Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/63lfozykfb8TCr2Fe5eiClF7OOY.roa
File:                     63lfozykfb8TCr2Fe5eiClF7OOY.roa (raw, json)
Hash identifier:          +J9fjvlb1fJBDeN33SnpcExQHND+NHh5ROZTEEWa3Ig=
Subject key identifier:   EB:79:5F:A3:3C:A4:7D:BF:13:0A:BD:85:7B:97:A2:0A:51:7B:38:E6
Certificate issuer:       /CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Certificate serial:       12881796
Authority key identifier: E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/63lfozykfb8TCr2Fe5eiClF7OOY.roa
Signing time:             Thu 16 Jun 2022 18:47:44 +0000
ROA not before:           Thu 16 Jun 2022 18:47:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213107
IP address blocks:        185.160.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310908822 (0x12881796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
        Validity
            Not Before: Jun 16 18:47:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb795fa33ca47dbf130abd857b97a20a517b38e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:40:9c:72:d8:0f:e0:18:27:f3:19:ef:f9:
                    17:36:43:48:79:b3:f7:80:af:72:8a:5d:fb:81:30:
                    03:de:c7:dd:cb:a3:d9:a1:5a:ed:da:9f:f8:42:af:
                    37:09:7d:f3:e0:d3:44:e6:21:c7:06:cd:ea:60:1d:
                    8c:bc:e4:40:e6:9e:d7:79:63:3c:f7:4f:4c:24:33:
                    c1:fa:79:37:7d:66:cf:35:5d:d5:ea:a1:d6:70:78:
                    af:64:81:03:45:b8:43:90:8f:3b:25:3f:b6:35:73:
                    42:1d:0e:e0:e8:21:53:b0:c9:fc:65:26:27:cf:e7:
                    77:8c:ff:72:64:b0:f6:47:79:58:43:d3:8d:1d:7e:
                    d6:84:ae:17:78:d6:8c:1d:1f:a5:12:6a:24:3f:4e:
                    c5:95:b1:01:97:b2:0a:e1:4d:4f:fe:2c:85:a7:50:
                    d7:1a:3f:47:45:7a:37:5d:42:73:d8:b0:49:3e:e4:
                    1f:2e:95:2a:ca:01:3f:ba:13:f2:7a:82:4d:22:1c:
                    69:ee:d3:1f:ff:c2:26:09:c1:b2:10:6f:16:65:53:
                    b1:38:3f:05:90:88:dd:30:f7:e9:e2:48:6c:fd:95:
                    01:b1:32:d6:85:cd:55:dd:08:47:8f:6d:bf:9d:21:
                    2c:d5:61:db:8a:47:49:42:86:75:cf:98:86:a9:44:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:5F:A3:3C:A4:7D:BF:13:0A:BD:85:7B:97:A2:0A:51:7B:38:E6
            X509v3 Authority Key Identifier:
                keyid:E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/63lfozykfb8TCr2Fe5eiClF7OOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:90:b0:23:fa:51:88:a0:e5:d5:76:bc:5c:e6:91:fe:df:ac:
         d9:fc:05:3c:b2:59:88:69:70:8b:e1:8f:bb:18:58:01:95:16:
         ff:9e:5a:25:0d:ab:c7:90:63:84:c5:f9:26:64:3d:56:26:df:
         ba:13:f2:1f:8c:3a:9d:95:71:4e:78:66:56:53:c8:c3:19:bc:
         c3:35:82:70:70:60:78:2e:52:65:e8:4c:8a:a0:2d:62:90:1c:
         38:1a:58:f0:ab:b8:4c:ed:4f:28:67:62:3b:29:00:fe:0e:55:
         9f:15:5c:b0:3e:32:55:67:c0:2e:90:74:e1:9d:f2:61:31:dc:
         b8:d4:06:6e:52:85:59:9c:e8:0a:7a:0a:8c:63:ba:2a:ef:5c:
         df:b1:c7:1b:88:b3:60:f3:13:35:88:e1:54:54:e8:ca:33:88:
         c8:9d:3d:83:de:47:04:40:b9:b5:b4:3e:93:4b:50:6a:71:f6:
         5f:b4:09:36:28:37:82:dc:3c:e0:93:97:df:31:99:89:0d:c3:
         52:09:6c:2c:fc:21:bc:65:a0:31:94:8f:21:63:2e:c3:b1:57:
         90:5e:09:a0:ed:97:94:f2:88:04:af:49:3e:52:c0:cd:13:ac:
         9d:6e:9e:d0:4b:20:86:a2:f0:59:b7:22:db:08:57:05:0f:69:
         a6:5a:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org