Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/0SwdcEVqtTx2MSJvzxY-CYlT8Ec.roa
File:                     0SwdcEVqtTx2MSJvzxY-CYlT8Ec.roa (raw, json)
Hash identifier:          BPAETmgERWLfQmupM4utuxbj7JVeRJeg8RATTvGg1iM=
Subject key identifier:   D1:2C:1D:70:45:6A:B5:3C:76:31:22:6F:CF:16:3E:09:89:53:F0:47
Certificate issuer:       /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial:       01857082B9284C3DCD383FF0705E65D857FC
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/0SwdcEVqtTx2MSJvzxY-CYlT8Ec.roa
Signing time:             Mon 02 Jan 2023 03:24:53 +0000
ROA not before:           Mon 02 Jan 2023 03:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209321
IP address blocks:        92.249.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:b9:28:4c:3d:cd:38:3f:f0:70:5e:65:d8:57:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
        Validity
            Not Before: Jan  2 03:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d12c1d70456ab53c7631226fcf163e098953f047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:6d:32:d3:c3:42:7b:ea:2f:3b:8e:69:52:
                    48:ff:23:66:49:c5:6e:76:40:a4:8e:af:a3:0b:73:
                    90:88:d3:44:aa:b3:2a:2e:63:49:f7:de:8d:cc:38:
                    f8:b6:e9:8b:1a:60:69:b2:1e:55:7d:ae:ac:a0:11:
                    72:b3:6f:9d:1a:6f:99:6a:c3:1a:4e:d1:f2:dc:d1:
                    88:06:e0:6d:3c:1c:5c:9a:f0:b4:e1:a1:dd:f1:10:
                    3a:f2:18:90:80:82:85:7a:f5:7a:d9:23:88:3b:bb:
                    5c:0e:27:b6:3a:f4:7c:74:53:fc:4c:2b:de:9a:e0:
                    bd:fb:4f:70:80:a4:22:fd:bc:96:f5:18:fd:65:2f:
                    3c:c0:6b:ae:7d:71:03:70:25:03:85:dd:e3:3a:37:
                    e5:37:36:5c:2c:ed:7a:8e:3f:bb:a0:a6:21:f7:a1:
                    99:8f:0d:38:68:5f:89:b5:de:7f:d3:79:33:28:8c:
                    c6:b7:20:f9:81:e1:a3:3b:d7:a8:f9:7e:21:93:63:
                    95:9d:c1:3c:89:76:ad:70:76:fe:11:9a:1d:55:4c:
                    0c:3d:19:d3:7c:2a:4c:93:54:ba:e3:89:d1:cb:27:
                    a9:59:ae:8c:be:19:21:91:95:a5:6c:77:1c:45:17:
                    aa:40:83:15:99:15:33:4b:a0:60:55:ae:8c:78:de:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:1D:70:45:6A:B5:3C:76:31:22:6F:CF:16:3E:09:89:53:F0:47
            X509v3 Authority Key Identifier:
                keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/0SwdcEVqtTx2MSJvzxY-CYlT8Ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:20:11:a7:25:be:9a:40:1f:43:ec:8f:64:45:6c:80:19:
         57:82:a2:2c:f1:a0:0f:36:8e:81:bc:c2:c9:68:d9:6b:fc:41:
         1b:f4:6d:eb:35:57:cc:f4:6e:ea:a4:80:23:03:fd:23:5b:26:
         55:24:83:51:b2:60:92:ea:2d:61:dd:a4:7e:a6:38:2a:3c:43:
         1a:a1:7a:84:c7:51:b0:ad:5c:2d:b0:e9:de:f8:ad:21:4e:7b:
         b5:ef:4b:a5:66:ef:65:24:a9:5b:5d:dc:0f:46:d7:68:23:65:
         80:a8:30:12:12:62:14:0a:49:51:b2:97:4e:4b:15:ab:d3:b7:
         4c:8f:26:b6:1f:49:bc:11:c7:9e:02:19:09:d0:5d:43:82:fc:
         f7:ee:1d:0f:12:e4:7a:9b:bc:d0:9e:dc:c6:b5:d3:62:bc:9a:
         33:f4:85:c0:c4:20:13:d0:04:bf:9a:f4:ca:89:d9:1a:8f:ca:
         c8:b4:76:62:0a:fc:fb:12:8f:0a:f4:b2:e9:5a:51:e8:eb:c4:
         3f:4e:9f:e1:b1:56:4a:21:60:48:be:0d:f1:8c:b3:28:d8:92:
         af:32:01:c3:58:5a:1a:c8:4d:3e:3b:7e:ee:26:dc:16:ec:94:
         34:93:26:bd:13:a8:b6:f2:61:32:07:e7:8e:92:21:91:d8:8c:
         0b:fc:91:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgrkoTD3NOD/wcF5l2Ff8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTc4NGYzNzA2NDAzODNlOTdlYzkyOTYzYmNhZDMxODFi
OTk3NzQwHhcNMjMwMTAyMDMyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTJjMWQ3MDQ1NmFiNTNjNzYzMTIyNmZjZjE2M2UwOTg5NTNmMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M9tMtPDQnvqLzuOaVJI/yNmScVu
dkCkjq+jC3OQiNNEqrMqLmNJ996NzDj4tumLGmBpsh5Vfa6soBFys2+dGm+ZasMa
TtHy3NGIBuBtPBxcmvC04aHd8RA68hiQgIKFevV62SOIO7tcDie2OvR8dFP8TCve
muC9+09wgKQi/byW9Rj9ZS88wGuufXEDcCUDhd3jOjflNzZcLO16jj+7oKYh96GZ
jw04aF+Jtd5/03kzKIzGtyD5geGjO9eo+X4hk2OVncE8iXatcHb+EZodVUwMPRnT
fCpMk1S644nRyyepWa6MvhkhkZWlbHccRReqQIMVmRUzS6BgVa6MeN5npwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEsHXBFarU8djEib88WPgmJU/BHMB8GA1UdIwQY
MBaAFPfnhPNwZAOD6X7JKWO8rTGBuZd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMt
NjhlMGE4NGZlYjQ2LzEvMFN3ZGNFVnF0VHgyTVNKdnp4WS1DWWxUOEVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMtNjhlMGE4NGZlYjQ2
LzEvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkbMA0G
CSqGSIb3DQEBCwUAA4IBAQAmvyARpyW+mkAfQ+yPZEVsgBlXgqIs8aAPNo6BvMLJ
aNlr/EEb9G3rNVfM9G7qpIAjA/0jWyZVJINRsmCS6i1h3aR+pjgqPEMaoXqEx1Gw
rVwtsOne+K0hTnu170ulZu9lJKlbXdwPRtdoI2WAqDASEmIUCklRspdOSxWr07dM
jya2H0m8EceeAhkJ0F1Dgvz37h0PEuR6m7zQntzGtdNivJoz9IXAxCAT0AS/mvTK
idkaj8rItHZiCvz7Eo8K9LLpWlHo68Q/Tp/hsVZKIWBIvg3xjLMo2JKvMgHDWFoa
yE0+O37uJtwW7JQ0kya9E6i28mEyB+eOkiGR2IwL/JGh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org