Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/qmvuSaxqNmgNWqDSN9EzPx7cexM.roa
File:                     qmvuSaxqNmgNWqDSN9EzPx7cexM.roa (raw, json)
Hash identifier:          3uqVMQQa3sr9un29MeoRbjF3TEBNQJawyX6QYYlzuAI=
Subject key identifier:   AA:6B:EE:49:AC:6A:36:68:0D:5A:A0:D2:37:D1:33:3F:1E:DC:7B:13
Certificate issuer:       /CN=fd60dbd9a63e1d3b8ecb5c0b3fcb71a2499d86bd
Certificate serial:       018570E76FB6FBEE169129F5DA101F05AAB9
Authority key identifier: FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WDb2aY-HTuOy1wLP8txokmdhr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/qmvuSaxqNmgNWqDSN9EzPx7cexM.roa
Signing time:             Mon 02 Jan 2023 05:14:53 +0000
ROA not before:           Mon 02 Jan 2023 05:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209326
IP address blocks:        130.193.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:6f:b6:fb:ee:16:91:29:f5:da:10:1f:05:aa:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd60dbd9a63e1d3b8ecb5c0b3fcb71a2499d86bd
        Validity
            Not Before: Jan  2 05:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa6bee49ac6a36680d5aa0d237d1333f1edc7b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:73:67:15:a6:8b:f5:1f:85:4a:11:18:ea:
                    60:7b:f9:e5:93:df:33:b6:fb:b9:b2:e6:27:9e:2b:
                    9c:eb:a8:4a:a3:d8:c5:0d:f3:11:51:6d:ce:5d:b1:
                    20:af:39:07:79:c3:93:02:24:c6:e0:04:8d:d3:57:
                    39:3b:c2:af:c4:87:61:15:11:c6:d9:db:d3:19:5a:
                    77:8a:e2:69:15:c4:62:98:09:02:f6:05:bc:54:86:
                    49:0d:e6:ca:71:f0:db:3d:c1:fb:0f:5f:a5:e3:10:
                    6c:f7:cb:46:d6:4d:a5:81:d1:4c:27:6c:c1:21:84:
                    b5:5b:98:20:d1:e7:16:07:f1:e2:d6:1a:c0:8a:20:
                    fe:33:9e:a7:4c:a9:ec:68:9e:79:a3:97:56:80:0a:
                    0b:03:99:f1:77:63:fb:f3:a5:03:88:e0:32:3e:55:
                    7d:be:70:c9:0c:a0:16:7b:aa:49:d2:0f:9e:52:4c:
                    1e:ca:51:02:84:00:46:c4:a3:fb:40:16:9a:9e:62:
                    5e:eb:08:63:7b:0b:f1:13:d4:4c:15:f1:b2:b8:2a:
                    f6:f6:05:d7:dd:4e:af:51:f2:ce:99:4f:ad:db:04:
                    66:07:d9:da:5e:96:7b:89:32:73:ae:88:41:28:49:
                    a5:b9:68:0f:bc:78:b5:35:95:9e:f6:ee:40:4e:5c:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:EE:49:AC:6A:36:68:0D:5A:A0:D2:37:D1:33:3F:1E:DC:7B:13
            X509v3 Authority Key Identifier:
                keyid:FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WDb2aY-HTuOy1wLP8txokmdhr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/qmvuSaxqNmgNWqDSN9EzPx7cexM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/_WDb2aY-HTuOy1wLP8txokmdhr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:48:26:5a:fa:2a:91:52:e2:fa:7d:78:ca:a1:8b:71:7f:7b:
         01:e8:bf:6b:49:35:2f:a8:0c:d8:5f:77:0f:f1:ba:ee:9a:a7:
         98:4f:36:09:b9:5b:53:d1:de:c3:81:e7:72:c8:2b:03:59:68:
         3a:4c:20:5f:2a:84:fd:fc:3a:ea:f3:ee:44:3b:21:01:86:49:
         1d:b2:87:20:78:88:77:f2:71:6c:de:58:e1:38:c1:76:99:f9:
         88:9a:17:70:bb:6d:97:90:9d:4d:fc:18:b8:18:23:c1:5c:ec:
         c5:25:88:bf:9e:f5:71:f0:84:f4:3c:e5:4f:ec:08:cf:43:a5:
         92:a3:e1:1e:23:29:be:4f:d8:c7:b5:53:1d:67:b7:b7:5d:e5:
         76:a9:89:18:87:de:9f:db:a8:49:e2:b9:4a:a6:4a:07:8c:f6:
         f5:36:6e:6f:85:ef:d5:c0:4c:23:a8:c4:db:44:d2:5b:ef:56:
         1e:19:df:8b:30:cb:5b:58:29:a9:1e:c3:29:2f:cf:17:ea:38:
         e2:f0:78:4c:d4:af:48:97:6e:06:03:e6:f6:75:96:84:ed:5a:
         25:ce:26:af:e0:ec:33:cf:ed:0a:3e:39:c1:e1:60:69:21:12:
         6e:31:b3:39:fa:1f:d5:6c:d0:f1:99:a8:80:5f:07:07:a7:af:
         ad:09:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:35 2024 by rpki-client on console-fra.rpki-client.org