Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/TB--xmYp_N8Ab7wd7FH6JIPQVe4.roa
File:                     TB--xmYp_N8Ab7wd7FH6JIPQVe4.roa (raw, json)
Hash identifier:          KCdiAY7NtiDi99RPt3bjn2NyucC1XCwHLdHwik0+3mI=
Subject key identifier:   4C:1F:BE:C6:66:29:FC:DF:00:6F:BC:1D:EC:51:FA:24:83:D0:55:EE
Certificate issuer:       /CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
Certificate serial:       0188CAA4960E9C97F23F127FAFBC4DB28F2C
Authority key identifier: 99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/TB--xmYp_N8Ab7wd7FH6JIPQVe4.roa
Signing time:             Sat 17 Jun 2023 18:36:03 +0000
ROA not before:           Sat 17 Jun 2023 18:36:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203448
IP address blocks:        185.134.172.0/22 maxlen: 24
                          2a0d:40c0::/33 maxlen: 33
                          2a0d:40c0:8000::/33 maxlen: 33
                          2a0d:40c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ca:a4:96:0e:9c:97:f2:3f:12:7f:af:bc:4d:b2:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992be8d0a80d0665d8c6af41834665c88d6dfe76
        Validity
            Not Before: Jun 17 18:36:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c1fbec66629fcdf006fbc1dec51fa2483d055ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:65:33:00:41:0a:09:5f:a0:4f:b6:f3:7b:
                    64:e2:9a:0e:e8:75:d4:d8:d6:94:49:55:b2:b0:ac:
                    1a:ae:be:84:23:f5:eb:da:64:35:c2:82:36:94:e7:
                    4f:dd:91:2a:2c:7c:f4:f7:6f:c5:bc:c0:a7:5c:82:
                    d5:c4:67:1a:06:0f:23:13:86:e4:4b:b0:b5:b8:de:
                    55:84:8c:93:ba:af:f9:e6:3d:64:eb:b3:d1:99:bc:
                    a5:3b:75:db:16:38:59:11:13:09:86:df:05:ee:2d:
                    58:a2:31:2b:05:c5:d5:8c:46:c9:60:81:36:be:c0:
                    b7:2f:02:f1:71:b8:f3:2b:55:78:22:d3:23:8e:5e:
                    84:11:8b:7c:fe:c8:19:c5:0e:35:ee:3c:08:a8:55:
                    10:31:c6:8b:fa:73:dd:9e:9f:12:a2:f6:0f:00:9c:
                    56:32:b4:9c:37:d6:86:70:b2:47:55:2a:03:8e:e6:
                    78:78:09:d4:d0:eb:56:5b:d2:c1:6c:8a:20:ca:ab:
                    9e:20:70:47:85:63:30:e2:22:95:7a:64:2b:1d:58:
                    63:dc:d7:b2:7d:8c:93:50:0e:d6:05:97:46:b8:3d:
                    8f:96:ec:0c:9e:71:57:6a:46:55:27:5a:aa:48:5a:
                    cc:88:9e:fa:48:10:fa:b4:c1:18:e1:40:86:60:e5:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:BE:C6:66:29:FC:DF:00:6F:BC:1D:EC:51:FA:24:83:D0:55:EE
            X509v3 Authority Key Identifier:
                keyid:99:2B:E8:D0:A8:0D:06:65:D8:C6:AF:41:83:46:65:C8:8D:6D:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/TB--xmYp_N8Ab7wd7FH6JIPQVe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3495b4-7b60-4a83-8c68-93c444668034/1/mSvo0KgNBmXYxq9Bg0ZlyI1t_nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.172.0/22
                IPv6:
                  2a0d:40c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:2e:91:05:9d:0c:34:c1:ab:e3:bb:54:07:20:94:00:d7:
         08:ec:a7:02:7b:62:bb:5f:ce:d0:c9:63:bd:7b:3c:d4:34:bf:
         c1:5e:a6:e9:88:cc:ed:b5:1e:77:06:a7:e4:68:95:81:17:43:
         7e:74:7c:e4:02:f8:70:37:00:0a:30:88:77:31:7d:7f:73:1c:
         d6:25:86:5b:47:e2:0f:37:78:69:9f:50:7e:f4:b4:f5:4c:a4:
         c2:95:80:28:92:da:8d:98:eb:c7:43:8a:8a:79:e7:fa:7c:c5:
         37:ba:af:c4:aa:28:1c:f3:6b:11:9e:a2:e2:4e:2d:a9:53:cc:
         74:e6:5f:52:b4:1e:6e:63:c1:17:b1:d3:74:f2:4c:2c:d5:48:
         b3:08:57:67:95:63:5b:fa:7e:89:dc:60:b8:ac:95:8a:04:d7:
         cb:a8:93:a7:fd:92:67:82:5a:a6:17:77:0d:52:f7:3b:a6:20:
         f5:14:9f:1a:7e:4c:71:26:b9:db:88:a8:15:97:37:c8:48:20:
         24:7f:06:b3:f0:72:50:89:ad:b2:42:a4:b2:bc:44:c5:45:4b:
         5e:11:7b:cf:fb:05:15:9c:40:e8:9a:5f:33:a7:f2:23:5a:03:
         33:d6:20:4b:ee:ca:50:83:6d:b8:97:c0:c8:4d:c4:5d:33:0c:
         46:ed:d3:14
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYjKpJYOnJfyPxJ/r7xNso8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmJlOGQwYTgwZDA2NjVkOGM2YWY0MTgzNDY2NWM4OGQ2
ZGZlNzYwHhcNMjMwNjE3MTgzNjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzFmYmVjNjY2MjlmY2RmMDA2ZmJjMWRlYzUxZmEyNDgzZDA1NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolBlMwBBCglfoE+283tk4poO6HXU
2NaUSVWysKwarr6EI/Xr2mQ1woI2lOdP3ZEqLHz092/FvMCnXILVxGcaBg8jE4bk
S7C1uN5VhIyTuq/55j1k67PRmbylO3XbFjhZERMJht8F7i1YojErBcXVjEbJYIE2
vsC3LwLxcbjzK1V4ItMjjl6EEYt8/sgZxQ417jwIqFUQMcaL+nPdnp8SovYPAJxW
MrScN9aGcLJHVSoDjuZ4eAnU0OtWW9LBbIogyqueIHBHhWMw4iKVemQrHVhj3Ney
fYyTUA7WBZdGuD2PluwMnnFXakZVJ1qqSFrMiJ76SBD6tMEY4UCGYOVmqQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEwfvsZmKfzfAG+8HexR+iSD0FXuMB8GA1UdIwQY
MBaAFJkr6NCoDQZl2MavQYNGZciNbf52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN2bzBLZ05CbVhZeHE5QmcwWmx5STF0X25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNDk1YjQtN2I2MC00YTgzLThjNjgt
OTNjNDQ0NjY4MDM0LzEvVEItLXhtWXBfTjhBYjd3ZDdGSDZKSVBRVmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zNDk1YjQtN2I2MC00YTgzLThjNjgtOTNjNDQ0NjY4MDM0
LzEvbVN2bzBLZ05CbVhZeHE5QmcwWmx5STF0X25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYasMA0E
AgACMAcDBQAqDUDAMA0GCSqGSIb3DQEBCwUAA4IBAQAWfS6RBZ0MNMGr47tUByCU
ANcI7KcCe2K7X87QyWO9ezzUNL/BXqbpiMzttR53BqfkaJWBF0N+dHzkAvhwNwAK
MIh3MX1/cxzWJYZbR+IPN3hpn1B+9LT1TKTClYAoktqNmOvHQ4qKeef6fMU3uq/E
qigc82sRnqLiTi2pU8x05l9StB5uY8EXsdN08kws1UizCFdnlWNb+n6J3GC4rJWK
BNfLqJOn/ZJnglqmF3cNUvc7piD1FJ8afkxxJrnbiKgVlzfISCAkfwaz8HJQia2y
QqSyvETFRUteEXvP+wUVnEDoml8zp/IjWgMz1iBL7spQg224l8DITcRdMwxG7dMU
-----END CERTIFICATE-----