Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/WT4Mj0ANkPKTFtPNe3WORP9Rl2U.roa
File:                     WT4Mj0ANkPKTFtPNe3WORP9Rl2U.roa (raw, json)
Hash identifier:          SGGza8fu5+68bits6owQ74Gb41NhpDScbq4ZEfnY+LE=
Subject key identifier:   59:3E:0C:8F:40:0D:90:F2:93:16:D3:CD:7B:75:8E:44:FF:51:97:65
Certificate issuer:       /CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Certificate serial:       0133C6E2
Authority key identifier: 3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/WT4Mj0ANkPKTFtPNe3WORP9Rl2U.roa
Signing time:             Mon 14 Mar 2022 23:42:23 +0000
ROA not before:           Mon 14 Mar 2022 23:42:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        212.18.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20170466 (0x133c6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea3f5f665bb54bd5efce90a25656109863f8786
        Validity
            Not Before: Mar 14 23:42:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=593e0c8f400d90f29316d3cd7b758e44ff519765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:3f:e6:e1:75:a4:6b:ef:00:af:7a:58:98:
                    7a:55:2e:d5:6a:cc:5e:6d:2a:9d:4d:72:45:dc:4b:
                    ef:d7:3e:5e:b4:a5:7a:db:3c:77:fe:03:45:74:40:
                    f9:e2:14:22:46:bc:26:a7:57:a5:3c:11:18:ea:71:
                    aa:19:79:63:4b:c4:51:b6:5d:9d:27:28:99:92:f4:
                    8b:8d:f7:dc:70:64:5b:fb:df:b0:29:b7:64:5e:54:
                    5d:9d:80:3e:b8:a4:06:5d:d8:ef:de:c3:35:14:5a:
                    7e:b3:63:b2:e4:cf:8c:db:fc:20:f4:65:48:2f:c1:
                    39:7a:1b:eb:8c:3b:ec:66:3c:6d:be:dc:fd:37:24:
                    5e:ab:a0:74:49:d6:a7:65:c1:9e:d3:d8:cb:9f:1e:
                    75:58:30:42:5a:34:40:23:f2:c9:6b:71:94:26:85:
                    55:5d:f8:f1:d1:fa:ab:cd:01:58:d4:7f:c5:5e:38:
                    7d:d8:c9:a9:6c:77:e0:51:7e:0f:95:4c:13:e9:95:
                    60:04:3b:e8:7d:09:77:86:83:ea:16:11:92:1f:96:
                    e5:2f:99:0e:85:6c:49:bf:69:79:d1:c9:5b:45:2b:
                    e6:ca:22:18:e1:d8:ca:97:62:bf:68:fb:e3:ee:1a:
                    7d:7f:4f:b7:34:07:4b:4d:d0:9a:cf:d3:5f:1f:8f:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3E:0C:8F:40:0D:90:F2:93:16:D3:CD:7B:75:8E:44:FF:51:97:65
            X509v3 Authority Key Identifier:
                keyid:3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/WT4Mj0ANkPKTFtPNe3WORP9Rl2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:04:3b:63:33:31:5d:a6:a0:27:e0:fd:17:30:03:1f:14:d2:
         98:cc:35:fe:be:a5:4c:eb:8e:db:c9:57:d2:46:5f:c5:a1:b0:
         a1:8e:ae:65:6a:06:45:8c:de:cd:2a:1d:1c:18:b9:a9:5b:12:
         7a:ee:23:a3:46:d3:a4:22:d3:16:ad:23:bb:98:4b:9b:6e:17:
         2a:aa:7f:ff:54:b7:7f:50:25:b0:7a:bb:fb:80:f8:fb:4a:93:
         24:5b:a9:4a:5c:ea:53:eb:c0:61:68:81:6e:2c:0f:6c:6e:b6:
         aa:0e:53:9f:46:d2:0b:de:be:fa:50:73:de:5e:c8:42:ac:e1:
         90:4d:f5:83:7e:92:98:7a:84:0c:d8:32:1d:bf:78:53:1d:d0:
         4b:31:41:f8:2a:30:58:cc:fb:77:a5:4b:77:4b:fc:eb:c5:6c:
         a9:ef:5c:10:1f:4c:02:a5:cb:33:4b:99:44:4e:b0:c7:d6:65:
         0c:78:e0:ec:7b:14:b2:34:45:9f:f0:52:f9:05:8b:81:3c:77:
         5d:42:54:08:19:f6:05:02:ce:ed:f7:3a:2e:e3:de:ed:ad:98:
         3b:6c:92:44:3b:c4:25:13:05:28:e2:58:a6:19:41:23:a9:8d:
         4b:ea:da:d6:77:81:81:e6:53:2c:6b:30:ce:03:0d:c7:50:af:
         3f:07:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:54 2023 by rpki-client on console-fra.rpki-client.org