Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/TL0SVEf3wwBQE4XlZEGCS09aZSo.roa
File:                     TL0SVEf3wwBQE4XlZEGCS09aZSo.roa (raw, json)
Hash identifier:          5BVLg1bXsF1CJ7as+YS1XMhXr9+183rN/J9kirr/Fps=
Subject key identifier:   4C:BD:12:54:47:F7:C3:00:50:13:85:E5:64:41:82:4B:4F:5A:65:2A
Certificate issuer:       /CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Certificate serial:       0188E7C469BE737DCB1551F3997E50AEB775
Authority key identifier: 48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/TL0SVEf3wwBQE4XlZEGCS09aZSo.roa
Signing time:             Fri 23 Jun 2023 10:19:49 +0000
ROA not before:           Fri 23 Jun 2023 10:19:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.179.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e7:c4:69:be:73:7d:cb:15:51:f3:99:7e:50:ae:b7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
        Validity
            Not Before: Jun 23 10:19:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4cbd125447f7c300501385e56441824b4f5a652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:32:b0:ad:b7:6b:9d:98:15:01:2e:4c:6f:d6:
                    1c:9a:02:68:e0:c1:c2:ef:00:19:d4:80:21:ae:19:
                    02:41:04:e7:07:7e:29:e3:bd:8d:32:f1:e5:6a:e3:
                    ea:07:60:7c:c7:60:4a:28:56:4e:92:76:13:bc:ae:
                    b7:80:c6:d5:4c:6e:5b:f6:4f:30:50:f2:bd:20:6e:
                    2f:d0:5d:1d:57:e7:7b:8d:59:7e:c4:d0:45:3d:24:
                    0d:0a:04:2b:c6:1e:ee:d0:e3:37:a3:2b:58:76:06:
                    5b:47:83:75:28:b5:e8:ff:13:2b:0b:27:0c:7a:af:
                    ab:dd:26:48:e1:58:aa:24:07:f6:b8:f3:70:2f:f1:
                    a3:4d:bb:f2:b0:f0:f1:84:f9:e8:3f:b3:10:f7:f9:
                    c0:58:99:34:a4:b0:7b:ec:fc:cb:39:f5:21:5c:c0:
                    14:6c:f4:7f:db:06:98:27:7b:30:07:5a:c6:4f:45:
                    b6:46:32:92:18:f7:b0:f7:66:62:44:a4:4e:da:d4:
                    c2:80:6e:64:9c:0e:7e:b5:2a:b2:93:34:69:4e:dc:
                    61:1c:5a:e5:8b:77:a3:0a:49:11:18:03:a2:69:b8:
                    95:f5:f7:ad:59:5f:82:1e:75:94:0e:98:c0:fd:a6:
                    c3:b3:87:ad:93:07:d1:e2:de:d6:99:41:cc:22:42:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BD:12:54:47:F7:C3:00:50:13:85:E5:64:41:82:4B:4F:5A:65:2A
            X509v3 Authority Key Identifier:
                keyid:48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/TL0SVEf3wwBQE4XlZEGCS09aZSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/SAvxwTbs_9MS_Dm6PIKv-TneJPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d3:4e:af:a2:29:40:12:29:9d:0e:c9:aa:11:3f:a6:8f:f0:
         e1:4d:eb:f7:ee:ec:29:66:7a:1c:19:b6:b9:36:3b:d7:ac:2a:
         2f:e1:7d:6e:1f:87:b2:18:7f:36:85:50:d1:91:9c:62:c9:7c:
         ba:d8:6a:aa:ba:73:56:3e:d2:75:e6:80:ac:7c:31:9e:61:08:
         90:fd:a3:f8:41:4e:61:49:5a:a2:22:3e:e6:a6:b8:99:47:3b:
         04:f7:5a:dd:0b:93:68:a2:9e:71:7d:9a:1a:43:12:13:71:47:
         da:ee:79:5b:80:14:eb:5d:e7:f1:c3:45:46:b2:43:32:c7:bc:
         b7:db:33:c1:5e:d4:4e:d7:65:36:a8:05:8f:58:ff:c0:85:fd:
         27:93:11:6e:ba:25:95:f4:fa:d6:ec:70:28:7a:c4:f1:4d:2b:
         51:9e:d7:d0:83:40:b3:bb:02:41:b5:cf:fe:13:41:78:66:8e:
         fb:3e:3c:ec:57:66:15:1c:2f:e6:02:39:b9:5f:1e:1c:23:08:
         8d:dc:23:c7:dd:d1:b8:72:9c:d8:d2:a1:ce:d8:b0:1b:8c:fe:
         92:9e:53:5f:f1:a1:7c:f7:85:0a:64:58:92:a5:5c:e1:5b:77:
         c8:cb:b3:f5:85:70:f1:eb:7f:bc:46:0c:ab:15:44:07:b7:8e:
         79:97:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 13:24:12 2023 by rpki-client on console-ams.rpki-client.org