Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/ect7j38uuVZOa_qtcUvIffxJE-8.roa
File:                     ect7j38uuVZOa_qtcUvIffxJE-8.roa (raw, json)
Hash identifier:          zTV2HfZ6aCfCjilO3UhLE57/y8KDvVhG1g27PvTdZKU=
Subject key identifier:   79:CB:7B:8F:7F:2E:B9:56:4E:6B:FA:AD:71:4B:C8:7D:FC:49:13:EF
Certificate issuer:       /CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Certificate serial:       01AACEED
Authority key identifier: 7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/ect7j38uuVZOa_qtcUvIffxJE-8.roa
Signing time:             Sat 01 Jan 2022 08:54:08 +0000
ROA not before:           Sat 01 Jan 2022 08:54:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        185.83.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27971309 (0x1aaceed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
        Validity
            Not Before: Jan  1 08:54:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79cb7b8f7f2eb9564e6bfaad714bc87dfc4913ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:35:ad:93:9a:a7:6f:20:6a:d6:8e:4c:7e:
                    c9:bc:0e:72:9b:db:8e:3d:96:7d:a1:5d:88:e1:9f:
                    08:c1:33:2f:3f:37:3e:bd:7a:ef:52:0e:2b:ca:a3:
                    51:3f:77:4d:8c:40:5b:9e:5e:bb:7d:8c:23:fb:fd:
                    20:81:1f:df:68:17:bf:dd:22:0f:67:f8:12:c2:d1:
                    86:55:87:d6:33:5d:0f:98:dd:1b:b6:58:39:0e:3e:
                    c3:64:4f:85:61:dd:59:fa:67:8d:e7:dd:7d:c7:ba:
                    fe:c9:f5:71:fa:46:4f:aa:b4:28:dd:31:04:df:65:
                    fc:ae:f4:a7:12:e1:71:b3:4e:f2:9d:7b:e8:6d:33:
                    49:54:4c:0b:4e:12:f0:ec:0c:13:17:36:42:a7:c9:
                    7b:18:42:6b:ed:47:40:77:c4:db:e2:77:09:57:98:
                    c8:29:0c:12:a3:b9:51:bf:ee:e3:99:61:85:34:e3:
                    65:fe:8e:94:67:b3:12:35:cd:95:15:e4:8b:30:66:
                    db:eb:a5:53:fa:7e:28:08:2d:63:c0:20:35:e3:44:
                    39:39:e2:fb:3e:07:4c:6e:61:2f:85:8c:12:b8:68:
                    95:f1:c3:ca:1d:16:b3:1e:4f:75:42:6b:db:9d:c3:
                    92:dd:8a:9c:dd:a1:f0:7e:a6:d5:58:16:d2:94:84:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:7B:8F:7F:2E:B9:56:4E:6B:FA:AD:71:4B:C8:7D:FC:49:13:EF
            X509v3 Authority Key Identifier:
                keyid:7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/ect7j38uuVZOa_qtcUvIffxJE-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:bd:2c:57:24:e7:87:70:07:17:fe:0c:bc:17:cd:74:8c:
         b5:37:02:fe:1c:bf:ef:aa:93:9c:f1:a6:6a:3d:60:b2:07:61:
         69:70:0b:cf:fe:ff:cd:d0:b5:f4:45:24:16:a7:26:cb:b5:ad:
         bb:0d:f1:86:4b:fa:9c:4a:f1:11:81:ad:04:53:1b:fc:85:63:
         c7:f0:ba:99:ce:0d:4d:1f:76:7f:8f:0a:45:7a:eb:6d:d2:0d:
         55:23:03:3a:6f:98:6e:53:4d:bd:85:64:14:21:f5:43:2e:73:
         ec:c8:e9:3f:9c:8f:24:7b:8f:41:6c:8c:16:4b:b6:84:73:32:
         05:99:44:cc:80:e3:14:49:80:0f:3a:8f:92:f1:bb:b4:1a:fa:
         24:43:02:e5:43:0b:3c:f4:9c:05:c8:81:9d:8e:63:dd:f8:5d:
         b0:f7:23:65:68:2d:e4:0a:10:cd:82:d6:56:e2:4a:16:65:62:
         8c:58:ed:46:81:e6:4c:80:7f:4b:7b:f9:39:84:ef:fc:59:af:
         59:b7:4d:fb:31:c0:43:c6:0a:8c:97:b2:c4:bc:6a:76:85:bc:
         b3:a3:4f:92:53:df:ef:42:b0:4f:fb:f8:d3:16:76:29:01:c5:
         38:4c:4e:d3:62:1c:1d:75:31:10:f9:95:32:5e:a8:08:1b:0d:
         e6:66:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:19 2023 by rpki-client on console-fra.rpki-client.org