Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/xAETaeMQR3G-33nrG2N8Cyc5QPQ.roa
File:                     xAETaeMQR3G-33nrG2N8Cyc5QPQ.roa (raw, json)
Hash identifier:          vsX6wFCksXo8TePrw/VzMvQHjWl/iJLHA18icHWZnyI=
Subject key identifier:   C4:01:13:69:E3:10:47:71:BE:DF:79:EB:1B:63:7C:0B:27:39:40:F4
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       045A936C
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/xAETaeMQR3G-33nrG2N8Cyc5QPQ.roa
Signing time:             Tue 04 Jan 2022 15:42:07 +0000
ROA not before:           Tue 04 Jan 2022 15:42:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        193.109.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73044844 (0x45a936c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan  4 15:42:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c4011369e3104771bedf79eb1b637c0b273940f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:7a:7d:f0:6e:0c:6d:ab:3b:36:ab:8e:a9:
                    2b:db:3b:1f:15:0f:35:5c:38:4b:10:bd:32:3c:f7:
                    8a:e3:83:61:4a:68:2e:c6:15:85:54:f3:d6:1b:72:
                    ee:b5:19:b7:79:d6:5d:2b:64:56:a8:38:95:46:fe:
                    94:5d:19:0b:bb:f1:d3:ce:5c:03:fc:36:18:57:f7:
                    9f:0e:ad:d9:93:88:fc:f0:e4:27:d2:5f:19:df:e2:
                    ee:26:65:bd:6d:9d:ea:5b:b0:6d:76:0b:07:0b:c6:
                    8b:b7:93:c1:05:8a:55:19:fd:0b:6a:cc:d2:8a:d9:
                    c4:ba:4d:85:e5:dc:95:fd:eb:d0:4f:a1:bd:9f:d9:
                    96:8c:48:f9:75:e6:e9:d6:bf:ab:d4:af:16:b5:6d:
                    0b:5b:54:c6:7c:87:49:5c:6c:2d:1a:43:73:08:7f:
                    34:78:2b:bd:e8:b8:ae:88:f2:5f:18:d2:84:18:c6:
                    96:d8:91:99:3c:62:07:4a:18:e1:66:fd:6e:4e:ad:
                    6b:48:67:4d:1c:8f:37:6b:9a:06:cc:77:b4:e2:9d:
                    64:35:95:f1:24:3b:15:14:5b:2d:c9:53:74:c3:d8:
                    11:45:15:a4:15:00:fc:77:ed:4e:8d:56:d8:c3:ee:
                    a7:56:69:45:f7:c7:c1:ce:e5:bf:d0:14:4b:28:f4:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:01:13:69:E3:10:47:71:BE:DF:79:EB:1B:63:7C:0B:27:39:40:F4
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/xAETaeMQR3G-33nrG2N8Cyc5QPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:00:2b:57:09:9a:e6:90:7b:70:e6:45:f1:45:b1:ff:3f:39:
         47:bc:a8:05:fe:58:f2:e5:28:aa:27:89:fb:2f:cc:98:23:39:
         5a:8f:64:e8:14:87:20:c8:7f:08:5b:b8:9d:b6:8c:13:7e:60:
         97:de:55:86:07:81:b3:cf:47:bc:3a:c6:88:cc:23:86:59:67:
         da:9f:2a:b7:cd:9b:3a:05:a2:e5:d9:0c:ae:ad:63:0a:61:6d:
         f8:51:9b:54:66:22:a6:f9:f5:e3:69:06:8b:8c:92:3b:ea:90:
         74:1c:26:fa:f3:40:bc:84:87:fc:b6:c0:67:ac:a5:18:09:83:
         8b:5a:23:c9:64:e7:26:9f:71:9e:cb:82:92:0d:77:f8:03:76:
         4d:e6:73:43:c0:33:f3:6e:80:f0:c8:cf:5d:19:60:5b:71:0b:
         12:01:c9:9a:e4:d2:bc:3c:b1:aa:6f:29:bc:43:38:69:e3:8f:
         ed:25:b6:6f:86:a9:55:a4:95:d7:e2:44:3f:70:10:c5:c2:64:
         32:bb:93:a5:e1:f7:72:04:d1:28:ea:15:8a:48:b9:7f:65:4c:
         3e:29:d2:f0:6b:96:55:cf:15:08:8d:f2:ea:13:d6:cb:ab:52:
         2a:4f:44:2f:15:42:fd:87:49:01:1d:86:38:de:f4:21:77:77:
         f7:66:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org