Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/Pj61YquRwzyK5ZeCQ2fB2lDuQlI.roa
File:                     Pj61YquRwzyK5ZeCQ2fB2lDuQlI.roa (raw, json)
Hash identifier:          Zq2EhAKCwT3f64cUfisVzTNFuBxYtRjWa9B0RFjsXgw=
Subject key identifier:   3E:3E:B5:62:AB:91:C3:3C:8A:E5:97:82:43:67:C1:DA:50:EE:42:52
Certificate issuer:       /CN=0692d72f4ef3d742d725a5b7a92fac56160b925c
Certificate serial:       01884D2F1600223CE1BC57732486132AD79A
Authority key identifier: 06:92:D7:2F:4E:F3:D7:42:D7:25:A5:B7:A9:2F:AC:56:16:0B:92:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLXL07z10LXJaW3qS-sVhYLklw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/Pj61YquRwzyK5ZeCQ2fB2lDuQlI.roa
Signing time:             Wed 24 May 2023 09:55:11 +0000
ROA not before:           Wed 24 May 2023 09:55:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49778
IP address blocks:        178.22.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4d:2f:16:00:22:3c:e1:bc:57:73:24:86:13:2a:d7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692d72f4ef3d742d725a5b7a92fac56160b925c
        Validity
            Not Before: May 24 09:55:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e3eb562ab91c33c8ae597824367c1da50ee4252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:79:51:c1:c2:85:34:d2:f3:43:08:06:b7:
                    25:c6:60:3e:c8:b2:58:04:66:97:de:a2:9a:d1:f2:
                    1e:fe:2b:f2:c3:c3:59:88:f7:b8:bf:68:77:d8:6a:
                    64:77:20:82:04:2c:95:6d:50:30:35:40:69:e9:63:
                    ad:71:2f:d7:af:cd:8a:fd:a2:75:d7:55:4e:8e:ff:
                    53:67:37:3d:b4:c1:34:e7:1c:01:1d:f0:f7:5a:04:
                    3a:62:59:f2:02:1a:e1:80:7f:16:a8:40:23:59:d6:
                    8e:ca:e3:5c:af:86:f6:77:16:06:91:ad:51:54:c9:
                    2f:54:9d:a8:72:76:3d:7a:1a:d2:79:b8:2d:84:49:
                    27:cd:ec:b5:c2:b0:7d:5a:84:63:0a:8a:94:d4:f1:
                    70:fb:51:4c:6c:19:03:9e:41:43:21:a0:e5:39:9a:
                    b0:16:8a:0f:93:c1:59:6a:d4:0c:ba:d6:a0:79:f1:
                    76:9c:fe:d1:07:5c:09:eb:02:f5:0d:d9:4b:35:ec:
                    26:25:dd:fc:3c:ca:93:24:ab:9a:02:7b:e6:82:80:
                    75:44:69:bf:7f:bd:ad:31:26:d2:f0:e5:7f:43:49:
                    cf:3b:f4:c0:85:3b:fc:9f:8e:b5:4f:27:97:d1:13:
                    88:48:08:d5:a4:ff:f5:62:1b:0b:88:44:11:9e:95:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:B5:62:AB:91:C3:3C:8A:E5:97:82:43:67:C1:DA:50:EE:42:52
            X509v3 Authority Key Identifier:
                keyid:06:92:D7:2F:4E:F3:D7:42:D7:25:A5:B7:A9:2F:AC:56:16:0B:92:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLXL07z10LXJaW3qS-sVhYLklw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/Pj61YquRwzyK5ZeCQ2fB2lDuQlI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2dcab0-817d-4db4-86cd-808f214ec177/1/BpLXL07z10LXJaW3qS-sVhYLklw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:20:37:d5:da:94:55:3f:ab:a7:b0:cb:a9:d0:82:2c:5f:
         f7:e1:02:e2:c5:61:66:25:fa:88:60:cf:85:1b:5f:b0:48:64:
         cf:5f:13:94:d0:b4:b0:23:74:1e:24:89:a1:98:2f:1f:65:85:
         f7:50:0b:57:33:c9:34:e0:e3:35:58:42:31:1a:21:48:47:64:
         52:21:de:f1:b1:72:ee:7c:4b:a8:dd:9c:72:a0:6b:62:d8:f0:
         41:c1:8f:11:40:88:b5:0a:99:23:a7:82:29:bd:6f:4b:6b:a0:
         23:87:a3:ba:03:f4:3a:ae:2d:12:bd:ae:8b:c3:9b:98:20:01:
         01:01:7b:f3:bc:3d:88:9f:67:d5:d9:35:8c:96:a4:4a:b3:5e:
         db:3b:5e:f6:78:17:e5:d4:7e:ad:9e:0c:d5:df:14:a3:8a:fd:
         88:43:a9:d2:c0:bc:9f:0a:cd:a0:27:a8:4d:a3:32:e1:1a:a0:
         ec:58:de:1d:8f:e0:f8:e2:4b:8b:87:9f:37:4a:a5:91:63:14:
         b3:b6:db:c5:75:39:51:a8:5e:9c:b4:7c:10:34:7e:74:52:dc:
         b3:7c:82:63:94:cb:55:a7:cd:a5:05:00:d7:40:54:58:b2:89:
         d8:5f:79:b6:9c:b6:30:1a:23:b2:98:86:18:c0:7d:5c:fe:b6:
         59:fc:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 13:29:00 2023 by rpki-client on console-fra.rpki-client.org