Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/kBo_f3kjBsWbJd5YTaXw_gV73eA.roa
File:                     kBo_f3kjBsWbJd5YTaXw_gV73eA.roa (raw, json)
Hash identifier:          KmQds2ElernC3t9W6FMNRHia4Fbt3dDurXc3ElWLy08=
Subject key identifier:   90:1A:3F:7F:79:23:06:C5:9B:25:DE:58:4D:A5:F0:FE:05:7B:DD:E0
Certificate issuer:       /CN=53edde2cef2fb5cab4ea1ea779401d295708da77
Certificate serial:       01829D69
Authority key identifier: 53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/kBo_f3kjBsWbJd5YTaXw_gV73eA.roa
Signing time:             Sun 30 Jan 2022 09:17:55 +0000
ROA not before:           Sun 30 Jan 2022 09:17:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211237
IP address blocks:        83.138.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25337193 (0x1829d69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53edde2cef2fb5cab4ea1ea779401d295708da77
        Validity
            Not Before: Jan 30 09:17:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=901a3f7f792306c59b25de584da5f0fe057bdde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:57:e7:43:54:f3:01:f9:1a:2d:a3:4b:b4:
                    f7:c2:f5:be:c2:62:6a:ac:89:36:06:3a:b0:33:44:
                    b8:1d:7c:36:70:e9:80:d5:c0:2a:37:88:bf:b2:86:
                    a1:9c:23:b9:5e:5c:ed:3c:b8:9b:e1:0b:3a:2d:6e:
                    8f:21:fe:de:50:e3:48:a8:80:2e:66:37:39:fe:b2:
                    e3:89:46:82:a8:c6:4a:2a:f7:82:bc:46:a2:48:dc:
                    c4:d5:b2:d8:7b:39:bd:7f:32:d5:97:a4:37:66:1a:
                    20:5e:d4:82:ac:30:4f:90:a2:64:93:a2:c0:d0:f8:
                    ce:9c:aa:2f:67:c1:cf:23:a2:86:17:34:a6:68:3e:
                    48:0a:0c:44:b8:15:ba:78:87:9c:44:04:ba:5d:ee:
                    2b:88:e8:f5:7c:f5:da:a0:96:aa:fe:d8:81:14:e0:
                    bf:58:a6:e4:19:fd:be:69:93:3b:e4:1b:9e:36:26:
                    94:bb:7b:b1:75:e5:1a:60:b8:d3:b2:63:a5:f6:f7:
                    e8:a0:57:ac:de:31:fb:17:73:2f:03:20:8f:f6:85:
                    c3:79:31:01:03:29:2d:3a:34:8e:73:55:43:6a:a5:
                    b8:b5:1a:4a:ef:43:fb:bf:7c:c9:d8:e7:d3:ac:bc:
                    76:f6:08:43:b0:03:1d:d8:2d:e9:2a:0f:13:48:e2:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:3F:7F:79:23:06:C5:9B:25:DE:58:4D:A5:F0:FE:05:7B:DD:E0
            X509v3 Authority Key Identifier:
                keyid:53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/kBo_f3kjBsWbJd5YTaXw_gV73eA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:57:60:73:6d:2f:4e:96:d0:70:38:23:6b:34:b2:ed:1d:e0:
         95:e7:bd:f1:2a:57:64:a3:7b:45:0a:d1:9f:76:8c:47:18:b4:
         88:ef:0c:34:ff:56:fa:64:b7:50:e4:df:20:5b:05:7b:0c:05:
         2d:bf:10:f4:53:18:fd:6d:55:d6:e9:b2:e1:16:b6:4d:cd:46:
         26:3d:75:dc:b5:ba:2b:b2:91:a4:cf:83:3c:d1:54:8b:e7:1e:
         0c:89:1b:dc:9d:f6:f9:b2:ee:f4:ba:c8:64:71:cf:c8:36:ba:
         eb:2e:18:62:94:20:23:98:20:28:d3:e5:7d:73:0a:f8:5f:8a:
         ab:09:aa:48:c2:73:bd:ce:a5:7d:3d:04:24:b6:2f:f4:68:cf:
         66:f7:48:64:f3:52:c2:67:66:ff:88:7a:e3:39:85:5e:b7:15:
         81:20:e4:76:8f:9c:61:b7:a1:e8:05:4f:c7:9f:76:df:09:83:
         df:8f:72:3e:61:79:55:58:27:b9:0b:ba:2a:27:f9:cb:8c:ec:
         91:c2:ae:36:b1:5c:7a:bf:3c:a9:dc:b1:08:dd:0e:ca:27:e7:
         51:a3:52:c2:c6:90:69:65:d2:2d:17:a5:49:b0:b6:93:7e:17:
         1b:cf:39:f7:45:c6:0c:25:46:bb:0e:e2:c7:f3:4a:9c:0e:86:
         86:af:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org