Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/zJTvyiKY2SeSZi8AUKu3WQiCOUc.roa
File:                     zJTvyiKY2SeSZi8AUKu3WQiCOUc.roa (raw, json)
Hash identifier:          O8GlSzX1PjMtyz/1Q8FSVX8zPSAOdYwYA5QaSrBjst8=
Subject key identifier:   CC:94:EF:CA:22:98:D9:27:92:66:2F:00:50:AB:B7:59:08:82:39:47
Certificate issuer:       /CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
Certificate serial:       01856E82150C066CE34F6D3528FC67044A2F
Authority key identifier: 7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/zJTvyiKY2SeSZi8AUKu3WQiCOUc.roa
Signing time:             Sun 01 Jan 2023 18:04:56 +0000
ROA not before:           Sun 01 Jan 2023 18:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        193.34.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:82:15:0c:06:6c:e3:4f:6d:35:28:fc:67:04:4a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
        Validity
            Not Before: Jan  1 18:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc94efca2298d92792662f0050abb75908823947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b6:6e:5a:43:3a:f0:25:e6:a8:eb:f8:cd:a1:
                    18:11:59:fd:ba:9b:96:af:42:c4:04:13:72:4e:d1:
                    1e:33:3e:6a:49:e8:3b:91:f1:1d:02:66:84:d3:21:
                    b6:b5:11:19:98:ee:8e:fc:c7:11:4d:36:a0:f2:0f:
                    bc:76:85:e9:f6:42:02:26:cb:02:91:74:84:cb:96:
                    bb:18:7a:dd:08:67:b5:5b:7c:95:a3:4e:5f:6a:c0:
                    36:71:f1:71:bd:19:f4:99:f4:2f:d9:9e:5d:2a:d0:
                    2c:2a:1d:3e:07:a1:43:65:98:71:02:09:0c:f2:d2:
                    45:b5:ae:4e:c3:df:68:af:0e:99:70:1b:9b:90:cd:
                    23:76:2a:d2:86:1c:b6:5f:65:09:32:1a:fe:05:a9:
                    66:6e:03:aa:f3:4a:c1:cd:a1:9d:08:e4:ab:85:5f:
                    4c:df:f1:65:a2:80:20:8e:6a:db:89:74:4c:50:43:
                    7d:b9:16:2b:ff:bf:98:ca:47:c9:fd:b5:0a:de:60:
                    ea:a6:22:f8:00:02:28:d5:7d:34:74:00:06:6b:e3:
                    3f:9e:a5:ec:9a:99:4a:90:15:c4:5a:c0:8f:d6:e0:
                    51:a2:38:03:66:d5:f3:fe:64:cb:66:78:09:47:8e:
                    ae:b2:4c:ef:4a:c4:28:c5:e8:b0:13:29:66:34:9c:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:94:EF:CA:22:98:D9:27:92:66:2F:00:50:AB:B7:59:08:82:39:47
            X509v3 Authority Key Identifier:
                keyid:7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/zJTvyiKY2SeSZi8AUKu3WQiCOUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:5f:c7:75:57:20:06:a4:d8:cb:21:46:c5:96:96:f9:48:
         2e:17:f1:6c:29:a2:3d:c2:67:fd:68:fb:52:7e:2a:8c:eb:26:
         f2:0d:2a:5a:6a:fc:4e:88:52:94:50:c7:f5:a5:ee:5d:8d:2a:
         d1:02:b9:4c:7f:e0:8e:f5:f2:f2:6d:10:75:8d:38:34:70:e8:
         48:c2:73:db:05:fe:c5:cb:07:41:eb:c6:95:66:d2:a4:9f:a4:
         f8:d3:cc:58:33:2f:e1:63:77:32:69:16:df:1f:6a:31:d8:e0:
         dd:53:e8:9e:b9:b3:32:7c:cf:1e:7f:d6:85:d1:09:fd:81:dc:
         01:79:5b:73:a1:d3:d8:0f:1d:4a:f0:3f:c9:e1:9c:e0:15:85:
         de:4b:56:9e:74:a6:80:d5:b8:be:18:d1:8c:07:d3:34:22:bb:
         2e:9e:ab:c5:a1:4f:74:2c:69:54:c4:e9:69:8d:c6:6a:24:0f:
         fb:e6:11:a3:8d:a0:c9:b1:3a:e1:bb:40:df:f0:95:26:32:d0:
         3f:a1:dc:9a:f2:3a:bf:30:11:10:62:33:82:a3:55:b4:87:d5:
         bc:1a:91:2f:a4:5c:47:27:11:76:7f:cc:f8:46:c1:bc:7b:08:
         c0:df:5c:91:4a:2f:2c:0b:60:ea:8d:7d:9a:ea:68:09:81:30:
         a1:51:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org