Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa
File:                     mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa (raw, json)
Hash identifier:          F3sI/j1FU1D4iu0QxE9mBM8KQhU2JtaStMZPVDBxEok=
Subject key identifier:   98:07:BC:9F:CA:E5:C7:32:F9:4C:9D:01:0B:9F:B8:DA:08:67:FA:E5
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       043D0FD7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa
Signing time:             Sat 01 Jan 2022 00:50:47 +0000
ROA not before:           Sat 01 Jan 2022 00:50:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.109.192.0/21 maxlen: 24
                          85.237.192.0/21 maxlen: 24
                          85.237.206.0/23 maxlen: 24
                          85.237.205.0/24 maxlen: 24
                          85.237.203.0/24 maxlen: 24
                          85.237.202.0/24 maxlen: 24
                          85.237.200.0/23 maxlen: 24
                          85.237.208.0/20 maxlen: 24
                          85.237.216.0/24 maxlen: 24
                          185.89.76.0/22 maxlen: 24
                          185.89.77.0/24 maxlen: 24
                          85.158.56.0/21 maxlen: 24
                          185.93.32.0/24 maxlen: 24
                          185.93.34.0/23 maxlen: 24
                          185.93.33.0/24 maxlen: 24
                          194.169.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71110615 (0x43d0fd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan  1 00:50:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9807bc9fcae5c732f94c9d010b9fb8da0867fae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:9d:1a:ca:8f:8b:a1:f8:37:ca:10:c9:b7:
                    3d:b9:84:7c:51:4f:7e:8a:d6:a4:ff:33:08:95:4d:
                    66:d5:0d:bf:d9:96:40:d0:3e:be:70:e1:0f:cb:22:
                    a2:91:32:6e:90:ab:29:da:b9:a1:04:59:cc:8f:02:
                    fa:af:ee:b0:35:2c:de:5c:59:75:5d:f6:51:7a:9b:
                    e5:2f:aa:6a:4f:3d:a0:d9:2d:9d:3c:97:9f:ea:a5:
                    26:02:08:24:e8:71:ce:5c:be:e2:ee:3c:87:0b:54:
                    50:8b:e2:48:fc:f7:97:32:6c:d7:b9:06:fc:2b:4b:
                    e2:1e:80:14:25:a0:7c:15:f9:ab:9a:69:a3:37:cc:
                    4d:a6:0d:78:db:82:ae:3b:7b:81:31:b7:b7:e3:da:
                    d6:76:59:51:72:a8:ed:89:83:bd:76:b5:0c:1b:0a:
                    9c:16:b2:9e:55:c0:db:67:97:2d:b4:65:83:e4:2e:
                    b1:6b:15:e1:37:b8:c5:cf:40:71:cf:30:21:29:15:
                    94:ed:85:ba:b7:29:71:a6:92:6f:a7:29:18:22:0b:
                    0d:58:1f:c0:28:13:c6:ec:93:a1:aa:73:eb:cc:de:
                    6d:de:93:77:04:91:87:85:64:ae:87:65:ef:d0:85:
                    85:90:39:34:5b:c9:49:c1:79:96:ec:56:84:5f:79:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:07:BC:9F:CA:E5:C7:32:F9:4C:9D:01:0B:9F:B8:DA:08:67:FA:E5
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mAe8n8rlxzL5TJ0BC5-42ghn-uU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.158.56.0/21
                  85.237.192.0-85.237.203.255
                  85.237.205.0-85.237.223.255
                  185.89.76.0/22
                  185.93.32.0/22
                  193.109.192.0/21
                  194.169.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:ab:3a:a9:6e:53:54:02:69:ef:b7:b7:a8:a5:51:51:24:
         59:61:5b:47:56:5a:26:bd:da:4a:3e:18:0c:cf:74:30:b6:7d:
         d5:aa:4b:22:64:68:27:31:13:d0:32:82:0e:17:ae:3e:61:3b:
         06:13:d1:91:c2:92:04:ee:0a:06:19:d1:c4:11:10:9d:6c:e1:
         3b:02:30:f0:d1:be:5e:9b:c8:de:1f:3a:0c:3e:4e:bf:f3:3d:
         e5:d1:f7:95:b7:6f:f9:39:c4:f6:dc:94:4c:a2:b4:f2:f5:12:
         39:8e:f4:2d:a9:7a:88:0e:d0:99:07:1f:0b:fc:c2:1f:93:d3:
         14:f3:de:f0:f1:c9:c7:39:04:40:60:86:2a:75:e3:29:ce:2c:
         17:07:f2:cb:3d:01:ed:2a:fe:a6:7a:af:63:2e:c4:b3:78:2a:
         b0:d2:ff:51:9e:35:f9:1b:bf:db:a0:9f:19:7a:b7:88:52:4c:
         21:3d:df:14:d8:85:6c:8a:20:46:ff:df:19:a0:2b:ef:2f:6f:
         78:d1:fc:f9:30:ac:a1:b7:fb:cb:a5:4b:89:a6:e7:84:94:51:
         c7:9b:79:d7:77:6c:80:96:0a:e9:a3:d0:2d:a2:fa:51:c5:fc:
         7f:56:55:1e:73:b9:9e:c8:1b:28:87:9b:61:44:1b:ee:49:44:
         a7:bf:41:06
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIEBD0P1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDEw
MTAwNTA0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgwN2JjOWZjYWU1
YzczMmY5NGM5ZDAxMGI5ZmI4ZGEwODY3ZmFlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPsnRrKj4uh+DfKEMm3PbmEfFFPforWpP8zCJVNZtUNv9mW
QNA+vnDhD8siopEybpCrKdq5oQRZzI8C+q/usDUs3lxZdV32UXqb5S+qak89oNkt
nTyXn+qlJgIIJOhxzly+4u48hwtUUIviSPz3lzJs17kG/CtL4h6AFCWgfBX5q5pp
ozfMTaYNeNuCrjt7gTG3t+Pa1nZZUXKo7YmDvXa1DBsKnBaynlXA22eXLbRlg+Qu
sWsV4Te4xc9Acc8wISkVlO2FurcpcaaSb6cpGCILDVgfwCgTxuyToapz68zebd6T
dwSRh4Vkrodl79CFhZA5NFvJScF5luxWhF95MccCAwEAAaOCAj0wggI5MB0GA1Ud
DgQWBBSYB7yfyuXHMvlMnQELn7jaCGf65TAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L21BZThuOHJseHpMNVRKMEJDNS00Mmdobi11VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBT
BggrBgEFBQcBBwEB/wREMEIwQAQCAAEwOgMEA1WeODAMAwQGVe3AAwQCVe3IMAwD
BABV7c0DBAVV7cADBAK5WUwDBAK5XSADBAPBbcADBADCqdkwDQYJKoZIhvcNAQEL
BQADggEBABoMqzqpblNUAmnvt7eopVFRJFlhW0dWWia92ko+GAzPdDC2fdWqSyJk
aCcxE9Aygg4Xrj5hOwYT0ZHCkgTuCgYZ0cQREJ1s4TsCMPDRvl6byN4fOgw+Tr/z
PeXR95W3b/k5xPbclEyitPL1EjmO9C2peogO0JkHHwv8wh+T0xTz3vDxycc5BEBg
hip14ynOLBcH8ss9Ae0q/qZ6r2MuxLN4KrDS/1GeNfkbv9ugnxl6t4hSTCE93xTY
hWyKIEb/3xmgK+8vb3jR/PkwrKG3+8ulS4mm54SUUcebedd3bICWCumj0C2i+lHF
/H9WVR5zuZ7IGyiHm2FEG+5JRKe/QQY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org