Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/vqer8nx2GsltZGivU241VpphIOY.roa
File:                     vqer8nx2GsltZGivU241VpphIOY.roa (raw, json)
Hash identifier:          6ozHJXPFktBiZ4M/6tiuvs+wuldYZltLca1t5ylacr8=
Subject key identifier:   BE:A7:AB:F2:7C:76:1A:C9:6D:64:68:AF:53:6E:35:56:9A:61:20:E6
Certificate issuer:       /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial:       0184AB64F4591C3BA86B41A4EAEA5AF19ADF
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/vqer8nx2GsltZGivU241VpphIOY.roa
Signing time:             Thu 24 Nov 2022 20:47:10 +0000
ROA not before:           Thu 24 Nov 2022 20:47:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        92.249.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ab:64:f4:59:1c:3b:a8:6b:41:a4:ea:ea:5a:f1:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
        Validity
            Not Before: Nov 24 20:47:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bea7abf27c761ac96d6468af536e35569a6120e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:e7:ea:65:53:c4:ab:73:e8:da:41:c2:0e:
                    88:1a:db:8f:a4:98:54:f9:ce:e6:93:c5:b3:74:ce:
                    2c:01:c1:e5:a1:08:c4:88:02:6b:44:39:a0:66:e5:
                    88:8c:3f:7d:26:85:1e:f1:0d:94:90:8b:c7:69:08:
                    7e:4c:51:2a:3e:d3:82:10:c1:2a:5d:f3:d4:55:a9:
                    3b:d0:3b:3e:8a:74:53:5f:34:a0:73:52:f6:31:86:
                    fb:e1:9f:62:52:8d:82:6d:a5:32:c5:96:9d:92:2b:
                    99:b6:92:92:79:e6:97:84:6d:29:23:d9:e8:c3:8f:
                    db:e3:0b:63:e8:a9:fa:aa:8c:4e:70:64:b3:e5:10:
                    aa:3d:98:c3:c3:92:66:a0:4a:ea:e5:55:d3:cc:0f:
                    36:4a:2c:6b:55:c4:bd:c1:0a:e4:e0:74:dd:36:ec:
                    43:e8:14:66:32:02:b8:e9:c1:81:88:dc:55:65:0b:
                    6d:c3:d0:64:b1:78:66:aa:78:47:9a:30:6f:f3:f9:
                    19:40:45:c7:75:59:0f:ec:d4:c4:41:29:7a:aa:b2:
                    ee:c4:93:49:4d:69:97:5e:fa:06:d1:2f:b5:ef:1c:
                    f1:88:8d:29:7a:39:9a:4d:44:00:6e:2f:00:5f:73:
                    eb:51:43:d3:15:6c:2b:6d:1e:38:8e:8b:24:30:22:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:AB:F2:7C:76:1A:C9:6D:64:68:AF:53:6E:35:56:9A:61:20:E6
            X509v3 Authority Key Identifier:
                keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/vqer8nx2GsltZGivU241VpphIOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0f:f3:f4:bb:0f:05:27:93:f7:11:d1:c5:5e:9c:1f:8b:2a:
         3b:45:50:6a:69:de:73:15:2c:61:00:58:f5:98:44:ec:d8:59:
         04:7a:3f:72:e7:99:9d:44:f5:66:dd:45:25:06:2a:91:fe:92:
         05:9d:1b:f6:8e:3f:51:ad:a0:83:0e:8c:08:8c:49:bc:5e:36:
         72:fc:40:04:d6:da:6b:13:86:13:09:fc:bc:43:27:c8:1a:15:
         53:49:9d:40:44:0a:f7:9f:af:44:27:9d:b6:2b:a3:74:24:92:
         6f:7e:8f:88:c1:af:ba:3f:fc:22:68:94:13:61:bf:b8:1e:d5:
         9f:c8:95:11:d0:e2:33:1f:44:5c:86:9c:64:92:ae:c5:9d:4d:
         c3:c9:e0:25:5c:72:ca:d2:f5:82:f5:87:ad:1e:1e:05:a4:a5:
         ce:b0:0a:62:a1:60:ad:aa:fd:f2:ac:fe:dc:76:a0:a1:81:07:
         67:a3:b7:df:03:22:61:5a:0a:1f:17:f2:05:b4:fe:bf:9b:23:
         83:e8:f7:41:c5:f7:82:63:54:7c:84:16:1c:85:30:49:da:cb:
         e3:b0:14:86:c3:03:25:df:3c:a1:31:cb:72:1f:56:bf:3a:4c:
         87:99:16:bb:2d:7b:a2:c1:33:1b:66:ac:48:0c:01:cc:86:f6:
         23:29:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org