Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/X7QPrILeBJCVwlYrLguM5j1-BLg.roa
File:                     X7QPrILeBJCVwlYrLguM5j1-BLg.roa (raw, json)
Hash identifier:          OSV6zCn+3jyJAkw0iJmDZ2rHTkUpuANjn2kH90IiZAQ=
Subject key identifier:   5F:B4:0F:AC:82:DE:04:90:95:C2:56:2B:2E:0B:8C:E6:3D:7E:04:B8
Certificate issuer:       /CN=d84b513714a3858c1e1d5bd31aad08ae4911454c
Certificate serial:       18EC
Authority key identifier: D8:4B:51:37:14:A3:85:8C:1E:1D:5B:D3:1A:AD:08:AE:49:11:45:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2EtRNxSjhYweHVvTGq0IrkkRRUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/X7QPrILeBJCVwlYrLguM5j1-BLg.roa
Signing time:             Thu 03 Feb 2022 16:58:17 +0000
ROA not before:           Thu 03 Feb 2022 16:58:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209945
IP address blocks:        195.149.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6380 (0x18ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84b513714a3858c1e1d5bd31aad08ae4911454c
        Validity
            Not Before: Feb  3 16:58:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fb40fac82de049095c2562b2e0b8ce63d7e04b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:21:21:ac:0d:70:4e:df:0a:3c:fc:81:6e:e8:
                    a9:5d:88:8d:cf:25:79:4b:d3:ba:40:a8:90:74:cb:
                    e9:ce:71:84:81:d4:06:bc:7c:b0:9c:0d:de:cc:a7:
                    00:df:4b:be:a8:6f:f1:4f:51:45:34:8e:8e:a4:21:
                    67:00:7e:95:f5:b8:5c:de:65:00:e3:9f:38:6a:7c:
                    f7:dc:83:1b:87:ec:1e:db:5b:7e:de:81:fc:5e:4d:
                    06:da:60:9f:90:92:e1:42:c0:90:37:4b:bf:57:bb:
                    bd:4b:2d:7e:39:28:f0:73:c0:b5:92:de:c4:1e:cb:
                    f8:c0:66:f5:3c:06:4d:40:26:f8:04:9d:fd:f1:31:
                    0a:8c:a0:d1:bb:7e:d6:0d:7a:54:4e:d2:c2:db:1d:
                    8c:e5:05:60:4c:83:36:c4:26:9e:d3:b0:e0:3f:af:
                    22:15:99:17:c1:48:13:28:d4:73:98:f6:15:c9:18:
                    16:17:df:bc:1f:5d:0a:a1:fe:5c:81:09:2d:92:41:
                    f2:e3:49:8e:55:62:29:f7:2d:8b:a2:cf:d6:cb:30:
                    f2:f9:f9:b5:4b:f1:88:38:58:c9:2e:b3:f2:89:51:
                    f4:a6:c9:86:9b:0c:76:6c:a2:7f:9e:a2:35:cb:25:
                    cb:59:28:ff:96:30:0f:42:ab:52:b8:5d:53:82:66:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:0F:AC:82:DE:04:90:95:C2:56:2B:2E:0B:8C:E6:3D:7E:04:B8
            X509v3 Authority Key Identifier:
                keyid:D8:4B:51:37:14:A3:85:8C:1E:1D:5B:D3:1A:AD:08:AE:49:11:45:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EtRNxSjhYweHVvTGq0IrkkRRUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/X7QPrILeBJCVwlYrLguM5j1-BLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62d877-4ba8-4d15-8bfa-086dc6e943e0/1/2EtRNxSjhYweHVvTGq0IrkkRRUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:df:29:df:b0:08:2a:85:f6:9e:1a:05:6d:c1:36:5e:64:0a:
         45:a6:6a:4f:ac:e5:e1:8b:2a:e9:a8:bd:c9:4c:bf:d4:29:cf:
         6d:5b:64:6c:f4:4f:15:7e:85:78:3a:8c:2b:29:9d:33:1c:37:
         f7:85:1f:56:84:32:43:46:b3:6d:bf:93:b0:0d:2a:16:a1:a9:
         62:a9:b7:79:af:e3:f8:cd:ef:25:60:ca:fb:cf:33:a7:42:3a:
         4d:3b:66:c1:64:0b:3f:44:61:d2:f5:22:9c:08:de:b5:ff:d9:
         fa:9f:08:87:5f:a0:40:dd:7b:26:3a:82:9e:85:5c:6b:8e:e3:
         f2:7d:ea:c9:2e:a5:c2:46:c9:45:c0:32:38:81:a3:0a:7d:22:
         a0:d5:a7:53:32:c3:4d:dd:e5:2f:f9:e8:f3:97:ba:bb:cd:e5:
         7f:86:c5:d3:6a:b2:63:cf:92:f7:52:92:43:06:91:5c:31:f3:
         ef:a9:b3:33:a6:bd:47:22:c4:c1:56:52:d7:ef:27:75:80:73:
         56:99:e6:31:51:91:a3:a7:a8:51:19:ed:2c:3a:4b:de:ac:f7:
         9f:c2:36:9a:6c:21:b3:c0:77:1c:20:35:58:b9:e4:bc:fb:8b:
         6a:30:22:61:24:17:86:c9:93:d9:c1:a0:23:3a:fb:ab:41:40:
         e3:98:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:46 2023 by rpki-client on console-fra.rpki-client.org