkmkV9cF1En97i5-ElyjOS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/747d75-e4c9-41ff-ae8b-5502244f764c/1/1xq5Vz7fhxcsxNYb3PBICCbyE8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:51:31:d3:4d:c0:8c:38:e3:fa:45:33:76:c6:d9:51:4c:
         fd:10:7c:7e:46:2d:75:d8:d4:27:9c:71:3f:35:32:30:f5:50:
         2d:cc:1b:b4:bb:98:94:d5:0a:02:bc:63:b6:78:b8:d8:ff:83:
         fa:f0:14:aa:18:86:f6:f0:78:05:2e:99:5d:39:61:64:24:4d:
         80:2d:f4:05:fb:10:9d:22:b2:1b:78:3a:d9:cb:b4:17:93:bb:
         43:a3:f5:d2:0a:5a:3e:10:0d:f4:4f:fd:ea:2a:53:e4:9d:81:
         e7:7a:af:ea:ef:a5:8b:ea:06:10:25:ec:21:4d:d6:f3:d9:c4:
         85:87:14:c1:38:a8:76:27:a9:b4:3e:2c:91:e1:57:f7:0f:b5:
         e2:c0:76:5a:44:8f:c8:e4:1d:c7:ad:21:6e:eb:d3:1d:17:de:
         9f:9f:3d:a7:6b:2c:2e:4d:ba:8a:77:64:e1:5b:24:8f:0c:ed:
         a9:cf:0e:a4:18:a0:96:d0:f4:ae:62:ca:f4:5a:7e:d4:35:25:
         0d:79:68:f0:54:63:3e:80:7e:cc:52:12:eb:9e:dc:2e:74:16:
         2c:2a:fb:87:14:be:ed:44:35:b2:4c:62:f7:1c:b3:69:7d:aa:
         58:d1:e4:08:03:fa:c8:fc:b6:35:73:64:87:f3:fe:31:7f:69:
         cd:24:17:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:29:34 2023 by rpki-client on console-fra.rpki-client.org