Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/uTns6UZuHL8LcZGu0SB4DHmTM5Q.roa
File:                     uTns6UZuHL8LcZGu0SB4DHmTM5Q.roa (raw, json)
Hash identifier:          nYImdJ2D6sowJWcY9Ciu9dOzBp645Tt8w5lyikEDXmg=
Subject key identifier:   B9:39:EC:E9:46:6E:1C:BF:0B:71:91:AE:D1:20:78:0C:79:93:33:94
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018365E150717C2A520F1B400821FA3377FC
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/uTns6UZuHL8LcZGu0SB4DHmTM5Q.roa
Signing time:             Thu 22 Sep 2022 15:46:48 +0000
ROA not before:           Thu 22 Sep 2022 15:46:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209018
IP address blocks:        193.38.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:65:e1:50:71:7c:2a:52:0f:1b:40:08:21:fa:33:77:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Sep 22 15:46:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b939ece9466e1cbf0b7191aed120780c79933394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:3a:8c:5f:88:73:b9:ab:c4:d1:67:cc:a7:
                    9e:c8:3c:9c:b4:5b:ad:1f:31:0e:3f:a7:dc:e9:2e:
                    4a:2e:66:87:54:99:b5:79:d0:0f:e8:10:5f:a1:f9:
                    cc:24:04:30:86:a2:65:9b:98:68:7f:fd:3b:59:5d:
                    fd:ab:86:2c:75:8a:a2:14:d9:cc:11:a1:21:48:76:
                    d1:6c:bc:6a:74:43:19:69:f0:a1:39:69:41:78:c5:
                    00:86:46:8e:2b:bc:19:a5:8e:2b:cb:72:57:d4:47:
                    a7:b2:e6:db:d0:bf:9e:6b:f9:8d:7c:38:02:6c:5e:
                    8c:8e:d0:f8:7f:80:c0:0b:ee:68:5e:d2:79:d1:50:
                    fb:a1:8b:db:48:97:68:78:9d:06:69:2c:46:e0:06:
                    8e:68:d7:8a:02:85:61:d6:46:24:2c:3e:f8:27:e2:
                    5c:ef:32:94:eb:10:64:72:14:6f:0d:21:1a:14:f3:
                    66:c7:da:fb:7c:a9:75:ee:9f:cc:c7:53:99:a5:8b:
                    9a:a7:07:41:bf:23:b8:f2:0c:9a:11:a6:97:12:ce:
                    3b:40:be:22:27:b2:2b:0b:33:cd:5d:73:34:cc:97:
                    ed:70:44:d2:16:84:9c:c7:ec:0c:1c:dc:46:ef:a5:
                    c5:08:07:cc:9a:a5:cc:8c:f1:0c:41:f1:80:45:54:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:EC:E9:46:6E:1C:BF:0B:71:91:AE:D1:20:78:0C:79:93:33:94
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/uTns6UZuHL8LcZGu0SB4DHmTM5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:69:22:15:63:69:a4:2e:15:4c:9c:1a:9a:e4:60:95:91:
         0c:62:06:ca:a3:d8:86:af:38:eb:13:86:4b:c4:78:c9:d3:fe:
         2b:e2:cd:12:9b:dc:c8:29:bb:9c:c9:1b:3e:bb:8b:6f:a5:86:
         cc:9e:af:3a:ee:0f:e7:10:47:5c:e6:c9:48:16:19:f9:d8:1d:
         d6:f0:a6:26:a6:d9:2d:2e:dc:a4:37:58:21:f1:aa:d7:0c:85:
         2d:d5:f3:cf:0d:a5:0e:4e:83:23:b9:73:10:3d:32:e5:79:80:
         c7:d7:32:4c:f9:28:12:dd:ed:6b:bd:10:09:25:5a:99:46:d7:
         7f:c5:db:90:08:db:a7:14:30:a2:c1:b5:4a:b1:26:b0:d1:25:
         dd:97:19:67:9b:42:76:09:32:50:d4:42:9a:33:ee:16:78:37:
         15:9c:e7:da:f7:c6:c4:bd:ce:a6:c8:78:b2:1e:f1:cd:b7:fe:
         63:1f:5c:20:4d:73:97:62:92:64:a1:f3:2e:19:2a:c4:0f:d6:
         a5:7a:9c:22:29:a3:ab:55:01:13:d9:27:90:e0:ab:9c:44:a5:
         47:5d:99:fe:85:6e:9e:5d:a1:b0:fd:2b:3f:60:fc:40:f2:b4:
         8d:f3:d3:5d:e1:93:57:df:bf:b3:51:dc:74:06:f7:25:d1:35:
         26:c3:ea:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNl4VBxfCpSDxtACCH6M3f8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIwOTIyMTU0NjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTM5ZWNlOTQ2NmUxY2JmMGI3MTkxYWVkMTIwNzgwYzc5OTMzMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j06jF+Ic7mrxNFnzKeeyDyctFut
HzEOP6fc6S5KLmaHVJm1edAP6BBfofnMJAQwhqJlm5hof/07WV39q4YsdYqiFNnM
EaEhSHbRbLxqdEMZafChOWlBeMUAhkaOK7wZpY4ry3JX1Eensubb0L+ea/mNfDgC
bF6MjtD4f4DAC+5oXtJ50VD7oYvbSJdoeJ0GaSxG4AaOaNeKAoVh1kYkLD74J+Jc
7zKU6xBkchRvDSEaFPNmx9r7fKl17p/Mx1OZpYuapwdBvyO48gyaEaaXEs47QL4i
J7IrCzPNXXM0zJftcETSFoScx+wMHNxG76XFCAfMmqXMjPEMQfGARVSddwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLk57OlGbhy/C3GRrtEgeAx5kzOUMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvdVRuczZVWnVITDhMY1pHdTBTQjRESG1UTTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSY1MA0G
CSqGSIb3DQEBCwUAA4IBAQBNYmkiFWNppC4VTJwamuRglZEMYgbKo9iGrzjrE4ZL
xHjJ0/4r4s0Sm9zIKbucyRs+u4tvpYbMnq867g/nEEdc5slIFhn52B3W8KYmptkt
LtykN1gh8arXDIUt1fPPDaUOToMjuXMQPTLleYDH1zJM+SgS3e1rvRAJJVqZRtd/
xduQCNunFDCiwbVKsSaw0SXdlxlnm0J2CTJQ1EKaM+4WeDcVnOfa98bEvc6myHiy
HvHNt/5jH1wgTXOXYpJkofMuGSrED9alepwiKaOrVQET2SeQ4KucRKVHXZn+hW6e
XaGw/Ss/YPxA8rSN89Nd4ZNX37+zUdx0Bvcl0TUmw+rh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org