Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/gvQ6Gdzz1u_WjG94VsITz4l9WAE.roa
File:                     gvQ6Gdzz1u_WjG94VsITz4l9WAE.roa (raw, json)
Hash identifier:          1ntd7B2j2ryQcbR67iNiZIH5VSXJzqRexwD2AKPqPTM=
Subject key identifier:   82:F4:3A:19:DC:F3:D6:EF:D6:8C:6F:78:56:C2:13:CF:89:7D:58:01
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       04B51A99
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/gvQ6Gdzz1u_WjG94VsITz4l9WAE.roa
Signing time:             Mon 31 Jan 2022 14:36:06 +0000
ROA not before:           Mon 31 Jan 2022 14:36:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139660
IP address blocks:        85.237.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78977689 (0x4b51a99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan 31 14:36:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82f43a19dcf3d6efd68c6f7856c213cf897d5801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:b8:fb:74:72:44:e9:4f:73:34:fb:fb:31:
                    42:8e:33:a6:b8:62:a8:c4:73:25:62:58:e1:85:6a:
                    9c:c7:21:1c:82:72:a5:6b:d5:cf:bc:86:f3:73:42:
                    49:e6:9a:4d:8e:84:53:42:39:6f:67:b7:fb:53:44:
                    d5:da:d1:91:29:7b:93:4b:cd:34:8d:b3:89:04:67:
                    63:7b:4d:79:c8:16:92:b5:e0:80:dd:e1:41:20:ba:
                    bf:0f:cb:3c:80:e1:72:fa:d0:aa:73:97:5e:44:04:
                    05:42:77:03:bc:e9:4a:8c:12:f4:ee:46:41:d8:8d:
                    ee:12:54:1e:37:85:28:6b:01:80:3f:fb:2e:b1:23:
                    4a:74:ec:07:c7:b9:a1:f7:f6:8c:1e:a7:4b:3c:89:
                    a9:6e:e6:79:55:da:79:58:a4:6e:76:18:6a:22:05:
                    cb:8b:b6:77:f4:7d:6f:4c:cd:a9:ac:b7:94:7d:b6:
                    a9:7c:da:eb:0e:50:c0:79:af:44:c9:be:dc:67:ce:
                    3c:b7:1d:8a:1e:ba:96:cf:00:26:4e:94:b6:d4:46:
                    1a:cc:0e:82:79:1e:ec:b8:53:e8:1d:5d:00:2c:75:
                    96:9c:07:32:d1:0c:92:69:49:11:37:46:30:a4:90:
                    ba:42:67:a1:13:5e:3c:5f:cb:9a:ae:bf:54:a5:d9:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F4:3A:19:DC:F3:D6:EF:D6:8C:6F:78:56:C2:13:CF:89:7D:58:01
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/gvQ6Gdzz1u_WjG94VsITz4l9WAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:af:4e:30:ef:64:a6:ef:6d:d0:67:c4:23:94:ff:d6:a8:
         eb:7e:1a:17:4e:41:99:14:e6:5e:0a:de:4d:31:0c:b8:01:ad:
         14:07:6d:58:46:e1:ab:d6:3e:84:79:20:ce:29:43:b2:94:2f:
         30:77:1d:37:17:d8:c5:39:53:8c:28:a9:4a:1f:72:b2:cc:f9:
         51:04:79:94:5d:26:0d:e9:61:7f:2f:22:bd:4f:c2:7d:59:fd:
         da:c8:57:b6:49:07:ae:e7:49:4e:d5:8a:af:02:1d:4a:13:21:
         cd:5d:4b:66:9d:dd:ae:7e:d4:95:1c:d2:88:30:90:4b:ed:3e:
         f7:98:a0:89:8f:1c:9c:19:e7:83:8a:2b:04:0e:29:a6:74:15:
         82:e5:70:6e:11:7c:55:0e:7f:55:ca:c9:1b:52:be:6f:ed:13:
         94:11:a0:06:34:a6:da:bc:d8:21:5f:f4:a2:5a:96:8b:6e:dd:
         8f:18:51:5b:3b:06:56:2e:e8:ad:3b:60:8c:14:44:ff:c9:93:
         60:3e:13:09:18:75:95:58:8a:48:b9:03:ec:7d:1b:29:f4:d4:
         ff:8b:e0:08:49:89:88:98:36:b2:2f:5f:fd:65:22:7c:26:9e:
         1b:d8:d2:4d:2f:7c:42:04:89:6b:36:87:74:c1:26:dd:d0:a6:
         12:e0:13:90
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLUamTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDEz
MTE0MzYwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJmNDNhMTlkY2Yz
ZDZlZmQ2OGM2Zjc4NTZjMjEzY2Y4OTdkNTgwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM1uuPt0ckTpT3M0+/sxQo4zprhiqMRzJWJY4YVqnMchHIJy
pWvVz7yG83NCSeaaTY6EU0I5b2e3+1NE1drRkSl7k0vNNI2ziQRnY3tNecgWkrXg
gN3hQSC6vw/LPIDhcvrQqnOXXkQEBUJ3A7zpSowS9O5GQdiN7hJUHjeFKGsBgD/7
LrEjSnTsB8e5off2jB6nSzyJqW7meVXaeVikbnYYaiIFy4u2d/R9b0zNqay3lH22
qXza6w5QwHmvRMm+3GfOPLcdih66ls8AJk6UttRGGswOgnke7LhT6B1dACx1lpwH
MtEMkmlJETdGMKSQukJnoRNePF/Lmq6/VKXZhZcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSC9DoZ3PPW79aMb3hWwhPPiX1YATAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L2d2UTZHZHp6MXVfV2pHOTRWc0lUejRsOVdBRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXtxjANBgkqhkiG9w0BAQsFAAOC
AQEAQGuvTjDvZKbvbdBnxCOU/9ao634aF05BmRTmXgreTTEMuAGtFAdtWEbhq9Y+
hHkgzilDspQvMHcdNxfYxTlTjCipSh9yssz5UQR5lF0mDelhfy8ivU/CfVn92shX
tkkHrudJTtWKrwIdShMhzV1LZp3drn7UlRzSiDCQS+0+95igiY8cnBnng4orBA4p
pnQVguVwbhF8VQ5/VcrJG1K+b+0TlBGgBjSm2rzYIV/0olqWi27djxhRWzsGVi7o
rTtgjBRE/8mTYD4TCRh1lViKSLkD7H0bKfTU/4vgCEmJiJg2si9f/WUifCaeG9jS
TS98QgSJazaHdMEm3dCmEuATkA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org