Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/qnu6SCrgkp2zqQHO3wHHaLVWOEI.roa
File:                     qnu6SCrgkp2zqQHO3wHHaLVWOEI.roa (raw, json)
Hash identifier:          fu7AWqOv6/k07EYOQ1wCj3f4nmVhrm6rAejdYYcNfEw=
Subject key identifier:   AA:7B:BA:48:2A:E0:92:9D:B3:A9:01:CE:DF:01:C7:68:B5:56:38:42
Certificate issuer:       /CN=ba5867b63acacf70940eb62d2653d593277f6dc7
Certificate serial:       1767DEB3
Authority key identifier: BA:58:67:B6:3A:CA:CF:70:94:0E:B6:2D:26:53:D5:93:27:7F:6D:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulhntjrKz3CUDrYtJlPVkyd_bcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/qnu6SCrgkp2zqQHO3wHHaLVWOEI.roa
Signing time:             Sat 01 Jan 2022 05:06:01 +0000
ROA not before:           Sat 01 Jan 2022 05:06:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202170
IP address blocks:        185.51.93.0/24 maxlen: 24
                          185.51.94.0/24 maxlen: 24
                          185.51.95.0/24 maxlen: 24
                          185.51.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392683187 (0x1767deb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5867b63acacf70940eb62d2653d593277f6dc7
        Validity
            Not Before: Jan  1 05:06:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa7bba482ae0929db3a901cedf01c768b5563842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:07:d0:2f:96:8a:03:3c:d9:35:38:11:65:
                    49:1b:3d:69:bb:16:59:da:56:bf:5c:18:c5:0e:20:
                    0d:ab:81:9e:45:08:b3:e9:9f:bf:13:27:bb:96:4e:
                    7b:48:a8:05:ea:7e:37:df:50:af:60:9b:3a:5b:15:
                    97:45:9b:5d:2c:0b:71:8f:55:04:01:1f:41:11:66:
                    26:47:99:39:ad:82:d1:68:45:91:dd:6f:81:41:7d:
                    9b:c4:23:fc:8b:3a:39:71:71:c3:a3:65:6d:de:1b:
                    7c:b9:17:ab:ca:1d:77:80:fc:4b:2f:0a:03:49:80:
                    8d:61:21:61:8a:e0:4d:80:9a:d4:08:cb:89:39:61:
                    47:0e:96:d3:89:1b:29:a1:2c:c4:73:eb:3a:70:44:
                    c6:cb:60:a7:92:de:2d:34:62:06:82:07:5a:f7:f2:
                    42:6a:55:d1:0e:48:7a:a3:0f:02:d0:5c:7f:44:a6:
                    f0:0e:1a:5e:d8:91:af:3c:a3:aa:b8:f1:d2:fe:a4:
                    80:e3:f3:69:d5:13:2d:f7:45:27:f1:e9:1f:e6:78:
                    58:9b:47:b6:2f:d6:f6:43:11:b2:f2:95:18:65:1d:
                    37:91:f8:e6:20:a5:89:7d:51:cb:f5:31:55:a2:64:
                    2b:df:c3:50:d9:20:f2:9f:96:65:bd:be:f2:db:f4:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:BA:48:2A:E0:92:9D:B3:A9:01:CE:DF:01:C7:68:B5:56:38:42
            X509v3 Authority Key Identifier:
                keyid:BA:58:67:B6:3A:CA:CF:70:94:0E:B6:2D:26:53:D5:93:27:7F:6D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulhntjrKz3CUDrYtJlPVkyd_bcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/qnu6SCrgkp2zqQHO3wHHaLVWOEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/ulhntjrKz3CUDrYtJlPVkyd_bcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:1d:2f:3a:67:6e:f9:cc:1e:93:44:44:4f:c0:c7:5d:6c:
         dd:53:74:aa:bf:ac:d4:2b:e9:7e:4d:9f:ec:46:dd:7a:d5:42:
         52:fe:72:98:b3:61:3a:cd:e3:6f:79:1b:9b:ce:d2:eb:c4:a2:
         79:88:54:91:f2:0a:67:b3:16:1b:c5:9e:af:55:75:cc:bc:4a:
         6b:3e:1a:aa:3a:52:77:b7:87:74:c8:af:9d:a0:f2:e6:c3:12:
         d6:cb:fa:ad:9c:4d:7d:78:fa:89:17:c0:d2:80:64:21:13:a3:
         62:d7:89:be:b0:8b:90:00:1e:e5:90:6d:b6:c3:f7:d8:29:47:
         4b:5c:ba:8e:3b:0a:bc:37:e8:c3:d5:31:b4:2d:7e:51:7d:17:
         55:20:5c:13:14:b9:9c:5c:24:03:77:97:e3:2b:44:b6:a2:b4:
         c5:b9:77:db:06:35:90:55:3b:01:39:93:60:76:4f:17:db:18:
         51:de:d8:c1:7d:1d:56:d0:e9:aa:fd:06:70:15:da:82:08:ef:
         f5:ce:0c:53:41:85:cd:85:01:7d:f5:c4:4e:c9:d2:d8:f6:7c:
         2f:18:73:5f:a7:78:ff:e7:f3:cc:2d:0e:e0:33:4e:a6:99:9d:
         17:85:b4:b5:e4:7e:8f:23:1d:07:fc:e3:9f:5b:5e:8c:08:56:
         94:4f:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:02 2023 by rpki-client on console-fra.rpki-client.org