Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/CpMliJCoYT6UReJVYeDsGlfUE8o.roa
File:                     CpMliJCoYT6UReJVYeDsGlfUE8o.roa (raw, json)
Hash identifier:          Lif7Dz1DGJ8SGzfUcL18nfo9nLzwEpkaaW95705CyqY=
Subject key identifier:   0A:93:25:88:90:A8:61:3E:94:45:E2:55:61:E0:EC:1A:57:D4:13:CA
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       09DE1A3C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/CpMliJCoYT6UReJVYeDsGlfUE8o.roa
Signing time:             Wed 23 Feb 2022 14:55:12 +0000
ROA not before:           Wed 23 Feb 2022 14:55:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        193.38.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165550652 (0x9de1a3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Feb 23 14:55:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a93258890a8613e9445e25561e0ec1a57d413ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:39:1a:37:13:d1:cb:bf:b0:9e:13:90:b8:
                    13:5a:87:25:a3:10:3c:a5:c3:3f:c3:c2:03:c6:36:
                    d4:fc:a6:93:42:9b:17:09:51:f7:a4:b3:52:6e:44:
                    6b:98:b4:61:f8:3a:6d:c3:2b:11:d7:a3:5f:6a:24:
                    a2:74:42:0f:df:cd:25:e1:a9:98:97:c1:23:2b:6c:
                    c2:79:32:72:28:43:c4:95:fb:da:67:3e:46:e2:f5:
                    2d:3d:10:f6:8f:fc:b3:83:c9:a6:9c:d2:e1:8c:31:
                    51:fb:20:64:f2:2e:ef:6c:1e:0d:a8:1e:bb:44:ce:
                    2c:67:f4:8c:9a:fa:de:a0:51:fc:31:89:d6:5c:02:
                    ed:32:cf:6b:b7:69:c7:84:5f:65:90:e4:a3:64:1c:
                    6e:df:20:a0:dc:f5:80:26:80:53:29:af:3c:8a:f0:
                    3c:77:19:3c:3c:a6:ec:7d:88:c2:ce:19:ac:a8:52:
                    8f:0d:ed:80:19:45:41:31:13:2b:08:3b:61:84:e4:
                    88:ed:4b:b4:0a:86:5f:39:44:c5:1b:1b:82:5a:95:
                    16:c1:e3:88:81:8e:42:58:e5:40:eb:ea:fc:72:c5:
                    75:a4:00:ea:f0:2d:30:cd:5f:8a:75:85:06:2e:b5:
                    31:3d:e4:d4:a6:32:ca:b1:52:f3:3e:0c:29:0f:b3:
                    92:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:93:25:88:90:A8:61:3E:94:45:E2:55:61:E0:EC:1A:57:D4:13:CA
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/CpMliJCoYT6UReJVYeDsGlfUE8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:17:38:39:c9:e0:1e:52:59:4d:21:0a:82:91:a5:c3:3c:fc:
         4f:a6:a8:23:42:73:f7:74:6f:72:a2:71:75:41:5d:5b:a4:ad:
         a2:1c:87:ff:64:71:c6:86:93:4f:00:4e:e2:83:b4:c7:87:13:
         97:44:ae:88:94:dd:0a:e3:a6:0e:44:2c:da:10:3a:a1:3b:bc:
         cd:e7:aa:8e:9f:bd:5f:24:6a:0c:6c:6c:16:54:47:4c:a9:fd:
         20:ad:f4:8b:a0:6f:29:53:14:26:a8:9b:b2:84:ae:d4:4b:ef:
         39:3e:54:56:92:9f:e9:2e:06:f9:cb:6e:d0:49:e9:ae:ee:b7:
         6e:f4:57:4d:df:d3:18:5c:29:19:48:89:fd:13:76:22:3e:1e:
         ab:dd:ac:69:cb:80:fe:59:2f:fa:0b:44:3a:03:c8:5d:f1:70:
         04:64:87:f1:3f:cf:18:0d:92:01:2e:4c:44:62:88:bf:6a:92:
         81:8b:4c:2b:8e:e2:ff:ff:a9:42:ee:ae:ba:2b:12:52:69:57:
         16:e4:ce:ff:0d:c6:16:5d:ce:cc:c2:8d:c6:0e:dc:38:b5:d9:
         b3:e9:ce:64:7e:5c:84:f7:15:c7:7e:42:29:a0:01:8c:4a:57:
         f9:b9:c9:11:b2:e4:65:97:ab:24:80:0b:95:a4:d2:46:a5:32:
         07:7f:ea:3a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECd4aPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDIy
MzE0NTUxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE5MzI1ODg5MGE4
NjEzZTk0NDVlMjU1NjFlMGVjMWE1N2Q0MTNjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlyORo3E9HLv7CeE5C4E1qHJaMQPKXDP8PCA8Y21Pymk0Kb
FwlR96SzUm5Ea5i0Yfg6bcMrEdejX2okonRCD9/NJeGpmJfBIytswnkycihDxJX7
2mc+RuL1LT0Q9o/8s4PJppzS4YwxUfsgZPIu72weDageu0TOLGf0jJr63qBR/DGJ
1lwC7TLPa7dpx4RfZZDko2Qcbt8goNz1gCaAUymvPIrwPHcZPDym7H2Iws4ZrKhS
jw3tgBlFQTETKwg7YYTkiO1LtAqGXzlExRsbglqVFsHjiIGOQljlQOvq/HLFdaQA
6vAtMM1finWFBi61MT3k1KYyyrFS8z4MKQ+zkhsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKkyWIkKhhPpRF4lVh4OwaV9QTyjAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L0NwTWxpSkNvWVQ2VVJlSlZZZURzR2xmVUU4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEmNTANBgkqhkiG9w0BAQsFAAOC
AQEAYhc4OcngHlJZTSEKgpGlwzz8T6aoI0Jz93RvcqJxdUFdW6StohyH/2RxxoaT
TwBO4oO0x4cTl0SuiJTdCuOmDkQs2hA6oTu8zeeqjp+9XyRqDGxsFlRHTKn9IK30
i6BvKVMUJqibsoSu1EvvOT5UVpKf6S4G+ctu0Enpru63bvRXTd/TGFwpGUiJ/RN2
Ij4eq92sacuA/lkv+gtEOgPIXfFwBGSH8T/PGA2SAS5MRGKIv2qSgYtMK47i//+p
Qu6uuisSUmlXFuTO/w3GFl3OzMKNxg7cOLXZs+nOZH5chPcVx35CKaABjEpX+bnJ
EbLkZZerJIALlaTSRqUyB3/qOg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org