Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/0_Q3fCsD9gxaIyp7482pLAaKnjY.roa
File:                     0_Q3fCsD9gxaIyp7482pLAaKnjY.roa (raw, json)
Hash identifier:          yq8MKSUp0JK3RpcE1L+ml0iWih7QqA4lplC2j80BOmw=
Subject key identifier:   D3:F4:37:7C:2B:03:F6:0C:5A:23:2A:7B:E3:CD:A9:2C:06:8A:9E:36
Certificate issuer:       /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial:       0186074692E893089BCA7C07DD82AA9B832C
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/0_Q3fCsD9gxaIyp7482pLAaKnjY.roa
Signing time:             Tue 31 Jan 2023 10:01:51 +0000
ROA not before:           Tue 31 Jan 2023 10:01:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a09:9f44::/30 maxlen: 30
                          2a12:7340::/30 maxlen: 30
                          2a12:a2c0::/30 maxlen: 30
                          2a11:ed00::/30 maxlen: 30
                          2a12:a1c0::/30 maxlen: 30
                          2a12:a740::/30 maxlen: 30
                          2a11:ef00::/30 maxlen: 30
                          2a10:1c80::/30 maxlen: 30
                          2a12:7440::/30 maxlen: 30
                          2a11:f900::/30 maxlen: 30
                          2a11:fb00::/30 maxlen: 30
                          2a12:9f40::/30 maxlen: 30
                          2a12:7540::/30 maxlen: 30
                          2a12:a140::/30 maxlen: 30
                          2a12:a6c0::/30 maxlen: 30
                          2a11:f100::/30 maxlen: 30
                          2a12:73c0::/30 maxlen: 30
                          2a09:9f40::/30 maxlen: 30
                          2a11:f300::/30 maxlen: 30
                          2a12:72c0::/30 maxlen: 30
                          2a10:2500::/30 maxlen: 30
                          2a12:a240::/30 maxlen: 30
                          2a12:9ec0::/30 maxlen: 30
                          2a12:74c0::/30 maxlen: 30
                          2a12:a540::/30 maxlen: 30
                          2a11:f500::/30 maxlen: 30
                          2a12:a640::/30 maxlen: 30
                          2a12:7240::/30 maxlen: 30
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:07:46:92:e8:93:08:9b:ca:7c:07:dd:82:aa:9b:83:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
        Validity
            Not Before: Jan 31 10:01:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d3f4377c2b03f60c5a232a7be3cda92c068a9e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:e3:b2:92:8d:b1:3a:16:91:0c:d8:e8:41:
                    f8:d2:1b:b0:80:27:85:8c:1a:3a:67:3d:19:43:fa:
                    7a:d2:61:f2:5a:0d:3f:93:49:b9:82:08:3b:92:94:
                    bc:12:77:ff:03:c6:dd:a3:20:33:53:e3:24:23:1e:
                    d8:cc:f0:26:f9:a2:a5:56:c7:2d:0f:ee:eb:55:1a:
                    48:2a:b6:0a:6b:0c:e9:95:f6:84:21:c5:b3:bd:1b:
                    76:fc:0c:b4:cc:1d:be:ac:56:28:1c:36:b5:6c:49:
                    e4:a4:a9:13:c3:f0:fd:2d:78:d4:fd:07:5e:e6:c7:
                    e3:56:3b:3d:c8:9a:fb:d7:0c:82:d9:41:29:72:87:
                    3c:38:62:99:f6:c6:03:71:ac:c8:ae:d5:0f:d9:6f:
                    73:7e:5e:46:47:c8:5e:68:0f:01:21:1c:d3:cc:ff:
                    01:88:17:74:eb:bf:7c:00:7c:25:72:78:ce:86:93:
                    fc:f6:e6:a1:48:56:55:1c:5d:06:28:f3:8f:a6:dc:
                    66:1e:87:54:18:44:2c:31:12:cd:cb:0a:3d:d8:61:
                    87:1e:1e:a8:75:00:30:6f:f6:45:4a:17:79:be:8d:
                    ca:60:09:e5:92:af:89:d6:ce:ae:c5:dd:d7:cd:d2:
                    28:ba:67:1e:82:5f:9c:53:1e:44:fc:1e:bd:17:64:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F4:37:7C:2B:03:F6:0C:5A:23:2A:7B:E3:CD:A9:2C:06:8A:9E:36
            X509v3 Authority Key Identifier:
                keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/0_Q3fCsD9gxaIyp7482pLAaKnjY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:9f40::/29
                  2a10:1c80::/30
                  2a10:2500::/30
                  2a11:ed00::/30
                  2a11:ef00::/30
                  2a11:f100::/30
                  2a11:f300::/30
                  2a11:f500::/30
                  2a11:f900::/30
                  2a11:fb00::/30
                  2a12:7240::/30
                  2a12:72c0::/30
                  2a12:7340::/30
                  2a12:73c0::/30
                  2a12:7440::/30
                  2a12:74c0::/30
                  2a12:7540::/30
                  2a12:9ec0::/30
                  2a12:9f40::/30
                  2a12:a140::/30
                  2a12:a1c0::/30
                  2a12:a240::/30
                  2a12:a2c0::/30
                  2a12:a540::/30
                  2a12:a640::/30
                  2a12:a6c0::/30
                  2a12:a740::/30

    Signature Algorithm: sha256WithRSAEncryption
         46:9b:0e:6f:e5:cb:85:29:15:23:b6:94:f1:e1:0c:df:8d:6b:
         24:92:93:98:ef:70:de:1a:4e:e5:19:47:7c:fe:36:3f:d5:b7:
         99:09:09:bd:c5:f8:9c:4c:cf:57:b4:ce:c1:e8:d3:50:1d:f4:
         c9:46:be:df:fd:c8:a4:33:0d:76:f3:2a:c0:3a:87:3e:69:19:
         46:99:a3:61:a8:bb:d2:58:61:b2:33:31:f6:f0:7f:78:23:a2:
         e4:80:45:14:77:70:0f:33:6e:c3:16:17:50:d6:80:d2:ea:7b:
         3f:26:06:2d:df:fd:8c:ac:d8:ec:e5:ec:1b:9a:fc:56:5b:82:
         5b:e6:37:93:27:8d:e3:e1:e9:79:1b:09:6f:f6:30:80:9a:9d:
         91:04:5b:ad:62:8b:95:cf:89:5e:95:12:e9:e8:55:d6:dd:c0:
         a7:36:4d:0c:4c:8d:11:94:01:43:32:2d:e9:b9:e9:99:eb:49:
         10:85:99:4c:88:3f:59:30:2d:40:5b:a9:eb:ea:15:90:e1:0a:
         82:39:a4:4d:f9:7a:27:0a:e1:cf:9e:da:bb:5b:54:22:ed:5a:
         b1:36:48:b6:84:fc:2d:f9:c3:fc:be:96:c1:1e:7b:05:a1:d2:
         c1:e8:e0:d9:7b:1d:57:2d:70:c9:54:a5:df:f9:81:c4:64:fc:
         c5:79:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----