Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/1-nF-UfFWejEWd6ERt7rOoSQ67Qo.roa
File:                     1-nF-UfFWejEWd6ERt7rOoSQ67Qo.roa (raw, json)
Hash identifier:          M8D9qGcn9h7W3G5BLZtOqS3EoANkpn8F9BFiOx2z4YY=
Subject key identifier:   FA:71:7E:51:F1:56:7A:31:16:77:A1:11:B7:BA:CE:A1:24:3A:ED:0A
Certificate issuer:       /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial:       018A739F4CDF7D4EBE8AF8241521D0BEBD16
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/1-nF-UfFWejEWd6ERt7rOoSQ67Qo.roa
Signing time:             Fri 08 Sep 2023 07:08:54 +0000
ROA not before:           Fri 08 Sep 2023 07:08:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21859
IP address blocks:        146.19.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:73:9f:4c:df:7d:4e:be:8a:f8:24:15:21:d0:be:bd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
        Validity
            Not Before: Sep  8 07:08:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa717e51f1567a311677a111b7bacea1243aed0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:ae:89:d2:93:c5:a2:16:05:70:92:99:86:
                    20:68:99:2c:da:db:71:a3:44:a4:7b:54:c3:c1:1a:
                    b9:92:01:94:7e:b6:87:8f:84:49:0f:5d:79:7b:42:
                    5e:6c:df:55:3d:b4:ba:ec:21:6b:55:18:7a:d0:77:
                    2b:c8:ca:db:d6:2d:c7:f6:70:b7:4b:4a:f1:7f:fd:
                    22:6f:72:25:05:e2:ff:3d:f6:f5:2f:e4:b3:45:d2:
                    63:d6:d1:5e:29:ff:50:db:6a:39:f5:19:26:80:f9:
                    f1:0e:09:60:3a:92:60:a2:46:31:9d:45:55:81:b5:
                    7a:7a:a0:67:cf:25:a1:be:58:cb:e2:42:e0:51:89:
                    36:d1:d7:bc:ca:91:23:35:eb:05:30:d8:e2:53:fe:
                    5e:d7:23:2a:2f:86:62:9c:ca:c8:39:99:3c:32:77:
                    a4:4b:a3:ea:80:93:63:77:3f:86:70:85:35:f7:fe:
                    d8:3e:36:e7:cb:1e:6a:1e:a5:68:8d:be:14:bf:a9:
                    de:01:32:79:f4:95:81:72:4c:17:7c:46:09:a6:c7:
                    c8:75:0e:11:b6:8a:c5:70:42:f3:94:28:bd:33:a0:
                    bb:be:f4:95:93:e9:cb:30:00:5d:d6:87:25:53:16:
                    b8:76:2e:4e:1a:c7:9a:29:5c:e1:a1:a7:6c:dc:79:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:71:7E:51:F1:56:7A:31:16:77:A1:11:B7:BA:CE:A1:24:3A:ED:0A
            X509v3 Authority Key Identifier:
                keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/1-nF-UfFWejEWd6ERt7rOoSQ67Qo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:50:0e:c0:9e:91:30:be:f7:06:2b:02:a3:42:8a:f4:65:3f:
         4d:da:a8:6a:46:44:74:c4:a3:42:9d:36:c2:84:3f:a8:aa:11:
         86:cc:af:09:b5:a7:a5:8c:7c:20:a8:41:6e:bf:b1:6a:17:27:
         62:d2:09:88:e7:e4:f0:23:4b:d8:fb:30:13:a2:52:ee:db:69:
         c5:fa:96:99:9f:80:01:eb:6f:22:74:1b:41:b8:b3:fd:e7:04:
         0e:14:1b:24:31:da:f0:49:56:64:45:cd:71:89:1f:d8:92:6a:
         2e:2a:26:6d:e1:eb:06:e5:1d:f2:4d:b7:f8:1a:cd:0c:4f:ff:
         0b:1b:1a:99:89:80:05:12:68:ed:95:98:67:41:89:f5:fc:5a:
         21:b6:35:40:4b:fb:bb:3d:5e:4d:91:da:cd:30:55:c6:eb:08:
         f0:7e:f7:b4:0d:94:d8:ec:8a:26:43:e4:05:65:41:c9:c7:45:
         60:ea:3b:dc:d1:57:d5:83:7e:5c:cd:97:65:48:65:74:07:cd:
         d6:5c:23:90:57:0e:bd:51:07:15:05:ea:1e:1a:0b:63:43:64:
         ad:2d:91:0e:ff:ae:98:fb:ff:97:23:c9:48:3a:70:38:4f:b9:
         be:69:0c:80:1a:aa:1b:6e:88:47:77:45:b7:61:45:6e:16:18:
         22:85:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 14:44:08 2023 by rpki-client on console-ams.rpki-client.org