Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SVeTCeq3tcOB9JfoMKfgt5OFpSQ.roa
File:                     SVeTCeq3tcOB9JfoMKfgt5OFpSQ.roa (raw, json)
Hash identifier:          U4D5/AkZUvGtyFfgdilD/3NiKpUUNDcnpEE/hZ2LCiQ=
Subject key identifier:   49:57:93:09:EA:B7:B5:C3:81:F4:97:E8:30:A7:E0:B7:93:85:A5:24
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01856F8C5105EC87598DA7BCB204844FAB8B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SVeTCeq3tcOB9JfoMKfgt5OFpSQ.roa
Signing time:             Sun 01 Jan 2023 22:55:44 +0000
ROA not before:           Sun 01 Jan 2023 22:55:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210122
IP address blocks:        193.37.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8c:51:05:ec:87:59:8d:a7:bc:b2:04:84:4f:ab:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jan  1 22:55:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49579309eab7b5c381f497e830a7e0b79385a524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:1c:bc:74:19:d0:7d:89:87:18:80:0c:a0:
                    85:2a:8b:7c:82:d6:16:3f:6c:14:5f:68:ba:13:86:
                    66:d5:a3:5c:01:e3:83:d6:2b:8b:06:f8:85:88:8d:
                    5c:55:84:88:61:05:12:fa:27:87:16:c3:02:30:f1:
                    bc:b5:7b:42:c4:2f:4b:8f:4a:63:a6:e2:47:d4:37:
                    1e:ef:93:e7:71:3f:ab:71:1d:23:fd:dd:69:0a:ed:
                    a9:98:d8:fb:ff:ad:ba:53:1e:73:b8:85:e5:59:ac:
                    1c:c8:1b:79:86:27:0e:60:48:31:02:f8:5c:95:c8:
                    6c:8c:51:6f:72:a3:63:93:42:cd:5f:ec:ff:70:c0:
                    d1:13:db:5c:4f:06:e1:c1:5d:57:33:55:96:29:ef:
                    ab:09:cc:65:78:5e:e9:7e:94:5e:70:c9:d3:66:1a:
                    c4:bc:d4:a3:19:e6:db:e5:2d:5e:2f:9e:f3:24:a8:
                    e1:1f:78:63:e6:1a:90:92:f2:41:2a:27:30:59:7f:
                    f6:f6:8d:2c:23:c3:e3:2f:19:f4:75:66:f2:0b:af:
                    6e:1f:b5:4e:5a:f0:5d:ce:6a:14:4e:49:1a:aa:59:
                    27:31:5d:02:1e:94:6b:7b:99:b0:de:95:11:e7:af:
                    89:9c:e1:41:d6:52:9d:22:36:ce:27:6f:a6:40:b9:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:57:93:09:EA:B7:B5:C3:81:F4:97:E8:30:A7:E0:B7:93:85:A5:24
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/SVeTCeq3tcOB9JfoMKfgt5OFpSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:2a:14:e2:e0:c9:7d:15:bc:4d:79:ed:05:39:c7:e1:b0:5f:
         39:0c:90:e8:bf:01:74:19:ae:c2:a9:ec:ad:fe:e7:da:9f:cc:
         95:78:82:dd:73:f8:ae:ae:5e:c8:1b:32:eb:20:4d:17:32:d1:
         29:69:97:a2:fb:e2:bb:c6:2f:82:7a:3e:1d:6b:29:51:eb:8c:
         22:5b:68:2d:53:4a:40:2d:fa:1d:c7:b6:00:0d:6e:64:b8:a8:
         57:3a:97:77:7c:bc:ea:93:41:b3:ed:2f:ce:e0:93:da:8f:0d:
         53:0f:d5:5a:94:bd:63:98:eb:5f:5d:87:7a:6f:54:e3:1c:33:
         4f:a7:a6:14:34:0c:66:59:21:4a:f8:62:e0:75:70:47:cf:4b:
         76:30:f5:b7:9e:ab:2f:6d:91:d6:b3:ff:a7:d8:2f:0d:56:6d:
         83:7e:a9:8e:38:94:f9:88:dc:e0:d6:49:98:9e:7c:e5:f1:e6:
         90:02:6b:1c:0d:74:65:91:09:a5:7b:9b:e2:cb:07:26:a6:39:
         e3:30:4e:08:45:61:c8:33:23:d2:ba:f9:8f:90:fb:eb:1f:58:
         c3:46:68:b9:7a:60:39:5f:e8:44:a6:c4:5a:8a:3e:80:6a:d1:
         c1:a1:1c:9a:34:8f:9e:fc:c5:50:74:72:fa:9d:83:ad:42:ea:
         70:9b:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org