Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/6bVa_tMt7Fdb0FCoICTRooOkss4.roa
File:                     6bVa_tMt7Fdb0FCoICTRooOkss4.roa (raw, json)
Hash identifier:          GfWRhGwNdxcaux2+fj1T6PuMcQ+BzZAOx7v6WT06Zsw=
Subject key identifier:   E9:B5:5A:FE:D3:2D:EC:57:5B:D0:50:A8:20:24:D1:A2:83:A4:B2:CE
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       01837DD0F008733D83FD41CF938CAA93AA5C
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/6bVa_tMt7Fdb0FCoICTRooOkss4.roa
Signing time:             Tue 27 Sep 2022 07:19:48 +0000
ROA not before:           Tue 27 Sep 2022 07:19:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        194.150.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7d:d0:f0:08:73:3d:83:fd:41:cf:93:8c:aa:93:aa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Sep 27 07:19:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9b55afed32dec575bd050a82024d1a283a4b2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:e5:e4:d2:31:94:9a:9a:db:89:a1:8b:9e:
                    68:60:fa:d5:44:fa:0c:0c:aa:10:c6:12:3d:b7:9f:
                    09:71:6e:5b:05:78:c6:ac:1d:df:03:da:97:2b:0e:
                    b9:b8:89:36:83:b7:58:a5:22:db:48:d7:f5:92:62:
                    39:d4:cb:ee:36:93:4e:04:c2:96:02:36:1d:e2:88:
                    b0:25:89:72:27:ec:e5:bc:bf:a0:e8:cd:61:96:64:
                    3d:8e:24:68:43:09:7c:f2:05:c7:86:10:fe:67:9d:
                    2a:55:b6:cd:72:ce:53:9e:35:be:7f:d4:ca:b9:eb:
                    83:e8:f8:4a:16:69:3a:39:ad:f4:e5:38:66:0d:eb:
                    44:12:b0:ca:c8:f6:14:56:82:e5:7b:a5:dd:3d:0c:
                    42:94:76:1a:a8:6f:79:58:99:6d:91:d9:12:70:53:
                    e7:32:e0:75:05:03:e8:a0:8f:78:29:0b:19:de:7a:
                    e5:0c:e0:f2:fd:fa:c2:14:d6:76:7a:74:2f:dd:6c:
                    79:04:a6:46:cf:47:5d:6f:95:a2:7a:18:a2:f8:ac:
                    57:f5:34:bd:ee:43:70:f6:06:1c:5e:6c:5f:26:19:
                    42:0c:1e:15:78:f1:57:d5:e2:7d:4a:f9:1a:73:81:
                    4c:55:ce:cb:ab:f8:f2:a8:5c:68:ec:1a:3b:98:7b:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:5A:FE:D3:2D:EC:57:5B:D0:50:A8:20:24:D1:A2:83:A4:B2:CE
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/6bVa_tMt7Fdb0FCoICTRooOkss4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:01:2d:c6:a9:93:72:06:65:7d:d4:9e:0a:86:de:24:38:
         1c:99:66:30:53:0e:67:60:f7:40:ba:cb:5d:9f:40:44:fc:f1:
         48:07:49:d9:bb:42:b4:6a:96:68:ff:a3:4d:d8:18:a2:8a:89:
         7b:de:6b:29:41:74:8b:9d:cf:2f:03:8f:a4:b3:c8:04:78:d2:
         72:4a:db:e1:fa:60:1c:28:56:fb:e3:26:0b:93:ae:33:59:e1:
         91:32:2b:ea:bc:07:59:89:b2:88:27:c5:76:a2:a9:5c:d6:57:
         7d:49:77:96:23:26:49:fc:b6:81:86:a7:39:b7:d9:ae:03:c6:
         53:ee:2c:4c:a8:00:6c:ee:5f:bd:a6:6d:ce:af:25:7c:5b:0c:
         fd:02:44:19:d4:9c:64:9f:71:6a:ae:a5:9d:e7:87:df:e6:65:
         59:26:aa:84:1a:55:a5:77:1d:39:5d:40:9b:64:df:7d:40:87:
         8b:4e:d8:ee:51:93:8d:7f:dc:20:83:72:0a:de:e0:ea:ca:78:
         0f:83:ea:de:65:18:6e:6e:35:03:75:c7:b5:7c:cf:fb:e7:6f:
         ab:28:b5:d3:22:d1:d6:78:28:3f:51:6c:f6:e7:81:04:05:40:
         85:69:65:af:a4:99:e0:44:76:b7:69:4b:c6:bd:72:9b:e1:44:
         b0:f8:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org