Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/GhRp6DFkC0ny9EHjkiYuiFTi_C4.roa
File:                     GhRp6DFkC0ny9EHjkiYuiFTi_C4.roa (raw, json)
Hash identifier:          yh/OnX5nMvQLFYR/3PLMcj11q1b49pFfwYKqNMjQEAw=
Subject key identifier:   1A:14:69:E8:31:64:0B:49:F2:F4:41:E3:92:26:2E:88:54:E2:FC:2E
Certificate issuer:       /CN=53edde2cef2fb5cab4ea1ea779401d295708da77
Certificate serial:       02DE9CC6
Authority key identifier: 53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/GhRp6DFkC0ny9EHjkiYuiFTi_C4.roa
Signing time:             Fri 01 Jul 2022 16:41:25 +0000
ROA not before:           Fri 01 Jul 2022 16:41:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212598
IP address blocks:        83.138.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48143558 (0x2de9cc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53edde2cef2fb5cab4ea1ea779401d295708da77
        Validity
            Not Before: Jul  1 16:41:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a1469e831640b49f2f441e392262e8854e2fc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:65:57:c8:90:ec:5c:73:7d:1d:d7:41:78:
                    0e:c4:58:c2:81:bc:f1:e7:77:56:ae:09:ee:ac:70:
                    4d:c8:b6:45:0f:f5:66:91:82:b8:22:d6:26:c2:5d:
                    af:fd:2f:8f:12:7a:bc:36:75:b1:6f:50:a1:a0:7f:
                    a5:4d:8a:54:ec:1a:25:0c:2c:2e:cf:16:81:24:d8:
                    c5:5e:f3:a4:3c:3f:d6:71:b6:de:16:86:0b:12:a1:
                    e2:a0:50:59:54:e4:83:fe:2a:4c:89:ae:d0:79:e8:
                    33:c8:d7:52:d3:e4:7f:5d:1f:16:03:2c:a0:b9:72:
                    6f:6a:45:b1:3e:49:49:d8:04:14:86:74:f1:ba:38:
                    49:86:87:c1:e0:26:9b:e2:19:a5:0e:6e:6f:bd:20:
                    9f:44:83:c9:34:5f:27:db:43:e4:ef:ed:d2:6f:6e:
                    20:09:d0:d1:ca:d4:2e:e6:61:66:90:c7:61:c2:7a:
                    bf:f6:47:68:78:cd:fc:ed:81:fe:a6:00:ce:18:9e:
                    f5:f6:f9:1b:0e:d3:21:4c:45:77:20:c6:0b:35:e9:
                    22:04:e3:10:c6:a3:52:05:66:0a:fc:17:11:1a:c7:
                    80:6c:c4:10:6f:2e:e3:03:c5:03:9c:c5:84:ea:27:
                    af:14:f8:f0:40:c2:ad:41:08:53:89:06:82:7b:49:
                    ee:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:14:69:E8:31:64:0B:49:F2:F4:41:E3:92:26:2E:88:54:E2:FC:2E
            X509v3 Authority Key Identifier:
                keyid:53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/GhRp6DFkC0ny9EHjkiYuiFTi_C4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:80:5e:76:27:f9:2f:60:0e:43:86:3f:5e:69:ea:29:e6:
         6f:75:ac:a0:61:1a:c0:48:5b:ab:4d:e1:00:80:49:87:ee:88:
         dc:4d:ac:6f:b0:50:39:b9:d5:b5:b4:f9:ba:57:d1:89:b8:1e:
         58:64:b9:30:05:2b:c0:6c:04:82:50:74:1e:cd:03:a2:3a:39:
         03:da:8b:10:d3:48:44:a1:e1:27:19:99:d0:64:0f:74:7b:bb:
         a3:13:83:37:d2:9d:40:0f:6f:7e:7d:04:76:51:00:51:a5:9f:
         cb:ee:07:c8:56:ec:0b:02:3c:d5:0e:34:71:91:54:06:31:d3:
         eb:9c:69:89:b3:f5:9c:2b:9b:44:47:ae:e4:b2:98:d8:30:5c:
         fb:cd:c9:b5:26:9d:bf:b4:81:91:b4:80:f0:a3:ea:4d:0a:7a:
         aa:86:56:6c:c8:78:6d:11:24:33:71:25:cb:2a:4b:a8:a1:f3:
         8a:db:73:95:38:e3:0f:25:4b:a5:42:43:f0:a8:ff:0c:6f:f8:
         e8:9f:78:41:bf:28:1a:ef:88:04:0b:f1:bf:89:6e:cb:c8:ff:
         79:39:5e:63:6f:0b:ac:f4:b7:f3:70:5c:52:d4:35:5d:f4:2b:
         45:61:43:ad:ca:4d:cc:c3:84:11:ac:74:51:6e:ab:ef:ff:16:
         d3:7d:4e:57
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAt6cxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
M2VkZGUyY2VmMmZiNWNhYjRlYTFlYTc3OTQwMWQyOTU3MDhkYTc3MB4XDTIyMDcw
MTE2NDEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWExNDY5ZTgzMTY0
MGI0OWYyZjQ0MWUzOTIyNjJlODg1NGUyZmMyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3dZVfIkOxcc30d10F4DsRYwoG88ed3Vq4J7qxwTci2RQ/1
ZpGCuCLWJsJdr/0vjxJ6vDZ1sW9QoaB/pU2KVOwaJQwsLs8WgSTYxV7zpDw/1nG2
3haGCxKh4qBQWVTkg/4qTImu0HnoM8jXUtPkf10fFgMsoLlyb2pFsT5JSdgEFIZ0
8bo4SYaHweAmm+IZpQ5ub70gn0SDyTRfJ9tD5O/t0m9uIAnQ0crULuZhZpDHYcJ6
v/ZHaHjN/O2B/qYAzhie9fb5Gw7TIUxFdyDGCzXpIgTjEMajUgVmCvwXERrHgGzE
EG8u4wPFA5zFhOonrxT48EDCrUEIU4kGgntJ7icCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQaFGnoMWQLSfL0QeOSJi6IVOL8LjAfBgNVHSMEGDAWgBRT7d4s7y+1yrTq
Hqd5QB0pVwjadzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1UtM2VMTzh2dGNxMDZoNm5lVUFkS1ZjSTJuYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWUvNmEyYmI1LTAyMTctNDU5NS1iZWY2LTQ2MzhhNjZlNGRkOC8x
L0doUnA2REZrQzBueTlFSGpraVl1aUZUaV9DNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUv
NmEyYmI1LTAyMTctNDU5NS1iZWY2LTQ2MzhhNjZlNGRkOC8xL1UtM2VMTzh2dGNx
MDZoNm5lVUFkS1ZjSTJuYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFOKMjANBgkqhkiG9w0BAQsFAAOC
AQEAgfCAXnYn+S9gDkOGP15p6inmb3WsoGEawEhbq03hAIBJh+6I3E2sb7BQObnV
tbT5ulfRibgeWGS5MAUrwGwEglB0Hs0Dojo5A9qLENNIRKHhJxmZ0GQPdHu7oxOD
N9KdQA9vfn0EdlEAUaWfy+4HyFbsCwI81Q40cZFUBjHT65xpibP1nCubREeu5LKY
2DBc+83JtSadv7SBkbSA8KPqTQp6qoZWbMh4bREkM3ElyypLqKHzittzlTjjDyVL
pUJD8Kj/DG/46J94Qb8oGu+IBAvxv4luy8j/eTleY28LrPS383BcUtQ1XfQrRWFD
rcpNzMOEEax0UW6r7/8W031OVw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org