Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/uWVGvo6R53X5Pge3KTGiMWikgi4.roa
File:                     uWVGvo6R53X5Pge3KTGiMWikgi4.roa (raw, json)
Hash identifier:          KOrkC8BZi9jqnS/HjnffDFEC+h91CRCYvZeaT3kSKLE=
Subject key identifier:   B9:65:46:BE:8E:91:E7:75:F9:3E:07:B7:29:31:A2:31:68:A4:82:2E
Certificate issuer:       /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial:       018571309AD7A87D58CCBAA481F011392188
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/uWVGvo6R53X5Pge3KTGiMWikgi4.roa
Signing time:             Mon 02 Jan 2023 06:34:48 +0000
ROA not before:           Mon 02 Jan 2023 06:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        83.150.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:30:9a:d7:a8:7d:58:cc:ba:a4:81:f0:11:39:21:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
        Validity
            Not Before: Jan  2 06:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b96546be8e91e775f93e07b72931a23168a4822e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:82:9f:de:27:36:41:1f:26:e4:6e:fa:ce:
                    5c:2e:a6:1d:1f:e3:1c:d6:06:52:2f:d9:1f:0c:32:
                    37:2f:80:fd:96:2a:bd:aa:53:88:e8:64:07:06:72:
                    30:77:d7:40:1c:1a:35:6c:7c:08:8b:ac:3e:c8:08:
                    6f:1b:75:26:c2:e5:f8:66:ec:7f:0d:65:97:6b:06:
                    86:b1:66:0c:95:2c:61:3b:0f:4f:b0:10:e4:c0:07:
                    21:34:c9:6f:30:14:b1:31:4c:6d:b2:5f:06:65:7f:
                    cd:c9:a4:ed:cc:95:5f:36:0d:a8:7b:0b:f9:ff:67:
                    43:8a:12:b0:c4:b4:c6:1a:fb:8d:45:00:f8:63:90:
                    e6:a8:08:d6:64:67:3e:b9:99:d5:b0:c8:42:b5:49:
                    f7:7b:88:2d:7f:f9:02:21:86:e1:a8:4b:b0:f2:33:
                    3b:43:3c:70:6f:45:d2:15:b8:71:26:9f:df:4a:2b:
                    8a:ba:9b:da:c3:84:0a:04:88:9b:04:03:5d:8c:7a:
                    89:22:43:e8:43:21:63:40:6c:64:f0:97:ed:e9:08:
                    ce:ca:c2:f0:6e:ba:b0:1d:79:7f:29:10:56:ea:e4:
                    ef:f8:68:f2:6f:29:d9:e3:0b:c4:4d:27:db:c3:8d:
                    97:47:b1:78:a6:7b:ad:a7:74:34:2f:3d:a1:8e:74:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:46:BE:8E:91:E7:75:F9:3E:07:B7:29:31:A2:31:68:A4:82:2E
            X509v3 Authority Key Identifier:
                keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/uWVGvo6R53X5Pge3KTGiMWikgi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:59:df:8a:b4:a1:d8:f7:f1:72:82:65:f4:1c:ce:a9:fc:a4:
         39:61:01:32:05:e5:14:5d:15:21:0e:f9:3f:7f:6c:a1:2c:76:
         e1:79:75:ac:3c:35:58:ce:c1:1b:2d:4f:75:63:6e:1e:42:4f:
         7f:63:b5:b3:8b:57:77:8c:7d:f8:a8:7f:d5:5e:13:17:bb:69:
         89:de:8d:e0:79:73:23:f6:dc:22:2a:72:70:24:ef:92:39:f9:
         64:35:0c:ed:d9:d2:ea:4c:00:5b:68:6d:e7:d7:b1:ce:1e:a7:
         40:e8:90:e1:c3:7e:e5:71:c8:7f:c5:12:94:f8:5d:6f:75:2b:
         6c:12:2d:f7:66:00:95:f5:8c:20:a1:c4:0b:15:40:f8:e6:15:
         33:32:e9:61:c3:b6:29:80:b2:1a:e4:96:a6:95:2f:a3:77:8a:
         d1:cd:14:c5:b0:b4:3f:62:0b:a3:2a:04:09:35:62:92:15:f9:
         17:69:0a:4f:02:97:3c:81:7d:4b:f8:c7:52:f7:e7:58:e1:da:
         80:3c:89:a4:17:87:4f:b7:7b:b8:19:d1:bf:ad:d8:a1:a3:16:
         25:64:f2:90:b2:ef:6c:36:be:2f:5f:84:70:6c:0a:2d:38:31:
         6b:86:e6:1b:58:b4:4b:c6:7e:07:cc:42:76:37:61:13:67:09:
         29:a8:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:59 2023 by rpki-client on console-fra.rpki-client.org