Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rFjHIv43M5r7gvJ-LcsZubpErLE.roa
File:                     rFjHIv43M5r7gvJ-LcsZubpErLE.roa (raw, json)
Hash identifier:          PqwiJOL4uSX5Vdoo4QbffixJNrZadMfd4KIhPIQkzms=
Subject key identifier:   AC:58:C7:22:FE:37:33:9A:FB:82:F2:7E:2D:CB:19:B9:BA:44:AC:B1
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       04C258AC
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rFjHIv43M5r7gvJ-LcsZubpErLE.roa
Signing time:             Wed 13 Apr 2022 07:53:44 +0000
ROA not before:           Wed 13 Apr 2022 07:53:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        194.150.211.0/24 maxlen: 24
                          194.150.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79845548 (0x4c258ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Apr 13 07:53:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ac58c722fe37339afb82f27e2dcb19b9ba44acb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:38:58:5a:50:82:e0:6a:1f:4e:a1:1c:62:
                    47:46:cc:40:70:18:8a:5b:dc:25:fd:35:06:85:68:
                    18:82:39:3d:16:8b:0a:05:0f:d1:ed:ea:4d:92:52:
                    ea:03:74:dd:dd:14:35:09:25:10:bf:58:1b:c9:cc:
                    18:57:0d:85:83:01:be:1d:2f:b9:8f:c3:a4:bb:ed:
                    b0:d9:3f:40:7a:58:35:f0:dd:31:f6:d8:90:00:cb:
                    b9:26:0a:85:36:d5:98:79:0b:54:cf:e1:9a:87:ed:
                    26:ba:03:07:eb:eb:e2:9d:86:8c:7c:a7:3d:c6:f6:
                    16:12:9b:a6:d5:89:aa:77:a1:8b:10:86:1d:c0:c1:
                    e3:4a:b0:18:08:41:4f:48:ed:15:5b:da:38:83:90:
                    30:aa:71:97:65:53:56:1a:ff:3c:65:30:8c:a6:b3:
                    c7:08:40:e7:8d:99:a6:93:73:af:fe:f8:5e:36:f4:
                    a3:72:1f:ab:69:0a:b4:a6:48:d8:ad:4a:47:ec:a8:
                    20:34:dd:12:b6:fd:84:83:54:c4:d8:de:84:15:15:
                    79:6d:b8:06:1a:81:75:bb:b9:e7:14:4a:ea:17:81:
                    dd:86:b1:3a:be:75:f1:47:64:c7:9e:be:b0:b5:fb:
                    61:4c:b3:c9:c1:ab:c5:21:95:1f:f8:7d:ae:41:f4:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:58:C7:22:FE:37:33:9A:FB:82:F2:7E:2D:CB:19:B9:BA:44:AC:B1
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/rFjHIv43M5r7gvJ-LcsZubpErLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:17:fe:bf:ff:09:d2:e9:fa:fa:2a:d0:21:e0:b1:36:b3:
         77:ab:aa:45:7e:91:c2:b2:80:bb:fc:74:f3:f1:18:e1:70:a9:
         d7:fb:b5:99:21:15:4e:c9:71:4a:c3:21:73:f3:e5:77:10:44:
         b8:ec:78:70:3f:5c:f0:15:e8:2d:99:33:0f:47:b3:c1:c9:f7:
         7a:5b:4b:2c:59:f9:a5:8e:32:ab:16:98:6a:45:95:c0:f7:7b:
         c2:77:19:7f:7d:3a:7f:91:a4:63:47:75:da:f5:18:ee:8a:14:
         e1:03:b1:aa:6a:1f:23:19:b7:b1:1d:05:61:65:3e:31:1c:4c:
         01:60:29:19:66:d4:ff:70:8a:3e:33:2f:d4:38:71:b9:16:49:
         7f:91:fb:6d:aa:75:86:79:79:80:f8:47:47:99:d6:62:2c:d3:
         17:46:bf:ce:f9:cb:b9:47:27:3b:c3:c1:97:ae:6f:f1:47:e3:
         e5:74:b3:26:ce:61:9e:ae:7b:f7:30:e3:aa:2a:76:2c:51:8b:
         1d:61:9e:88:85:85:83:8d:5a:a7:ce:4b:47:b8:a1:5d:0f:2b:
         58:b3:ae:79:49:26:cf:bf:e0:78:34:32:1d:93:37:2c:6d:39:
         21:7d:ce:e6:2d:f2:ec:3d:0e:93:36:0d:33:77:44:b9:59:65:
         67:de:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org