Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/SVl-X-g_mBCZRviO7bcGqoV7kFQ.roa
File:                     SVl-X-g_mBCZRviO7bcGqoV7kFQ.roa (raw, json)
Hash identifier:          I+2VlCBVErmH++VY+Ax7hSrWK+Tifz8LCrgtzraqI58=
Subject key identifier:   49:59:7E:5F:E8:3F:98:10:99:46:F8:8E:ED:B7:06:AA:85:7B:90:54
Certificate issuer:       /CN=f5e83611014d5a99f8715dd05bd02234c6b46bd5
Certificate serial:       0182177F1E9D54D87B3508B923853A107FA7
Authority key identifier: F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/SVl-X-g_mBCZRviO7bcGqoV7kFQ.roa
Signing time:             Tue 19 Jul 2022 17:26:23 +0000
ROA not before:           Tue 19 Jul 2022 17:26:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        213.139.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:17:7f:1e:9d:54:d8:7b:35:08:b9:23:85:3a:10:7f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e83611014d5a99f8715dd05bd02234c6b46bd5
        Validity
            Not Before: Jul 19 17:26:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49597e5fe83f98109946f88eedb706aa857b9054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:d6:00:cc:97:19:aa:fd:30:20:20:72:a9:
                    90:bb:27:69:80:59:29:af:00:2c:b2:13:77:bc:1d:
                    29:7a:ff:1d:43:de:3b:73:db:87:ed:d2:a5:ee:77:
                    f0:53:46:96:46:ff:22:de:bf:e1:2a:5e:c9:3f:09:
                    65:76:d0:06:80:78:74:c3:ef:d5:a1:be:bd:73:5c:
                    09:2d:7f:2a:cb:07:b2:bc:16:74:be:42:5f:dc:aa:
                    c5:d4:f0:08:da:8b:15:5a:65:8e:37:b5:d2:b7:a8:
                    18:5f:9e:a5:cd:b9:1e:3f:5b:f0:c2:0b:37:f2:84:
                    2a:f9:5e:1a:46:e8:e2:1b:00:72:82:ea:e9:72:30:
                    01:aa:24:ae:f9:22:1d:67:7b:85:8d:4a:ea:50:25:
                    6c:83:d3:d8:46:88:bd:87:a8:f2:b8:d2:da:f1:f1:
                    0f:5f:1f:61:12:7e:98:08:e0:ae:34:94:dc:bc:cc:
                    3b:91:ef:07:62:f8:91:c7:40:fe:f9:20:55:61:aa:
                    74:7e:4f:3d:57:76:08:d7:eb:34:5b:2b:cc:ae:87:
                    c0:94:07:ca:e3:2f:21:84:d0:04:64:db:8c:3b:35:
                    c8:ef:4f:8a:6e:c9:3d:a8:fd:08:cc:c4:48:66:6f:
                    f9:f1:3d:5f:7c:e8:65:e7:38:c2:52:eb:72:a6:05:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:7E:5F:E8:3F:98:10:99:46:F8:8E:ED:B7:06:AA:85:7B:90:54
            X509v3 Authority Key Identifier:
                keyid:F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/SVl-X-g_mBCZRviO7bcGqoV7kFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/9eg2EQFNWpn4cV3QW9AiNMa0a9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:c2:f3:0a:c1:6c:55:35:7b:a9:e4:e9:b8:ae:a7:20:5f:ea:
         fd:e4:ed:3b:ff:1f:8d:13:7d:60:59:6e:25:1f:ad:7e:90:b9:
         61:0d:4b:ef:0b:8c:ce:eb:81:c1:dc:83:2d:87:a1:ed:33:56:
         7f:e0:73:80:ce:61:07:7a:f3:bb:b7:69:99:15:55:5e:bd:66:
         4e:a3:c4:ed:9a:d9:ef:28:a5:9c:a3:56:8a:fa:0e:2d:24:c1:
         05:f0:e9:42:29:aa:82:9d:0e:a2:e6:12:2f:4c:f7:34:b6:34:
         7b:d3:5a:3c:6d:5b:1a:23:b5:8a:c1:5b:93:7c:de:29:be:f0:
         f5:3c:b7:83:b7:1e:f5:92:28:0a:7e:c6:46:6d:c9:e9:6b:7e:
         7e:ab:4a:29:ac:8a:d5:40:34:3e:8a:e9:86:4d:31:15:b2:f4:
         1f:8e:67:40:19:98:ab:5f:53:17:8c:27:07:08:2a:21:74:cc:
         85:d1:7c:d6:d0:8a:b7:3b:a8:89:d9:af:be:b9:13:cb:6e:53:
         7c:e2:7b:42:42:f1:3b:aa:1e:83:70:6d:13:fc:16:39:c3:4f:
         89:4d:cf:07:22:22:09:b2:11:4b:a9:4e:13:8f:c2:58:40:f0:
         1f:87:07:03:3b:13:b8:f3:fc:80:56:f3:6b:38:c5:7d:32:1c:
         b8:2a:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org