Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/PzVv_tdKu8u8vhrbdNhsdtp75_k.roa
File:                     PzVv_tdKu8u8vhrbdNhsdtp75_k.roa (raw, json)
Hash identifier:          DgXDV7YjNNTBRO0X5ZnbygxRE1cOxCpBVWAOcKBKXTs=
Subject key identifier:   3F:35:6F:FE:D7:4A:BB:CB:BC:BE:1A:DB:74:D8:6C:76:DA:7B:E7:F9
Certificate issuer:       /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial:       089276B5
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/PzVv_tdKu8u8vhrbdNhsdtp75_k.roa
Signing time:             Sat 01 Jan 2022 15:06:50 +0000
ROA not before:           Sat 01 Jan 2022 15:06:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41313
IP address blocks:        80.95.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143816373 (0x89276b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
        Validity
            Not Before: Jan  1 15:06:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3f356ffed74abbcbbcbe1adb74d86c76da7be7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:00:51:ab:8c:06:ef:7e:b9:93:0f:b6:99:
                    0c:67:7b:ff:1e:73:82:53:cf:77:23:f7:dd:f3:8f:
                    27:1b:b9:e2:40:a2:fb:6a:6c:a4:77:f5:ad:d7:56:
                    50:64:5b:00:08:37:ca:76:7f:2e:eb:88:81:6a:fa:
                    47:62:59:0b:9e:25:86:94:b3:b4:fb:b9:ea:4b:42:
                    19:69:13:47:74:4c:b3:46:db:3f:82:36:5a:49:86:
                    4e:c9:9b:d3:ac:bf:2b:cf:c6:41:ee:93:b2:be:76:
                    34:00:05:d0:4c:95:7d:57:80:22:d0:47:b6:3e:c7:
                    68:42:06:ff:15:d3:86:a1:d5:80:98:a9:d9:88:77:
                    92:27:7e:dd:2d:ab:b7:bb:2f:76:aa:42:33:1c:bd:
                    05:ed:f6:1c:d2:a9:04:64:7b:55:39:62:ff:e6:ad:
                    c9:40:44:15:2f:85:78:db:bb:d2:0f:06:c9:a8:03:
                    29:00:54:3c:19:2a:55:40:ca:76:2f:11:cb:92:db:
                    44:34:54:9d:63:36:51:a7:1d:a8:ba:13:4c:54:8c:
                    4e:25:d3:45:96:cb:e1:e6:a3:f0:36:57:50:be:75:
                    74:27:1b:d1:cf:d6:f0:13:12:cc:90:67:03:40:8d:
                    34:64:9c:28:4c:91:c0:36:31:44:15:d7:b3:ef:e4:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:35:6F:FE:D7:4A:BB:CB:BC:BE:1A:DB:74:D8:6C:76:DA:7B:E7:F9
            X509v3 Authority Key Identifier:
                keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/PzVv_tdKu8u8vhrbdNhsdtp75_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.95.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:1d:63:49:2e:7b:fb:44:84:8d:c7:b7:29:3f:60:01:4c:49:
         46:1e:51:df:19:e2:b7:b2:16:ba:a4:04:81:f1:d1:62:65:a4:
         5e:d4:14:5f:57:b8:3b:b8:56:7a:92:e9:c3:ba:e4:96:85:54:
         d5:18:17:82:6e:20:29:b5:74:32:09:77:a8:1c:d5:2e:61:bf:
         1a:18:38:f2:50:3b:cd:64:e9:ec:f1:3f:0b:e4:c6:9e:37:36:
         bf:2c:71:76:2d:e3:99:e4:6b:31:d0:08:5d:42:68:6b:8c:73:
         53:67:41:3f:b5:9e:20:54:31:2f:d3:75:1f:31:a6:bc:9e:6b:
         2f:9c:56:1e:b9:26:1b:77:53:09:62:59:1b:6c:3c:8e:c5:8c:
         79:54:5a:26:5f:62:c7:40:d9:08:96:3d:b5:5c:26:69:23:36:
         b6:ee:0d:76:27:f7:b5:46:15:8a:81:ec:c8:6a:42:50:d5:54:
         58:55:c4:5d:30:4d:aa:85:8a:47:12:54:10:fa:1e:23:03:e4:
         09:ce:0d:e8:7f:74:58:09:50:9f:27:bb:e3:cf:70:6a:67:f6:
         a9:7e:67:c7:69:64:9c:47:f9:6c:36:c4:c5:97:f2:fa:60:d5:
         35:43:7f:6d:ed:22:25:3f:a4:69:21:da:aa:bf:b3:26:21:1b:
         cd:db:df:cc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECJJ2tTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MTgxMjc3NDRiNGM2NjVjMmVmOWRlYTRkZjg2N2I1NDNhYzY1NjY5MB4XDTIyMDEw
MTE1MDY1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2YzNTZmZmVkNzRh
YmJjYmJjYmUxYWRiNzRkODZjNzZkYTdiZTdmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJuCAFGrjAbvfrmTD7aZDGd7/x5zglPPdyP33fOPJxu54kCi
+2pspHf1rddWUGRbAAg3ynZ/LuuIgWr6R2JZC54lhpSztPu56ktCGWkTR3RMs0bb
P4I2WkmGTsmb06y/K8/GQe6Tsr52NAAF0EyVfVeAItBHtj7HaEIG/xXThqHVgJip
2Yh3kid+3S2rt7svdqpCMxy9Be32HNKpBGR7VTli/+atyUBEFS+FeNu70g8GyagD
KQBUPBkqVUDKdi8Ry5LbRDRUnWM2UacdqLoTTFSMTiXTRZbL4eaj8DZXUL51dCcb
0c/W8BMSzJBnA0CNNGScKEyRwDYxRBXXs+/kdAUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/NW/+10q7y7y+Gtt02Gx22nvn+TAfBgNVHSMEGDAWgBTRgSd0S0xmXC75
3qTfhntUOsZWaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBZRW5kRXRNWmx3dS1kNmszNFo3VkRyR1Ztay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvYTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8x
L1B6VnZfdGRLdTh1OHZocmJkTmhzZHRwNzVfay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
YTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8xLzBZRW5kRXRNWmx3
dS1kNmszNFo3VkRyR1Ztay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBfFjANBgkqhkiG9w0BAQsFAAOC
AQEAsB1jSS57+0SEjce3KT9gAUxJRh5R3xnit7IWuqQEgfHRYmWkXtQUX1e4O7hW
epLpw7rkloVU1RgXgm4gKbV0Mgl3qBzVLmG/Ghg48lA7zWTp7PE/C+TGnjc2vyxx
di3jmeRrMdAIXUJoa4xzU2dBP7WeIFQxL9N1HzGmvJ5rL5xWHrkmG3dTCWJZG2w8
jsWMeVRaJl9ix0DZCJY9tVwmaSM2tu4Ndif3tUYVioHsyGpCUNVUWFXEXTBNqoWK
RxJUEPoeIwPkCc4N6H90WAlQnye7489wamf2qX5nx2lknEf5bDbExZfy+mDVNUN/
be0iJT+kaSHaqr+zJiEbzdvfzA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:22 2023 by rpki-client on console-ams.rpki-client.org