Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xvTndO7HKacWtpQR__18B7U3ePA.roa
File:                     xvTndO7HKacWtpQR__18B7U3ePA.roa (raw, json)
Hash identifier:          ywW6ap64/l/pnd77JAUCOhWxnPC1sT8cifc2JEapMq8=
Subject key identifier:   C6:F4:E7:74:EE:C7:29:A7:16:B6:94:11:FF:FD:7C:07:B5:37:78:F0
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01856F8C55BBF55258C38FA3352E40252963
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xvTndO7HKacWtpQR__18B7U3ePA.roa
Signing time:             Sun 01 Jan 2023 22:55:46 +0000
ROA not before:           Sun 01 Jan 2023 22:55:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212609
IP address blocks:        193.38.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8c:55:bb:f5:52:58:c3:8f:a3:35:2e:40:25:29:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jan  1 22:55:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c6f4e774eec729a716b69411fffd7c07b53778f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:71:00:b8:c1:82:59:6c:88:55:07:4c:b2:
                    76:41:01:50:91:a7:02:4c:63:da:d3:40:57:f5:49:
                    8f:af:74:45:14:3a:1c:32:18:49:2b:2e:3b:d6:2e:
                    65:4c:34:f7:7d:15:2e:56:10:64:b4:2f:0f:92:36:
                    34:c0:6b:37:b3:0a:68:41:cc:45:3c:ba:68:46:a4:
                    5e:d6:1e:fa:0e:89:01:b2:df:5d:d1:f6:e4:30:28:
                    66:17:76:61:b3:ce:d3:63:d9:46:af:3b:7b:4b:58:
                    b8:bf:01:ce:a2:e8:8a:0b:83:8c:58:0e:26:07:6c:
                    ab:bd:a0:cc:d1:6c:bc:0a:34:78:c6:40:9e:fa:17:
                    32:57:0b:81:fa:c1:93:f5:4f:be:6c:5a:b3:0f:a3:
                    08:e8:0b:a4:12:ab:28:95:43:8c:bc:03:96:88:9f:
                    d0:88:40:3a:32:d9:86:d6:6d:87:9e:2f:ef:f0:74:
                    e6:11:0d:ca:a8:af:c3:e1:be:db:71:ab:f9:75:bc:
                    f8:8f:5a:9d:8a:86:38:f5:30:b9:3e:11:4e:7b:93:
                    96:aa:48:33:9d:c6:b0:78:d5:6d:37:77:bf:bf:dc:
                    c9:fb:c5:b6:3f:bc:69:4d:ea:07:96:d4:10:02:59:
                    76:17:97:f9:42:0b:71:05:6d:85:9e:b6:f5:79:d5:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F4:E7:74:EE:C7:29:A7:16:B6:94:11:FF:FD:7C:07:B5:37:78:F0
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xvTndO7HKacWtpQR__18B7U3ePA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f9:93:a7:e2:9e:ad:53:ed:9e:a8:18:9c:bb:90:13:e1:3b:
         2d:58:98:6b:08:fe:88:bb:e8:17:78:69:b4:fc:50:93:fd:16:
         98:9b:c6:46:e7:c1:42:f9:5d:29:71:67:4c:dc:89:4e:1f:77:
         74:33:12:a7:7d:5e:27:fa:d7:0b:56:7a:1b:00:9d:25:ba:db:
         e4:59:d7:29:19:fd:e2:8a:15:fe:06:d5:5f:51:fd:94:4d:dd:
         21:8b:78:92:81:6e:87:b2:35:66:c6:8b:ba:fb:de:22:ea:19:
         12:43:0c:83:22:9d:1e:37:59:63:52:e6:10:c8:7e:aa:22:1d:
         4a:7c:ea:8c:bf:05:9d:05:7b:0e:24:0c:af:66:76:07:96:ef:
         aa:7b:fe:d3:96:09:f8:f3:28:d2:9e:78:42:9f:fe:c3:e5:c0:
         ab:f8:83:5e:12:d0:c8:50:b6:dd:9f:1d:96:7d:e9:d2:91:0d:
         ff:24:ff:2d:e1:25:f9:ae:e7:42:b7:18:65:15:e3:63:70:36:
         c2:81:2f:4d:c1:76:1a:85:e5:4f:1e:19:43:1d:92:1e:15:71:
         a1:98:12:44:fc:c1:36:68:87:1f:16:5a:16:b8:8c:85:19:3e:
         b2:84:56:50:97:70:26:88:df:8f:84:e6:38:40:15:8a:cc:8f:
         a7:89:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org