Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/RSCY8EHhVLaC-mCsQ3MHPXYo284.roa
File:                     RSCY8EHhVLaC-mCsQ3MHPXYo284.roa (raw, json)
Hash identifier:          WJQwyAOxfqbtfg9T7hg7VszTAsv9bm+ctqD0QM/797A=
Subject key identifier:   45:20:98:F0:41:E1:54:B6:82:FA:60:AC:43:73:07:3D:76:28:DB:CE
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       044240C7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/RSCY8EHhVLaC-mCsQ3MHPXYo284.roa
Signing time:             Sat 01 Jan 2022 00:50:52 +0000
ROA not before:           Sat 01 Jan 2022 00:50:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     271799
IP address blocks:        85.237.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71450823 (0x44240c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan  1 00:50:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=452098f041e154b682fa60ac4373073d7628dbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:67:d5:30:e5:47:64:e4:d3:73:a2:15:44:
                    96:b2:a5:a5:49:3a:eb:79:10:3c:ec:8b:78:8e:ec:
                    c6:a1:49:ce:04:10:8e:76:d1:35:b2:cc:84:39:e0:
                    f0:57:13:6f:25:65:ba:8b:72:2f:6e:51:06:79:4c:
                    e1:e1:78:68:f6:54:18:48:10:f8:8f:80:8b:66:9d:
                    92:49:ac:f9:c5:46:57:98:40:da:7e:68:71:ba:9f:
                    61:d1:52:10:2b:67:97:9e:b0:bd:db:4c:b0:f3:6e:
                    86:8b:21:7c:68:62:c3:ed:f2:29:a5:40:11:20:c9:
                    99:af:be:ca:72:67:48:6a:2a:6b:e5:d7:79:11:a4:
                    04:7f:43:d9:32:a8:cf:66:f2:80:f0:de:3e:92:f8:
                    43:80:e1:e8:4f:6e:fd:50:f9:7e:07:01:3c:aa:b3:
                    d2:65:3b:0a:54:66:42:11:2d:d5:b9:7e:e4:b5:f6:
                    ba:da:41:f5:51:34:91:3a:44:d3:bf:f3:4f:c2:67:
                    93:00:2b:b9:d5:8b:e4:02:fa:29:27:5d:f2:ec:d0:
                    3f:ce:ec:c0:b4:e6:ce:21:14:c1:a3:86:e8:bc:ad:
                    32:28:48:0e:f9:a7:bf:dd:17:78:5f:35:0b:10:d3:
                    f6:ec:e3:b7:12:bc:03:d6:dc:1d:27:cc:d3:ec:5b:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:98:F0:41:E1:54:B6:82:FA:60:AC:43:73:07:3D:76:28:DB:CE
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/RSCY8EHhVLaC-mCsQ3MHPXYo284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:be:2e:1d:5c:dc:c2:a7:16:b7:ca:f9:99:e2:b3:36:4c:3f:
         b7:18:ec:59:b3:cc:6e:45:41:d5:f8:a9:3d:fc:27:43:e1:ac:
         f8:f9:a3:84:8a:61:ae:db:95:7f:23:da:92:14:ce:50:c4:ed:
         19:d7:7a:22:49:75:95:04:4f:37:0e:98:19:51:09:ee:b0:91:
         bc:6d:78:09:90:f5:ce:1a:b2:ae:4c:02:8c:a5:49:bf:03:3d:
         79:0b:d2:45:ae:24:27:90:f1:1f:73:99:ec:5b:9f:d2:fd:d6:
         ec:dd:80:45:10:6f:d9:a5:28:f9:17:bb:1c:19:64:b8:04:5f:
         9e:c1:70:15:6d:72:da:a5:61:64:01:ac:e2:3e:d6:b5:aa:43:
         97:7e:f3:3c:a8:b8:b0:31:05:0a:f8:e3:d0:99:19:9e:66:96:
         2c:3a:fc:6a:8a:71:c2:10:e7:ab:05:fe:7f:b0:1d:07:3a:03:
         fa:a4:66:2c:d6:ee:d3:06:78:89:2a:39:d6:3a:9c:f1:a8:48:
         09:01:84:2e:b2:c0:94:ac:20:1f:56:95:bb:0a:db:db:11:f3:
         b6:08:df:38:74:28:63:c7:1e:88:7e:23:16:c3:13:28:7e:90:
         c9:9c:30:37:1a:24:68:d4:a2:96:78:53:27:07:f4:b5:57:ed:
         31:86:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org