Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/UfJT_aS19mzoORVdpK24qjeDUjc.roa
File:                     UfJT_aS19mzoORVdpK24qjeDUjc.roa (raw, json)
Hash identifier:          ht0zztqZ/4ozSYqXw5zEW4+5Vd0pl0kroNMfxLASrQU=
Subject key identifier:   51:F2:53:FD:A4:B5:F6:6C:E8:39:15:5D:A4:AD:B8:AA:37:83:52:37
Certificate issuer:       /CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
Certificate serial:       018573160DB0553137EE17668A1315CB2EC1
Authority key identifier: 83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/UfJT_aS19mzoORVdpK24qjeDUjc.roa
Signing time:             Mon 02 Jan 2023 15:25:03 +0000
ROA not before:           Mon 02 Jan 2023 15:25:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42849
IP address blocks:        193.200.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:16:0d:b0:55:31:37:ee:17:66:8a:13:15:cb:2e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
        Validity
            Not Before: Jan  2 15:25:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51f253fda4b5f66ce839155da4adb8aa37835237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:98:88:bd:b6:22:81:b4:7c:8f:6c:2b:1a:
                    8a:b8:8c:58:bf:a1:b7:4f:fd:69:fa:48:98:cc:79:
                    4b:4d:2d:89:59:c7:3f:17:76:a4:bc:44:bf:da:5d:
                    e5:30:ff:fe:96:be:6a:b7:69:bf:dd:0d:82:98:52:
                    cb:3e:8b:c4:9c:09:5d:ed:97:a1:48:f9:73:9f:d4:
                    ae:e9:9d:78:bb:fc:84:68:61:c1:3e:69:49:10:c7:
                    65:c1:09:d1:3a:cc:63:4f:4a:d2:c6:4c:da:81:b3:
                    3c:7f:68:c3:41:cb:e7:82:70:18:3d:e7:7f:b0:62:
                    fa:af:75:f3:8a:2b:dc:48:fb:c6:b9:06:f2:ed:5b:
                    e0:ec:35:0e:8c:36:19:03:dd:a8:88:98:4a:39:04:
                    f0:ac:88:a1:76:cc:a5:70:60:90:d1:08:27:9b:04:
                    87:59:58:10:6a:3c:35:50:27:55:cc:ad:c1:af:9a:
                    f8:f6:d1:8e:3f:74:80:c0:a1:fe:9a:24:12:f8:54:
                    b3:78:d3:7b:55:db:9b:9b:a0:b8:55:bb:66:4f:e7:
                    9a:72:72:d3:25:ca:ed:82:04:5b:4c:a2:94:62:00:
                    cf:ac:d0:59:ce:87:69:01:3b:6b:54:1c:7a:66:7c:
                    b9:62:3e:1c:3c:d6:d8:05:4e:68:4b:14:1f:da:7a:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:53:FD:A4:B5:F6:6C:E8:39:15:5D:A4:AD:B8:AA:37:83:52:37
            X509v3 Authority Key Identifier:
                keyid:83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/UfJT_aS19mzoORVdpK24qjeDUjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/g6fIC9JvzSm5BV395oM62wUkVL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:9b:ae:f9:85:03:f2:ba:21:b9:8c:d2:02:08:9a:7d:4a:
         38:56:a0:ba:09:97:32:ca:b9:8f:99:e2:03:c6:82:96:1d:fc:
         42:96:e0:ef:0f:57:a4:0c:da:b6:2e:7b:75:fa:f0:6b:df:67:
         de:d2:76:3e:db:9a:ee:3d:fc:dc:7a:5f:f3:ea:74:bd:51:2b:
         cf:44:c4:89:e9:15:d6:1e:5b:57:7a:a0:c3:52:c1:69:ca:0a:
         ad:04:1e:3e:ab:ea:fa:c2:53:b1:75:d1:b4:97:2e:6b:0c:fd:
         0f:a6:5d:b2:3a:43:2f:ab:ea:d5:50:f2:68:bc:38:98:db:6f:
         bd:ac:01:1a:1e:23:47:51:29:01:c8:a1:f3:74:4d:18:c4:81:
         aa:d1:7f:72:8b:f4:e0:16:70:2d:b6:18:27:3b:79:70:86:07:
         0b:c9:49:24:6e:62:de:47:ce:87:ee:e9:bf:92:e6:0d:cc:ed:
         f7:0b:e4:1a:51:60:a5:64:0e:eb:50:40:3c:b9:12:5e:de:4e:
         b9:80:76:94:d4:ca:bc:2d:74:53:ac:ef:49:44:cf:84:f4:25:
         cf:18:3e:2a:1a:f9:9f:22:c8:07:61:d7:05:06:75:b4:a2:38:
         c3:a0:f7:dc:97:1a:ba:0f:62:08:7b:ff:34:b9:5f:f6:4f:e6:
         3b:6d:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:16 2024 by rpki-client on console-ams.rpki-client.org