Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/bvwO_fqngteJsUTx_ErdaVOmB1M.roa
File:                     bvwO_fqngteJsUTx_ErdaVOmB1M.roa (raw, json)
Hash identifier:          Nxnw8ssdLPuq9gOf3yeBt185ILxPHVqgdbDF5yvtv4U=
Subject key identifier:   6E:FC:0E:FD:FA:A7:82:D7:89:B1:44:F1:FC:4A:DD:69:53:A6:07:53
Certificate issuer:       /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial:       0185073EC8BB16F987408CF51EB25B04B1EA
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/bvwO_fqngteJsUTx_ErdaVOmB1M.roa
Signing time:             Mon 12 Dec 2022 16:50:33 +0000
ROA not before:           Mon 12 Dec 2022 16:50:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62456
IP address blocks:        92.249.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:07:3e:c8:bb:16:f9:87:40:8c:f5:1e:b2:5b:04:b1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
        Validity
            Not Before: Dec 12 16:50:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6efc0efdfaa782d789b144f1fc4add6953a60753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:b9:ea:9c:6a:a2:91:17:45:42:22:f8:42:
                    44:05:f3:70:74:9e:8b:4a:29:da:50:a2:52:b5:d0:
                    31:49:4d:aa:28:50:6f:4a:9a:cd:19:b6:a4:1c:3b:
                    36:d6:d3:ab:2d:a7:5c:df:b7:11:a3:41:32:84:af:
                    81:68:de:ac:5c:ec:e3:5a:33:ab:25:d9:b9:63:a8:
                    59:38:9f:88:a8:e0:1a:b7:cb:92:c4:fd:57:0c:f4:
                    6f:13:91:59:f4:37:c8:8e:39:f0:16:fa:21:e1:95:
                    fe:89:c0:81:78:b5:68:bb:6a:33:48:ae:fd:ad:5d:
                    61:fa:91:80:49:2d:6f:c8:61:e4:8b:f3:a7:8b:52:
                    4a:5d:60:3f:df:55:e6:cd:75:80:32:ba:d8:e3:03:
                    f8:50:a2:61:58:d0:08:7c:e2:34:c0:92:4c:09:7e:
                    c8:44:ca:81:c5:12:ed:8f:b3:59:ff:3a:bb:48:34:
                    3e:e1:91:de:34:c7:1d:f6:26:c6:bc:2a:79:a7:1f:
                    3d:b6:db:0f:bc:f2:bd:11:26:e0:cf:4a:7d:88:a4:
                    39:6e:c7:6c:66:e1:cd:6e:cb:4d:f6:2f:32:18:82:
                    af:37:ab:c0:86:6f:2e:a2:23:e4:49:7d:a6:1f:95:
                    6a:80:c5:73:e2:16:45:db:02:dd:e2:45:f5:41:8c:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FC:0E:FD:FA:A7:82:D7:89:B1:44:F1:FC:4A:DD:69:53:A6:07:53
            X509v3 Authority Key Identifier:
                keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/bvwO_fqngteJsUTx_ErdaVOmB1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4f:84:5e:c2:1d:03:63:3a:16:d7:8c:df:34:d0:dc:a6:72:
         cd:69:83:e7:e6:30:62:ec:fd:1a:95:48:98:11:a4:2d:e4:5b:
         65:e9:f9:39:5a:8c:73:e2:2a:75:86:6d:71:a0:28:1e:f5:b4:
         f3:e3:14:74:a2:2a:ef:69:40:0a:9b:d3:33:e8:94:aa:ea:28:
         6e:ab:7a:3c:38:92:46:af:30:99:39:40:57:c1:7c:97:ec:a1:
         b6:04:ac:b7:57:1d:96:17:5c:99:21:dc:78:75:d8:9a:30:fb:
         68:d9:c7:ed:6f:92:1c:b9:6c:e5:4a:ee:39:3e:46:e7:76:8e:
         97:e9:7c:eb:2d:85:44:e0:03:ef:bc:79:2d:ea:3a:af:92:e9:
         c5:52:29:a4:91:1f:0a:8f:bf:11:fb:d6:98:d8:9a:78:32:25:
         8b:73:83:f8:2d:4a:e5:29:82:6e:04:20:63:06:dc:33:03:ae:
         a7:26:c6:d2:05:a6:3f:56:ef:14:c1:77:ee:30:e1:8b:84:3b:
         9e:6d:c3:c5:89:88:c0:85:e9:af:d6:f5:4f:e9:17:8b:41:ef:
         95:21:94:f9:3c:0f:38:fd:2a:71:62:ac:ce:18:26:ad:d8:f8:
         57:a3:01:a8:ab:c4:30:29:77:04:cd:aa:64:95:5f:76:fe:8b:
         6a:d6:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org