Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/siI2Mv7TizfW6AGDF4TQDaq299k.roa
File:                     siI2Mv7TizfW6AGDF4TQDaq299k.roa (raw, json)
Hash identifier:          G4yCfdRzNxA0LFh/zV158ZKMJnuNvSKjEMPVsPvQVGo=
Subject key identifier:   B2:22:36:32:FE:D3:8B:37:D6:E8:01:83:17:84:D0:0D:AA:B6:F7:D9
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0185155C617E7BEC7D232F251D83E93755A3
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/siI2Mv7TizfW6AGDF4TQDaq299k.roa
Signing time:             Thu 15 Dec 2022 10:37:33 +0000
ROA not before:           Thu 15 Dec 2022 10:37:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212609
IP address blocks:        193.38.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:15:5c:61:7e:7b:ec:7d:23:2f:25:1d:83:e9:37:55:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Dec 15 10:37:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b2223632fed38b37d6e801831784d00daab6f7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:52:d9:0a:d6:6a:72:df:a3:ca:22:fb:f2:
                    3f:50:9c:1d:b6:6a:ab:bd:af:50:7a:fc:4b:53:bb:
                    ce:6c:df:48:5c:2e:cc:77:43:a0:d4:d5:cd:bd:46:
                    b5:ae:90:4c:89:d2:5c:bc:b3:42:bd:7b:2f:72:aa:
                    b4:cf:db:60:8b:54:9a:f9:ad:fe:6d:c8:15:18:d1:
                    f8:e7:25:cd:df:fc:af:9c:47:35:58:96:9e:92:d4:
                    1c:be:ae:40:24:06:fd:36:48:6b:4c:3b:25:b2:c6:
                    8f:88:c7:e7:da:77:f9:61:24:e3:e5:17:6f:bf:db:
                    f3:50:93:f4:34:0b:6b:8e:4c:33:4f:88:d8:37:2b:
                    60:ef:0f:4b:b1:62:f6:ae:7c:6b:d0:cd:04:53:76:
                    36:d0:77:64:b5:6c:7b:79:82:79:64:02:bc:27:d0:
                    64:7d:31:65:32:77:3d:b7:c2:ce:c8:57:55:58:50:
                    ea:44:1d:f1:19:8c:57:23:81:86:db:d3:14:c7:ab:
                    c4:1f:20:64:4e:2b:1c:aa:2b:9e:3b:8a:71:86:a1:
                    c5:ff:2c:3a:28:f2:5f:2e:2b:e7:e1:d9:54:cc:9d:
                    5b:dd:87:51:7e:23:ac:ea:20:85:f9:51:d3:e1:55:
                    93:22:a6:6c:e7:7a:e1:41:97:8f:24:76:e0:81:97:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:22:36:32:FE:D3:8B:37:D6:E8:01:83:17:84:D0:0D:AA:B6:F7:D9
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/siI2Mv7TizfW6AGDF4TQDaq299k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:72:04:a2:5a:6e:51:83:6c:f8:99:f5:3a:fb:b9:28:29:db:
         6e:ec:0f:3d:27:b8:39:13:89:04:35:b3:1f:29:bb:7d:e9:0a:
         48:a9:50:25:c0:62:86:1b:d6:c4:e4:20:f7:db:24:56:1b:84:
         7d:11:94:b3:6d:98:56:f0:70:5c:78:8b:e9:e3:c1:0c:df:a9:
         db:1e:5a:b8:13:3b:1a:1c:1a:28:62:f6:0d:ac:67:d4:e1:9d:
         1b:2b:35:39:2d:e3:d8:6e:e4:8b:e2:09:a9:3f:33:dd:7d:60:
         47:37:df:12:8b:67:af:60:d9:bf:4a:33:6c:49:25:93:50:4d:
         55:f6:a0:0d:e0:3f:ed:ab:80:8a:d8:f7:3b:eb:29:b3:c8:12:
         37:cf:00:29:5c:ff:d7:e2:16:c7:e0:d0:c3:a0:00:5c:0a:54:
         97:87:f3:2c:5f:47:46:8b:33:22:e9:d4:d3:1f:80:48:9c:00:
         c9:06:a1:21:32:13:b7:6b:8a:69:da:20:ca:cf:32:b4:d4:19:
         d2:e2:d9:5f:a2:44:cc:61:dc:fe:55:37:34:42:d3:65:c6:9d:
         8d:5a:b1:53:1a:25:64:89:2b:0d:23:56:8e:d0:3d:9a:93:33:
         14:1f:c6:1c:b5:b2:1a:d1:1b:a9:1a:9c:df:db:09:66:42:ab:
         6a:74:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org