Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa
File:                     N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa (raw, json)
Hash identifier:          dgQZDoatLJopkCGBjaOMRe4g8+7d+/cceEXR+Crq8IA=
Subject key identifier:   37:F9:D5:CB:38:45:8B:86:CA:0B:A5:87:45:FE:54:AF:D8:26:3C:8E
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       048CDAC9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa
Signing time:             Mon 17 Jan 2022 10:01:55 +0000
ROA not before:           Mon 17 Jan 2022 10:01:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54252
IP address blocks:        193.109.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76339913 (0x48cdac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan 17 10:01:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37f9d5cb38458b86ca0ba58745fe54afd8263c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:85:3d:97:38:a6:ec:14:32:29:e7:fd:fc:
                    d8:08:9b:8a:c2:66:1f:f1:35:79:43:3e:e4:94:37:
                    f7:82:85:35:c8:82:0c:6a:fc:dc:47:5a:66:83:fa:
                    a4:a3:10:8d:38:fe:74:3c:bc:29:6a:be:ec:d7:9b:
                    e1:33:fa:3b:e6:22:21:db:09:ff:22:e6:7d:35:aa:
                    c2:e6:38:77:5f:2c:dd:43:da:3c:7d:1e:88:a9:11:
                    69:ac:ee:59:9c:94:b4:25:57:f3:d5:d9:54:d5:1d:
                    20:bc:b2:30:cc:8c:65:8d:d1:44:eb:62:0d:a2:2a:
                    a8:12:71:2a:eb:9c:0d:d4:54:2e:7f:31:bb:02:71:
                    1e:3a:12:8e:33:26:89:33:bb:99:3f:2d:dd:3f:81:
                    96:1d:50:bf:94:fc:ad:a4:16:94:d1:ad:58:35:30:
                    da:74:8c:f9:98:8e:12:c1:2b:3f:58:8d:29:d7:4d:
                    1d:cb:98:db:2a:b8:98:85:5f:38:bb:58:fd:df:6c:
                    8a:06:1f:b8:40:e3:a0:80:0c:3e:c0:e4:49:fb:1a:
                    f7:c5:e9:3c:b4:c7:4e:c7:04:07:32:ac:7d:37:12:
                    e2:72:b2:b5:69:d2:ee:6f:d2:ab:6e:2f:4d:46:eb:
                    92:c6:fc:f9:64:ba:92:f1:f5:15:17:5e:a3:96:8f:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F9:D5:CB:38:45:8B:86:CA:0B:A5:87:45:FE:54:AF:D8:26:3C:8E
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/N_nVyzhFi4bKC6WHRf5Ur9gmPI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:33:64:38:1a:1d:8d:d7:5b:f3:9a:2f:f3:9f:bf:7b:c5:63:
         9e:0f:71:e0:28:c8:59:72:ed:9c:9a:e3:59:08:33:9c:8d:26:
         43:73:86:7a:b0:18:bc:7c:58:c4:98:16:e2:25:c9:73:02:97:
         c5:5a:a7:e5:6f:ba:1f:11:82:60:ca:db:eb:6f:94:3c:8a:18:
         3d:29:76:fa:58:c6:d0:c9:a4:22:0c:cd:ab:27:91:72:7c:07:
         07:ad:81:d5:6d:85:64:d8:f6:d7:75:89:3e:6d:ab:c4:8d:c8:
         af:c2:d7:9f:f5:7c:b5:6b:f0:19:d7:59:16:c2:e0:90:a9:1d:
         30:6f:bd:c6:af:27:51:a6:be:a9:3b:43:6a:db:fc:46:47:c4:
         b7:11:f8:08:09:4c:48:5b:69:07:92:bb:d8:18:47:4f:49:4a:
         23:36:12:ba:f1:2c:18:cb:cd:16:c4:1d:ef:52:38:65:4e:68:
         00:7d:12:90:cb:7f:a0:d1:71:3e:86:d9:14:1b:a7:1e:54:ae:
         95:08:f2:d9:d9:a6:d3:66:c5:20:21:ff:82:9d:7e:f2:5f:3a:
         fb:77:c2:73:21:53:6c:9e:14:eb:41:15:1c:fe:ec:a9:3d:16:
         65:a0:37:19:12:45:b0:51:9b:50:bb:a9:92:1f:be:86:c6:90:
         74:91:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org