Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/M1Ue1GtUzGDAepaLGRTQ69Wcd3w.roa
File:                     M1Ue1GtUzGDAepaLGRTQ69Wcd3w.roa (raw, json)
Hash identifier:          O1lsf8yHKJNKlmkYd4ih1rL8B101POM5RszIvt0UCVk=
Subject key identifier:   33:55:1E:D4:6B:54:CC:60:C0:7A:96:8B:19:14:D0:EB:D5:9C:77:7C
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0183A4685E0A6431C060DB996758FBF710E0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/M1Ue1GtUzGDAepaLGRTQ69Wcd3w.roa
Signing time:             Tue 04 Oct 2022 19:10:46 +0000
ROA not before:           Tue 04 Oct 2022 19:10:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202532
IP address blocks:        2.56.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a4:68:5e:0a:64:31:c0:60:db:99:67:58:fb:f7:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Oct  4 19:10:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33551ed46b54cc60c07a968b1914d0ebd59c777c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:c9:75:cb:67:0e:94:df:37:00:de:d7:34:
                    23:c4:05:2c:e9:50:f7:6f:0c:95:ec:90:c6:5f:91:
                    fd:4d:37:a6:cb:c6:4c:0b:f7:3a:c7:ae:36:9e:b6:
                    9a:05:b9:50:a2:59:7f:5a:5c:93:d6:56:40:aa:c6:
                    41:94:58:e9:8f:ed:f8:16:a4:de:a6:d5:da:ee:b0:
                    c6:5a:10:72:f9:ca:7b:27:3b:48:b5:98:f3:68:62:
                    6a:f4:3a:f2:46:7b:fb:da:85:37:3d:2b:c1:22:81:
                    87:7c:98:57:ba:e1:a7:ad:70:cc:14:c7:c4:bc:60:
                    9d:c9:ca:67:d3:ab:82:ea:10:26:f8:3a:2d:b8:8a:
                    56:09:5c:da:f6:02:e6:91:4a:42:e3:2a:60:f8:8a:
                    bc:eb:85:92:7c:eb:71:b3:75:81:8f:c5:12:9b:b6:
                    48:cb:12:79:cc:cf:c9:58:89:62:13:35:94:42:fd:
                    0b:f4:1d:70:8a:c9:64:70:e3:19:22:3d:24:dd:2c:
                    b7:c3:23:41:cd:02:4d:c7:d4:5f:6f:30:1d:99:18:
                    e1:3c:7d:ce:37:b7:68:a8:df:22:d2:b3:03:63:f0:
                    d7:40:63:34:78:04:80:7d:02:a4:03:2e:00:64:97:
                    1b:39:6e:c1:22:b6:5d:6d:8e:51:88:d2:57:01:d5:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:55:1E:D4:6B:54:CC:60:C0:7A:96:8B:19:14:D0:EB:D5:9C:77:7C
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/M1Ue1GtUzGDAepaLGRTQ69Wcd3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:f8:c2:d4:42:ff:53:c6:9b:f8:93:d4:63:4a:09:b3:9f:5e:
         57:57:16:da:d2:bd:89:f8:d9:88:5d:06:e2:e6:35:7b:c9:41:
         5f:2f:9f:4f:e3:7a:ce:19:de:13:2c:0f:3a:9a:a2:3f:22:f7:
         3e:6b:82:15:cd:94:f4:02:8b:52:11:b4:99:36:b6:0f:d8:4a:
         c3:54:b5:5b:04:a9:bb:c7:f8:6a:af:78:79:05:c1:16:41:f8:
         67:b5:0e:26:7f:78:58:dc:d5:71:ea:4f:b9:0c:6d:5a:9c:98:
         b6:e9:35:c1:3e:11:64:8b:38:be:32:04:14:93:fc:70:a7:58:
         90:53:07:61:09:25:95:30:92:bf:54:80:74:be:90:cd:d8:39:
         e4:8b:67:8d:fd:30:fb:7a:52:1b:65:b6:b4:c6:30:fe:43:80:
         bd:55:83:0a:53:d3:9b:9f:2d:42:ed:80:e9:3e:7d:b2:59:44:
         67:b0:55:4f:f1:ac:1e:43:75:a2:ba:a0:82:69:45:0c:c6:ce:
         7b:bc:d4:b0:13:ef:35:62:99:93:c0:46:3b:2e:d2:49:68:76:
         17:06:ef:ea:f5:07:cb:c9:49:71:cf:97:43:e9:e6:cc:2f:1f:
         71:70:14:bd:78:58:29:d1:00:16:99:84:0e:d2:e2:2e:0a:dd:
         2e:3c:c2:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOkaF4KZDHAYNuZZ1j79xDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMDA0MTkxMDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzU1MWVkNDZiNTRjYzYwYzA3YTk2OGIxOTE0ZDBlYmQ1OWM3NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNPJdctnDpTfNwDe1zQjxAUs6VD3
bwyV7JDGX5H9TTemy8ZMC/c6x642nraaBblQoll/WlyT1lZAqsZBlFjpj+34FqTe
ptXa7rDGWhBy+cp7JztItZjzaGJq9DryRnv72oU3PSvBIoGHfJhXuuGnrXDMFMfE
vGCdycpn06uC6hAm+DotuIpWCVza9gLmkUpC4ypg+Iq864WSfOtxs3WBj8USm7ZI
yxJ5zM/JWIliEzWUQv0L9B1wislkcOMZIj0k3Sy3wyNBzQJNx9RfbzAdmRjhPH3O
N7doqN8i0rMDY/DXQGM0eASAfQKkAy4AZJcbOW7BIrZdbY5RiNJXAdVrTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNVHtRrVMxgwHqWixkU0OvVnHd8MB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvTTFVZTFHdFV6R0RBZXBhTEdSVFE2OVdjZDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAjj4MA0G
CSqGSIb3DQEBCwUAA4IBAQCi+MLUQv9Txpv4k9RjSgmzn15XVxba0r2J+NmIXQbi
5jV7yUFfL59P43rOGd4TLA86mqI/Ivc+a4IVzZT0AotSEbSZNrYP2ErDVLVbBKm7
x/hqr3h5BcEWQfhntQ4mf3hY3NVx6k+5DG1anJi26TXBPhFkizi+MgQUk/xwp1iQ
UwdhCSWVMJK/VIB0vpDN2Dnki2eN/TD7elIbZba0xjD+Q4C9VYMKU9Obny1C7YDp
Pn2yWURnsFVP8aweQ3WiuqCCaUUMxs57vNSwE+81YpmTwEY7LtJJaHYXBu/q9QfL
yUlxz5dD6ebMLx9xcBS9eFgp0QAWmYQO0uIuCt0uPMIA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org