Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/eL2vSvSsiKyBVBh6pYx8KtfYu98.roa
File:                     eL2vSvSsiKyBVBh6pYx8KtfYu98.roa (raw, json)
Hash identifier:          FF+Es944jWEVW4V4sSt8zC/u91nGnS6EOLeR3SGmQSo=
Subject key identifier:   78:BD:AF:4A:F4:AC:88:AC:81:54:18:7A:A5:8C:7C:2A:D7:D8:BB:DF
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       04363669
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/eL2vSvSsiKyBVBh6pYx8KtfYu98.roa
Signing time:             Sat 01 Jan 2022 00:50:43 +0000
ROA not before:           Sat 01 Jan 2022 00:50:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35375
IP address blocks:        85.237.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70661737 (0x4363669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan  1 00:50:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78bdaf4af4ac88ac8154187aa58c7c2ad7d8bbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:0a:00:28:2c:b7:ac:4e:e5:e7:69:07:69:
                    28:40:2f:4b:3a:72:c3:1e:df:9a:a3:48:60:00:63:
                    e6:59:f6:a7:2e:e0:52:0c:a9:0b:58:1a:4e:3e:c7:
                    7a:3f:a3:dd:c0:c2:ec:92:f8:e4:6f:a1:ed:20:91:
                    38:ab:e4:42:16:91:5f:25:1a:47:a8:14:31:20:d4:
                    64:17:ca:5a:36:0e:c0:52:75:77:78:46:4e:6d:34:
                    57:64:bb:4b:91:1d:5f:73:46:34:f2:67:ee:29:2a:
                    51:41:b4:0a:d1:63:66:d5:fd:3c:b4:54:32:5b:c2:
                    aa:dc:23:e4:4b:06:c5:e1:0f:41:0f:79:29:4b:93:
                    45:3d:cc:31:72:e7:d8:94:b1:f6:b6:a5:bd:78:44:
                    ba:8b:60:9b:3c:3c:7a:fe:99:24:3d:2b:5a:4b:c5:
                    89:b1:6a:1e:5c:76:5e:3d:11:04:df:86:d4:53:65:
                    84:df:19:98:ba:d9:dc:bc:68:f8:89:a0:5b:e1:3d:
                    38:fd:a7:57:a5:0b:7a:bf:f3:29:dd:20:09:2a:62:
                    42:11:84:b9:df:97:f8:90:d6:fb:65:52:d9:49:d6:
                    94:4c:de:0f:49:75:24:b6:f7:77:19:14:38:19:3a:
                    06:a6:ab:3c:c1:20:46:0f:e2:3f:b1:2f:83:3c:51:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BD:AF:4A:F4:AC:88:AC:81:54:18:7A:A5:8C:7C:2A:D7:D8:BB:DF
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/eL2vSvSsiKyBVBh6pYx8KtfYu98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a4:21:e5:5a:06:c4:e1:d7:0e:40:8c:68:32:7f:48:38:10:
         1a:01:17:4d:cb:48:1d:0b:96:85:16:43:52:08:3f:65:9d:f7:
         02:6e:42:50:ee:de:f0:e8:de:c1:66:1c:9e:3d:5a:c7:93:01:
         8a:b3:94:46:59:c8:41:d5:5a:9c:02:65:c4:37:e3:94:72:d0:
         c0:db:31:d9:7c:e8:89:b4:d2:95:be:f5:30:5b:dc:c5:02:55:
         92:ce:b8:24:b2:b1:16:95:0d:dd:aa:37:d6:45:28:1c:84:44:
         76:50:87:6c:ae:c6:7e:69:b7:13:c5:6b:50:cc:fc:27:10:fb:
         d2:e4:f6:52:63:12:3d:fe:65:2f:fc:06:2d:52:93:f6:e8:3a:
         84:8a:1f:88:f1:6c:93:a6:86:ed:b6:c9:53:25:f7:c6:c6:9b:
         43:9c:07:d8:88:d6:fd:c6:ca:b0:2c:f3:42:f3:42:d0:9a:cb:
         1e:f3:a4:59:92:2b:a7:aa:6e:07:ae:17:3b:c8:81:e0:24:54:
         6f:55:fd:88:48:73:9c:8d:24:77:06:2e:7a:79:3e:21:44:af:
         f6:1d:3e:b3:ad:a9:8e:67:a1:0a:7f:40:4e:48:6b:75:04:81:
         35:f8:c4:d9:7c:64:56:3a:ac:ae:da:4e:28:fd:9b:71:2d:12:
         79:6f:79:89
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBDY2aTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDEw
MTAwNTA0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzhiZGFmNGFmNGFj
ODhhYzgxNTQxODdhYTU4YzdjMmFkN2Q4YmJkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI1gCgAoLLesTuXnaQdpKEAvSzpywx7fmqNIYABj5ln2py7g
UgypC1gaTj7Hej+j3cDC7JL45G+h7SCROKvkQhaRXyUaR6gUMSDUZBfKWjYOwFJ1
d3hGTm00V2S7S5EdX3NGNPJn7ikqUUG0CtFjZtX9PLRUMlvCqtwj5EsGxeEPQQ95
KUuTRT3MMXLn2JSx9ralvXhEuotgmzw8ev6ZJD0rWkvFibFqHlx2Xj0RBN+G1FNl
hN8ZmLrZ3Lxo+ImgW+E9OP2nV6ULer/zKd0gCSpiQhGEud+X+JDW+2VS2UnWlEze
D0l1JLb3dxkUOBk6BqarPMEgRg/iP7EvgzxRrHsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR4va9K9KyIrIFUGHqljHwq19i73zAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L2VMMnZTdlNzaUt5QlZCaDZwWXg4S3RmWXU5OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXtwDANBgkqhkiG9w0BAQsFAAOC
AQEAaaQh5VoGxOHXDkCMaDJ/SDgQGgEXTctIHQuWhRZDUgg/ZZ33Am5CUO7e8Oje
wWYcnj1ax5MBirOURlnIQdVanAJlxDfjlHLQwNsx2XzoibTSlb71MFvcxQJVks64
JLKxFpUN3ao31kUoHIREdlCHbK7Gfmm3E8VrUMz8JxD70uT2UmMSPf5lL/wGLVKT
9ug6hIofiPFsk6aG7bbJUyX3xsabQ5wH2IjW/cbKsCzzQvNC0JrLHvOkWZIrp6pu
B64XO8iB4CRUb1X9iEhznI0kdwYuenk+IUSv9h0+s62pjmehCn9ATkhrdQSBNfjE
2XxkVjqsrtpOKP2bcS0SeW95iQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org