Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/nK7MUezzow_HdBHvQ-e1qQNJTu8.roa
File:                     nK7MUezzow_HdBHvQ-e1qQNJTu8.roa (raw, json)
Hash identifier:          88uBmHyZ78/aNu3jsTqxgC26OBs1YblOgpFfHkolm/g=
Subject key identifier:   9C:AE:CC:51:EC:F3:A3:0F:C7:74:11:EF:43:E7:B5:A9:03:49:4E:EF
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0185714C1ADC91FC7B453A971D2EF5E782E0
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/nK7MUezzow_HdBHvQ-e1qQNJTu8.roa
Signing time:             Mon 02 Jan 2023 07:04:51 +0000
ROA not before:           Mon 02 Jan 2023 07:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        194.150.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:1a:dc:91:fc:7b:45:3a:97:1d:2e:f5:e7:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jan  2 07:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9caecc51ecf3a30fc77411ef43e7b5a903494eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:6b:7f:b2:b0:49:bd:1f:a2:77:b4:e3:60:
                    db:11:68:ab:0c:2c:8a:b9:80:55:1f:88:a2:b4:c1:
                    58:f3:e1:05:67:3f:fe:c4:b5:a6:86:f7:0c:18:3f:
                    9f:55:24:55:96:46:bd:e2:2b:ce:87:46:12:e9:cf:
                    01:66:e9:fd:0e:d1:f9:2d:1a:6a:a4:14:b7:07:25:
                    b8:67:34:60:04:1f:09:b9:b9:dd:63:d0:e5:71:e8:
                    44:91:c0:99:52:6c:a5:a2:7b:aa:6d:8a:c7:79:99:
                    ad:59:ac:41:3f:9d:19:56:b1:b3:1a:97:23:92:ae:
                    fe:82:6c:b3:a8:ed:64:71:60:92:99:5c:c3:fa:9f:
                    0b:f0:8c:32:9e:f7:97:13:73:a3:87:94:91:85:34:
                    e6:ac:e6:2a:54:b3:0b:0d:40:b9:d1:3c:91:96:93:
                    2c:ee:49:50:c1:a9:8b:8f:19:36:87:93:79:a2:45:
                    80:b6:62:c8:ca:af:f0:64:b7:4b:a2:87:4f:1b:37:
                    20:6e:b4:49:7b:8f:49:dd:a4:2d:63:51:25:1a:d2:
                    13:17:12:7d:34:44:7c:af:f0:f0:fa:ff:27:39:55:
                    24:82:e2:32:bd:2e:fd:f3:b4:80:48:ae:9e:38:38:
                    a1:48:81:ed:c3:46:d3:8b:d6:34:10:fc:81:6f:e3:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AE:CC:51:EC:F3:A3:0F:C7:74:11:EF:43:E7:B5:A9:03:49:4E:EF
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/nK7MUezzow_HdBHvQ-e1qQNJTu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:87:a3:7b:87:8b:ac:9d:9a:75:0f:67:7e:da:be:1f:e6:57:
         73:d0:b2:83:d7:95:2a:33:55:24:75:f3:22:7c:5f:74:86:5d:
         55:3c:13:8d:61:76:ca:6f:9c:d0:79:44:7e:44:ac:fb:4e:27:
         88:3b:50:0d:2b:06:43:40:a7:ba:9e:8a:63:52:65:ef:2d:4d:
         48:65:0a:e4:5d:eb:4c:39:b7:69:60:fe:02:29:aa:d1:31:91:
         d3:05:29:0e:67:60:42:9a:e0:a2:27:2d:46:ba:d1:01:13:6f:
         46:f9:f7:b7:26:08:41:0f:ca:1e:70:ed:ed:f0:52:ca:9f:e5:
         87:05:95:f2:ea:46:65:45:69:3e:ee:43:02:75:c0:d7:f3:1d:
         a2:ae:b1:cd:69:3e:91:aa:34:f3:4b:d1:ab:9f:c7:e5:68:00:
         f5:8f:20:51:ff:95:a7:5b:df:c6:16:bc:5b:29:08:ee:d7:80:
         ac:a8:f9:51:25:97:ee:ce:7b:9c:f3:25:aa:25:26:28:92:49:
         d1:9e:fb:44:74:54:57:ae:69:61:6f:17:5f:41:ca:17:0b:c1:
         af:4a:cb:8f:61:cd:bf:0d:06:79:f9:c1:69:aa:c9:81:ca:48:
         98:00:39:b8:c6:cc:c7:2c:bf:6d:ca:e2:c5:b8:c0:3f:50:c9:
         d6:4e:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org