Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/m3U-t31KEtXjcSz01x7caMMTPjA.roa
File:                     m3U-t31KEtXjcSz01x7caMMTPjA.roa (raw, json)
Hash identifier:          QGWp3YQ/ACBuSGQiowDr8mM9OSCOCgT39g/90jEuhZQ=
Subject key identifier:   9B:75:3E:B7:7D:4A:12:D5:E3:71:2C:F4:D7:1E:DC:68:C3:13:3E:30
Certificate issuer:       /CN=e2f6bebedff54f8a52f1019221ccb268628087f4
Certificate serial:       10B5FCBF
Authority key identifier: E2:F6:BE:BE:DF:F5:4F:8A:52:F1:01:92:21:CC:B2:68:62:80:87:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4va-vt_1T4pS8QGSIcyyaGKAh_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/m3U-t31KEtXjcSz01x7caMMTPjA.roa
Signing time:             Sat 01 Jan 2022 04:58:51 +0000
ROA not before:           Sat 01 Jan 2022 04:58:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199773
IP address blocks:        193.142.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280362175 (0x10b5fcbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2f6bebedff54f8a52f1019221ccb268628087f4
        Validity
            Not Before: Jan  1 04:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b753eb77d4a12d5e3712cf4d71edc68c3133e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:31:ac:15:8d:80:ef:13:b3:67:96:d0:8f:
                    e5:62:2e:31:e0:c0:fe:3d:38:12:7e:9d:3a:8e:fe:
                    d0:22:69:c6:98:59:91:73:c6:ed:06:98:1e:5e:4e:
                    11:9c:d6:2c:28:af:46:52:2a:01:4d:2c:ef:b0:ac:
                    f7:98:30:c5:b9:65:e2:11:e5:a9:ef:9d:6d:eb:bc:
                    6e:5a:5c:ca:a8:0c:f9:65:62:54:e9:5a:e2:84:64:
                    82:88:6f:80:00:25:a7:56:a3:8c:7a:82:82:d9:cf:
                    42:8a:d8:79:d2:c9:10:9e:24:6a:65:cc:e9:78:0a:
                    4c:77:0d:4b:86:67:1e:e5:e9:9b:cd:9c:c7:61:0d:
                    10:d3:d5:ab:aa:22:da:9b:dc:b5:5e:32:bc:78:1d:
                    c8:1e:9b:d1:4f:7a:47:03:69:ac:60:eb:65:cd:6d:
                    be:01:41:80:0a:93:d6:ea:b4:f7:f9:bc:99:65:90:
                    77:97:9c:15:c3:3f:ac:03:3a:bb:3b:bc:e6:c1:eb:
                    b7:c7:85:e7:d4:11:2d:05:47:4f:20:6f:a7:61:ec:
                    cf:49:86:7b:fe:36:dc:17:e6:b8:42:9c:ac:e5:e1:
                    68:e7:58:15:a9:c9:f9:ac:8d:22:8e:87:76:98:e8:
                    99:91:b6:14:06:2d:6b:1e:50:a6:d6:1a:2c:2f:e0:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:75:3E:B7:7D:4A:12:D5:E3:71:2C:F4:D7:1E:DC:68:C3:13:3E:30
            X509v3 Authority Key Identifier:
                keyid:E2:F6:BE:BE:DF:F5:4F:8A:52:F1:01:92:21:CC:B2:68:62:80:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4va-vt_1T4pS8QGSIcyyaGKAh_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/m3U-t31KEtXjcSz01x7caMMTPjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cd3921-3e6f-4044-9e87-238a5b3a7020/1/4va-vt_1T4pS8QGSIcyyaGKAh_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:a4:74:4a:02:4f:cc:db:bb:60:10:73:e0:fc:f9:93:d1:
         61:5a:1b:26:05:74:92:92:35:b1:21:17:57:a4:00:6d:35:16:
         e0:95:89:8f:e0:90:03:de:69:df:6b:6c:af:51:6a:84:bf:b6:
         96:36:78:7b:12:5a:49:3a:0a:11:25:3d:a2:54:c8:dd:12:d8:
         a5:e7:55:33:8c:7a:84:1e:8f:10:a2:bd:cf:6b:ac:6a:c1:26:
         a4:24:88:64:6f:31:fe:e8:6f:06:7f:7a:38:3b:23:4d:cf:54:
         bb:90:6a:03:6d:bc:3c:e5:97:fd:12:f3:a3:86:ab:db:6d:de:
         20:3c:39:d9:f3:d3:72:24:9a:c6:17:ac:e7:2e:67:61:b9:b1:
         e6:dc:96:89:a2:34:2c:6d:8c:b1:89:b1:d1:60:7d:f0:d6:39:
         73:95:9f:3c:43:99:5c:e9:4c:c8:bf:61:de:41:7f:fa:fb:78:
         10:4c:64:b7:6f:25:3c:48:ca:0c:60:c1:b0:ca:de:a1:f6:96:
         d6:c9:eb:b1:f4:46:c6:19:fc:75:aa:31:78:7e:24:ef:2f:f1:
         26:29:b5:8d:26:09:61:a4:25:54:51:cb:a1:51:6f:5f:97:6a:
         2e:34:66:37:70:12:4e:8b:9f:9f:08:22:fb:34:3f:bd:b4:5b:
         38:67:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:48 2023 by rpki-client on console-ams.rpki-client.org