Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/OJuht62cHpudsvyMOFFq2GijDsA.roa
File:                     OJuht62cHpudsvyMOFFq2GijDsA.roa (raw, json)
Hash identifier:          QuZlSDHK6npQ4d69fZztZMp7fZ9U0CarsCb2uSpbOHo=
Subject key identifier:   38:9B:A1:B7:AD:9C:1E:9B:9D:B2:FC:8C:38:51:6A:D8:68:A3:0E:C0
Certificate issuer:       /CN=c3b18ede10d5f9c99b8f68b9086d2fb93ccb9978
Certificate serial:       0185713087299FBF9756E0E03BECC2E9985D
Authority key identifier: C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/OJuht62cHpudsvyMOFFq2GijDsA.roa
Signing time:             Mon 02 Jan 2023 06:34:43 +0000
ROA not before:           Mon 02 Jan 2023 06:34:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63473
IP address blocks:        83.138.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:30:87:29:9f:bf:97:56:e0:e0:3b:ec:c2:e9:98:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b18ede10d5f9c99b8f68b9086d2fb93ccb9978
        Validity
            Not Before: Jan  2 06:34:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=389ba1b7ad9c1e9b9db2fc8c38516ad868a30ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:30:07:b7:cf:92:a8:9e:5b:ed:f8:7e:74:
                    b2:76:e6:af:f4:d5:09:6e:54:b9:0a:d9:54:95:f6:
                    55:e2:cb:3a:d0:1b:db:47:6e:6d:c4:a5:2f:ff:87:
                    f4:2d:39:84:f9:c6:d3:e0:03:0b:fa:d9:33:c0:2d:
                    ec:19:14:4d:6a:d7:16:f3:19:e5:aa:d3:b2:7e:44:
                    e2:78:19:5f:e8:ac:34:5d:d2:80:a2:a9:95:7b:0e:
                    34:58:1e:80:d6:0a:20:b6:5c:a1:1c:e4:20:22:30:
                    9f:4a:82:3d:65:36:4a:fb:8f:5f:1f:d7:eb:50:9d:
                    39:48:23:8a:38:7c:84:dd:fc:c8:dd:23:34:b7:e4:
                    ba:7b:be:9a:c6:9f:24:5a:b7:8e:2a:f4:d0:9f:8d:
                    90:c6:27:88:ec:a5:81:8e:87:10:70:9d:0c:ea:77:
                    23:c6:3a:df:91:6a:1d:b4:d5:9f:76:9f:65:17:2d:
                    b6:84:e5:1d:49:a1:79:51:0a:07:0f:2d:f5:99:9e:
                    67:dc:7a:06:06:2a:b1:61:b7:e2:27:50:c3:1e:a0:
                    b1:0e:7f:7b:1e:e7:e3:b9:84:e9:a2:b5:4e:4d:70:
                    53:a2:be:e9:54:ef:a9:cc:54:75:23:46:e5:85:59:
                    53:11:38:62:5f:6d:2f:60:21:4f:f4:a8:b7:53:d9:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:A1:B7:AD:9C:1E:9B:9D:B2:FC:8C:38:51:6A:D8:68:A3:0E:C0
            X509v3 Authority Key Identifier:
                keyid:C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/OJuht62cHpudsvyMOFFq2GijDsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:fe:c0:dc:f1:1f:23:a7:d7:a3:96:a6:27:76:de:43:a8:36:
         d7:7e:63:63:5d:a7:4c:1e:04:cb:cd:ff:e7:84:b1:e9:ad:18:
         b3:2d:6d:82:c4:47:48:21:8d:4b:11:0c:29:d7:d4:39:4b:62:
         83:b6:b9:94:a3:2a:08:87:e5:5b:57:6f:a9:b8:eb:ba:9a:39:
         25:4c:94:4d:49:13:4d:8a:61:96:1f:fe:a2:35:1b:84:ed:2b:
         ed:d2:d7:45:bd:4a:0e:a1:30:85:fe:01:da:ce:25:f7:e9:25:
         d5:fd:4e:06:61:e1:75:45:61:8e:6b:c5:4e:bf:56:27:d0:63:
         d5:95:2f:46:4a:d3:4d:07:49:1c:c4:61:4a:f5:69:1f:c1:8b:
         d4:b7:63:51:ce:74:ac:29:28:8e:a7:ac:0e:5f:56:04:ee:fb:
         2b:7b:d6:4b:36:62:f5:95:11:a4:85:c0:48:5d:1c:fe:71:ff:
         6f:f9:33:4a:2e:f0:5f:03:5e:69:e8:e3:1a:1b:89:e6:b1:8b:
         6c:be:d5:65:b2:44:27:a3:3e:92:f7:ec:9b:88:91:27:92:11:
         01:c5:55:86:06:6b:db:55:8a:6f:6b:6e:01:9b:6a:26:a6:51:
         3c:fb:c0:e5:38:a2:57:b5:bc:ab:f8:31:14:4d:64:85:aa:c3:
         e6:80:11:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 07:39:11 2023 by rpki-client on console-ams.rpki-client.org