Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/OmLtctQCblLJQvg_EEyA6Xqcvqw.roa
File:                     OmLtctQCblLJQvg_EEyA6Xqcvqw.roa (raw, json)
Hash identifier:          VvrbOP01DMiv6wdA1P6G8Az32yHhNDW7QDAUQjqF3yE=
Subject key identifier:   3A:62:ED:72:D4:02:6E:52:C9:42:F8:3F:10:4C:80:E9:7A:9C:BE:AC
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       01882CEE985E9613D6FA54A690D687EADF24
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/OmLtctQCblLJQvg_EEyA6Xqcvqw.roa
Signing time:             Thu 18 May 2023 03:36:54 +0000
ROA not before:           Thu 18 May 2023 03:36:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        193.108.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2c:ee:98:5e:96:13:d6:fa:54:a6:90:d6:87:ea:df:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: May 18 03:36:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3a62ed72d4026e52c942f83f104c80e97a9cbeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:c0:c0:a6:37:e7:92:b2:98:42:86:14:3f:
                    52:ea:fa:42:52:60:de:f9:0c:bb:fb:59:7b:26:0d:
                    66:cd:b5:d7:56:63:a5:51:ad:a9:ce:36:85:3d:6d:
                    49:58:ad:f3:a5:5e:bd:c4:26:cd:00:ce:81:f3:66:
                    13:0e:4c:d9:5d:a9:f7:1e:e8:69:28:08:29:80:0f:
                    09:e2:a7:ee:1b:8b:0d:84:07:01:e3:ba:6b:6f:e6:
                    60:23:1d:98:5b:2c:09:4e:05:15:e4:33:24:f9:45:
                    2d:a9:4f:dd:b9:84:47:8f:cf:ee:1b:ff:6f:c8:e5:
                    52:51:94:91:4c:3d:27:d7:33:f3:0a:be:40:25:3d:
                    f5:13:14:22:bd:af:d1:5b:4c:3a:39:c1:25:69:40:
                    c3:bd:29:cb:27:76:3f:e0:1d:28:02:ed:47:fa:87:
                    51:81:0c:2e:da:ad:c0:ae:81:20:3b:d9:62:16:b6:
                    58:0d:2f:cd:eb:bc:f7:5f:62:e9:11:7a:96:0c:ab:
                    27:b1:59:c7:99:ea:76:96:ae:1d:69:96:4f:21:c2:
                    86:ef:b3:6f:2d:83:85:a6:34:b5:17:94:f6:25:ba:
                    01:e1:02:32:b7:72:b6:ac:5e:1e:f1:de:fb:dd:4f:
                    99:b5:62:23:15:0f:24:d2:55:fd:81:66:9b:dc:46:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:ED:72:D4:02:6E:52:C9:42:F8:3F:10:4C:80:E9:7A:9C:BE:AC
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/OmLtctQCblLJQvg_EEyA6Xqcvqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:54:de:24:ba:dd:9c:9e:12:0e:c2:cb:0e:af:7c:ac:e0:
         c2:5b:9f:04:c4:04:4c:cc:d3:4f:b3:c5:5b:cb:8c:52:a7:b2:
         2a:aa:46:64:02:93:63:3c:8f:42:eb:b0:03:fc:6c:08:50:cb:
         a3:1b:d0:16:0c:ff:92:34:1e:40:0b:19:0d:93:a9:8e:ac:e5:
         ae:f3:e8:bc:2f:f6:e0:22:21:b6:c0:14:b7:79:df:57:3a:7e:
         63:ff:11:56:cf:84:4a:c8:08:3a:d5:7d:e2:54:97:72:55:46:
         c7:ab:48:94:1e:3f:67:5e:07:4c:be:17:fe:b6:eb:15:c0:89:
         87:e7:a6:0a:10:54:4c:8b:e9:56:09:c3:b7:ab:47:f0:74:59:
         38:8a:46:20:f7:c7:ed:eb:a0:de:a8:89:67:ca:3e:df:08:47:
         1a:fa:34:a5:31:3b:f8:5d:c9:24:e2:a1:bb:f7:c3:8e:a0:c7:
         2c:e7:d7:7c:79:68:66:55:49:0e:7d:48:04:0a:ca:12:fd:3d:
         70:c2:aa:0b:98:9f:15:26:94:e2:38:ed:f0:df:b8:fb:0c:e1:
         bd:4b:22:e5:ed:9b:68:97:a4:08:a6:db:9e:c4:94:4c:af:ad:
         c1:e6:91:ee:7b:5e:64:47:95:2d:6c:dd:2d:8b:5a:ae:eb:0e:
         9d:c7:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org