Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/8uXLO_iL2nPbT29_UD7OvUyWHIs.roa
File:                     8uXLO_iL2nPbT29_UD7OvUyWHIs.roa (raw, json)
Hash identifier:          UzV1CnFPz+fKLwv0DJnJKhEJFa0NEzv4H/zqz9pKuiU=
Subject key identifier:   F2:E5:CB:3B:F8:8B:DA:73:DB:4F:6F:7F:50:3E:CE:BD:4C:96:1C:8B
Certificate issuer:       /CN=7d1b074281719501df300b41c299b2f130ef598b
Certificate serial:       018291A8E71B2CEFB164D599C42976B8CB9E
Authority key identifier: 7D:1B:07:42:81:71:95:01:DF:30:0B:41:C2:99:B2:F1:30:EF:59:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRsHQoFxlQHfMAtBwpmy8TDvWYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/8uXLO_iL2nPbT29_UD7OvUyWHIs.roa
Signing time:             Fri 12 Aug 2022 10:45:41 +0000
ROA not before:           Fri 12 Aug 2022 10:45:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56967
IP address blocks:        91.212.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:91:a8:e7:1b:2c:ef:b1:64:d5:99:c4:29:76:b8:cb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d1b074281719501df300b41c299b2f130ef598b
        Validity
            Not Before: Aug 12 10:45:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2e5cb3bf88bda73db4f6f7f503ecebd4c961c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:3d:9d:45:89:81:a7:30:05:99:6b:cc:da:
                    24:aa:31:ab:f5:83:f5:b0:2b:36:bc:f3:06:33:92:
                    15:9c:5e:6b:e7:0e:36:46:e2:f0:23:f9:0e:ee:d5:
                    d9:0c:b6:57:d7:e6:11:3a:fd:d9:90:f3:3c:38:d7:
                    cd:92:ba:bb:39:0f:06:97:6b:02:54:34:e2:ff:fc:
                    20:71:30:4c:1a:4a:f2:3d:1f:c8:58:79:5f:8a:73:
                    f0:41:76:b5:e1:12:7b:09:d6:ea:f6:79:18:7e:73:
                    7b:eb:ce:76:d2:25:ca:c6:0d:b9:9d:1d:a5:90:2f:
                    a9:1c:dd:f2:23:4f:45:20:52:28:f2:90:02:e8:f8:
                    2b:17:42:40:c9:cc:1c:c7:ac:c8:89:56:b8:6f:81:
                    dc:d6:28:76:7b:cb:72:2f:83:59:8d:0a:af:2f:de:
                    48:24:22:c1:e4:83:6e:af:a0:b3:ac:39:b6:62:ed:
                    8e:b8:ff:60:c8:16:14:75:e3:6f:5b:79:36:45:38:
                    bc:73:71:70:21:ac:5d:70:5f:a9:b5:64:dd:92:29:
                    28:09:3d:d7:97:b6:0a:4d:92:35:a3:d4:f3:0c:39:
                    b4:0f:88:f7:96:79:09:2d:d8:c1:a6:c1:78:1e:f3:
                    6f:44:b2:1a:44:22:d5:fe:af:f1:67:b5:21:2b:11:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E5:CB:3B:F8:8B:DA:73:DB:4F:6F:7F:50:3E:CE:BD:4C:96:1C:8B
            X509v3 Authority Key Identifier:
                keyid:7D:1B:07:42:81:71:95:01:DF:30:0B:41:C2:99:B2:F1:30:EF:59:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRsHQoFxlQHfMAtBwpmy8TDvWYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/8uXLO_iL2nPbT29_UD7OvUyWHIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4da051-a5a6-4403-b534-cbfaf21f6ad7/1/fRsHQoFxlQHfMAtBwpmy8TDvWYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:6e:99:2c:b8:27:6b:35:21:13:16:a5:af:7e:e7:1d:f0:0c:
         7d:5a:b7:b9:5d:c9:8b:17:ad:20:d8:b7:67:b9:9b:b4:76:ca:
         fb:dd:f2:22:67:c4:4c:f7:17:33:1c:6b:e9:c2:d7:57:ed:37:
         21:26:cb:13:b6:fe:e5:c9:18:b7:a0:3d:be:2c:72:90:f1:80:
         10:e2:07:7b:e6:23:bb:9f:df:b8:1a:7c:81:9d:89:f0:97:85:
         61:fe:5e:64:f9:4c:fb:81:e4:4e:7e:d5:2d:d4:a6:1e:55:38:
         e3:46:ff:50:8d:18:ed:ab:c3:69:6d:a2:cd:b7:47:97:e6:3f:
         63:3c:40:01:8f:c7:b3:db:3e:7f:48:17:c1:ef:03:7a:78:80:
         ec:df:df:dc:73:dd:00:b2:3b:a4:c8:6f:fa:f0:e5:17:90:c6:
         5b:71:4f:ec:62:62:4b:4d:b3:7e:d0:ca:10:d3:be:04:9a:0b:
         c2:fa:4d:ef:73:ea:56:14:e5:d7:ae:14:3b:b4:d5:a8:11:5a:
         bf:6c:76:47:3d:64:84:d9:3a:8e:ec:94:4c:74:b2:44:a4:c7:
         a6:a4:bb:7d:93:48:ac:3a:35:d2:31:8d:d3:4f:c0:c4:5c:0f:
         f2:fc:51:e6:01:eb:08:49:c7:6e:19:47:27:c4:a4:21:2c:87:
         32:60:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:55 2023 by rpki-client on console-fra.rpki-client.org