Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/GmA07wHZQ3zdkZyjEUmLowzgKCU.roa
File:                     GmA07wHZQ3zdkZyjEUmLowzgKCU.roa (raw, json)
Hash identifier:          IOM3Qr/n/TeOyw1Hqh0StefE8Y5kTSRhHgSx8J7jPiQ=
Subject key identifier:   1A:60:34:EF:01:D9:43:7C:DD:91:9C:A3:11:49:8B:A3:0C:E0:28:25
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       0189547C7DCE2A151DA9C2035705B932D13C
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/GmA07wHZQ3zdkZyjEUmLowzgKCU.roa
Signing time:             Fri 14 Jul 2023 12:59:52 +0000
ROA not before:           Fri 14 Jul 2023 12:59:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        193.108.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:54:7c:7d:ce:2a:15:1d:a9:c2:03:57:05:b9:32:d1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Jul 14 12:59:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a6034ef01d9437cdd919ca311498ba30ce02825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:93:40:a5:1b:4d:a1:9c:18:c5:03:ba:14:
                    ac:a6:c0:41:56:1a:68:88:8c:3d:95:ec:91:b6:18:
                    59:ce:4b:7f:26:9a:3f:69:c4:4a:f7:50:9a:33:f9:
                    fd:b4:5d:8f:f1:3c:25:3a:27:b6:bb:a0:3f:32:39:
                    a6:82:80:1d:82:ef:96:79:fb:1f:eb:92:c7:0c:d5:
                    c5:27:7c:a3:ee:f0:9b:f2:8c:cf:56:e5:90:4c:5f:
                    df:35:ab:f6:44:b1:3d:d4:0f:9b:64:7e:4d:c5:06:
                    3f:eb:d0:95:7a:c2:c0:50:5c:af:f9:db:4c:d8:03:
                    37:4a:93:32:29:83:9e:06:bd:68:a4:e8:43:17:bc:
                    76:45:a8:c9:fd:11:9a:76:f1:05:63:c9:94:52:df:
                    e2:c7:68:02:a2:d8:c9:83:d2:6d:75:78:6d:81:c7:
                    99:b5:4f:bf:0c:27:6c:2a:4e:93:ec:27:94:ef:92:
                    81:a0:11:1b:7d:4b:5c:75:0e:7f:e5:97:0d:5e:c2:
                    b2:a1:79:14:8a:17:64:ff:a6:cc:30:4e:03:4d:ff:
                    5b:e9:e9:93:20:13:7e:99:b0:26:55:da:2a:3f:77:
                    e8:20:4f:3c:86:3e:1e:1c:79:7e:9c:71:19:63:fb:
                    32:7c:bc:6d:47:73:a7:3d:bd:7b:74:ce:52:49:bd:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:60:34:EF:01:D9:43:7C:DD:91:9C:A3:11:49:8B:A3:0C:E0:28:25
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/GmA07wHZQ3zdkZyjEUmLowzgKCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:fa:fd:c6:ec:03:4c:9e:74:11:2a:c8:c7:c7:7c:4f:c9:e8:
         d0:b2:c0:e2:c2:a0:ec:10:41:6c:be:24:6a:fb:87:79:a2:8a:
         e2:f8:c3:18:07:f6:a8:34:bb:fd:1d:e6:94:1a:13:be:84:54:
         a7:82:a3:85:e4:6c:67:d3:cb:d1:dc:dd:42:2d:8e:ae:94:56:
         91:37:62:4d:29:7d:31:f6:94:54:d0:20:43:ae:bb:ac:f5:ea:
         9f:1e:f0:bc:a3:1d:f2:21:cd:dc:aa:d2:e3:95:84:80:fe:57:
         a1:d3:e6:e9:59:bd:43:79:4a:7b:57:87:52:a9:bf:dc:68:b9:
         bf:1b:fa:41:85:69:a4:59:41:8b:b7:61:b9:0e:a2:f7:6f:bc:
         ca:14:4a:35:24:d6:46:44:6c:36:52:6f:bd:5c:15:d0:00:c5:
         fc:5d:7c:09:d8:90:a0:48:4f:8b:1e:c2:1f:4a:b1:fc:83:8e:
         4b:74:6c:04:28:91:b3:70:e1:d1:b5:78:5c:e4:d9:48:fd:3a:
         9a:34:fc:60:f4:2d:af:5c:ba:c8:e6:32:87:88:b9:8d:0d:b0:
         e0:44:70:bf:7e:ca:1f:a2:34:ae:7f:9c:e3:41:0e:8e:1b:27:
         1a:37:f9:8f:ea:15:c1:f3:55:d9:ac:a3:11:50:43:d7:bf:b7:
         9a:87:74:84
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYlUfH3OKhUdqcIDVwW5MtE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwNzE0MTI1OTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTYwMzRlZjAxZDk0MzdjZGQ5MTljYTMxMTQ5OGJhMzBjZTAyODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m6TQKUbTaGcGMUDuhSspsBBVhpo
iIw9leyRthhZzkt/Jpo/acRK91CaM/n9tF2P8TwlOie2u6A/MjmmgoAdgu+Wefsf
65LHDNXFJ3yj7vCb8ozPVuWQTF/fNav2RLE91A+bZH5NxQY/69CVesLAUFyv+dtM
2AM3SpMyKYOeBr1opOhDF7x2RajJ/RGadvEFY8mUUt/ix2gCotjJg9JtdXhtgceZ
tU+/DCdsKk6T7CeU75KBoBEbfUtcdQ5/5ZcNXsKyoXkUihdk/6bMME4DTf9b6emT
IBN+mbAmVdoqP3foIE88hj4eHHl+nHEZY/syfLxtR3OnPb17dM5SSb1nFwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBpgNO8B2UN83ZGcoxFJi6MM4CglMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL0dtQTA3d0haUTN6ZGtaeWpFVW1Mb3d6Z0tDVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbGgw
DQYJKoZIhvcNAQELBQADggEBACH6/cbsA0yedBEqyMfHfE/J6NCywOLCoOwQQWy+
JGr7h3miiuL4wxgH9qg0u/0d5pQaE76EVKeCo4XkbGfTy9Hc3UItjq6UVpE3Yk0p
fTH2lFTQIEOuu6z16p8e8LyjHfIhzdyq0uOVhID+V6HT5ulZvUN5SntXh1Kpv9xo
ub8b+kGFaaRZQYu3YbkOovdvvMoUSjUk1kZEbDZSb71cFdAAxfxdfAnYkKBIT4se
wh9KsfyDjkt0bAQokbNw4dG1eFzk2Uj9Opo0/GD0La9cusjmMoeIuY0NsOBEcL9+
yh+iNK5/nONBDo4bJxo3+Y/qFcHzVdmsoxFQQ9e/t5qHdIQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org