Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/eGvDxj16NO2iA-TbM4I-yOEUH5M.roa
File:                     eGvDxj16NO2iA-TbM4I-yOEUH5M.roa (raw, json)
Hash identifier:          ex98diuLvCzYCR41V11UVEhYGmWUmvrBa7rQf8bfx7c=
Subject key identifier:   78:6B:C3:C6:3D:7A:34:ED:A2:03:E4:DB:33:82:3E:C8:E1:14:1F:93
Certificate issuer:       /CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
Certificate serial:       018650C6D374B09B34368B31E0CF7F9BDB3F
Authority key identifier: 7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/eGvDxj16NO2iA-TbM4I-yOEUH5M.roa
Signing time:             Tue 14 Feb 2023 16:34:12 +0000
ROA not before:           Tue 14 Feb 2023 16:34:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211826
IP address blocks:        193.34.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:50:c6:d3:74:b0:9b:34:36:8b:31:e0:cf:7f:9b:db:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
        Validity
            Not Before: Feb 14 16:34:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=786bc3c63d7a34eda203e4db33823ec8e1141f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:f4:31:2a:4d:25:e3:fa:11:5b:bf:fb:a5:
                    b0:49:ec:97:bd:3d:3a:10:cf:67:a7:a7:c3:2d:18:
                    3f:dc:ba:e1:66:1d:db:8b:2a:9c:85:f7:fc:98:58:
                    55:c9:d4:9a:ed:32:74:8f:81:7e:17:a8:38:a7:c3:
                    b2:95:be:51:93:1d:60:ef:1f:97:b7:14:e7:a1:9a:
                    a2:4e:0c:13:7f:87:e3:58:00:77:96:59:3c:77:ae:
                    4a:21:b4:3a:42:94:08:b0:82:2b:c3:1f:3f:7c:d9:
                    37:f9:a4:49:f6:7d:37:57:fd:c7:93:a7:4c:1a:9b:
                    23:93:02:aa:27:c2:d8:2d:c7:5a:df:7a:be:f5:a2:
                    72:9d:99:15:e4:c7:0f:f3:44:ea:2a:55:37:91:9d:
                    bc:bc:7f:c9:ff:4c:0f:fa:be:68:d8:94:38:a9:17:
                    8d:b2:07:d4:34:a9:12:0e:0b:db:e2:8b:a5:4c:46:
                    39:64:91:ec:05:a7:3d:f9:45:9f:7e:88:d5:e0:b4:
                    78:4c:79:4e:8b:c6:08:9c:97:c6:37:29:aa:fa:52:
                    4b:83:1c:0e:47:4f:9a:d1:1c:03:6b:a4:28:a9:01:
                    47:3d:ef:e5:e9:f8:35:e8:34:00:d1:06:98:4e:07:
                    96:8c:2a:a2:d0:d3:48:a7:c5:e9:3e:69:55:f0:01:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6B:C3:C6:3D:7A:34:ED:A2:03:E4:DB:33:82:3E:C8:E1:14:1F:93
            X509v3 Authority Key Identifier:
                keyid:7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/eGvDxj16NO2iA-TbM4I-yOEUH5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:57:6f:c6:c6:53:d5:dc:de:71:62:6a:49:c2:61:ae:39:39:
         19:e5:f0:78:4b:6a:60:92:4f:d6:91:e9:2a:bf:13:62:fd:ce:
         a1:f9:4d:5c:59:32:77:78:5a:fb:bc:2c:2e:6d:7c:ab:0a:50:
         cf:c7:e8:69:b2:d6:c6:d6:f6:a8:3d:31:f9:fc:d8:0f:e9:f4:
         fd:70:ac:71:0a:d6:88:97:23:53:8b:2f:02:70:ff:ea:74:33:
         75:dd:14:b3:be:0e:f9:6c:78:2b:a2:c4:c7:e3:70:fd:df:d0:
         41:e6:54:93:05:02:f2:de:11:13:3e:c4:23:5a:be:b1:b6:42:
         b0:9e:5e:cc:07:13:15:7f:c2:60:6f:ab:da:50:2f:31:bf:5f:
         02:21:be:58:2b:74:b5:3f:e8:10:b3:77:ae:7b:56:fd:8d:bb:
         c5:d1:a4:74:a1:d3:f3:0b:86:a5:18:2f:f6:32:83:14:5d:11:
         2b:f1:a1:ac:c2:b8:47:24:f9:83:8c:db:08:f2:55:0f:cc:e2:
         00:95:82:a7:88:70:9c:56:a9:42:d5:0a:b6:7b:a5:ce:8a:86:
         f7:71:b7:5b:c9:07:1b:6e:14:45:d8:6f:d2:7d:42:da:28:82:
         3e:c3:6c:0d:e6:ec:64:7d:5a:3a:21:04:14:45:79:03:e0:7b:
         6f:d9:e8:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZQxtN0sJs0Nosx4M9/m9s/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMmM5MmE3OWY2MmZjYjkxOWU3OTVhYjVkZTMxM2Y0YmRh
NzFkZGYwHhcNMjMwMjE0MTYzNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZiYzNjNjNkN2EzNGVkYTIwM2U0ZGIzMzgyM2VjOGUxMTQxZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r30MSpNJeP6EVu/+6WwSeyXvT06
EM9np6fDLRg/3LrhZh3biyqchff8mFhVydSa7TJ0j4F+F6g4p8Oylb5Rkx1g7x+X
txTnoZqiTgwTf4fjWAB3llk8d65KIbQ6QpQIsIIrwx8/fNk3+aRJ9n03V/3Hk6dM
GpsjkwKqJ8LYLcda33q+9aJynZkV5McP80TqKlU3kZ28vH/J/0wP+r5o2JQ4qReN
sgfUNKkSDgvb4oulTEY5ZJHsBac9+UWffojV4LR4THlOi8YInJfGNymq+lJLgxwO
R0+a0RwDa6QoqQFHPe/l6fg16DQA0QaYTgeWjCqi0NNIp8XpPmlV8AHK6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhrw8Y9ejTtogPk2zOCPsjhFB+TMB8GA1UdIwQY
MBaAFH8skqefYvy5GeeVq13jE/S9px3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnl5U3A1OWlfTGtaNTVXclhlTVQ5TDJuSGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mZmI5MDYtNjc2ZS00ZTBhLTgyZjYt
MTFmODNkNzBjODk4LzEvZUd2RHhqMTZOTzJpQS1UYk00SS15T0VVSDVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mZmI5MDYtNjc2ZS00ZTBhLTgyZjYtMTFmODNkNzBjODk4
LzEvZnl5U3A1OWlfTGtaNTVXclhlTVQ5TDJuSGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSJRMA0G
CSqGSIb3DQEBCwUAA4IBAQCfV2/GxlPV3N5xYmpJwmGuOTkZ5fB4S2pgkk/Wkekq
vxNi/c6h+U1cWTJ3eFr7vCwubXyrClDPx+hpstbG1vaoPTH5/NgP6fT9cKxxCtaI
lyNTiy8CcP/qdDN13RSzvg75bHgrosTH43D939BB5lSTBQLy3hETPsQjWr6xtkKw
nl7MBxMVf8Jgb6vaUC8xv18CIb5YK3S1P+gQs3eue1b9jbvF0aR0odPzC4alGC/2
MoMUXREr8aGswrhHJPmDjNsI8lUPzOIAlYKniHCcVqlC1Qq2e6XOiob3cbdbyQcb
bhRF2G/SfULaKII+w2wN5uxkfVo6IQQURXkD4Htv2eiE
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org