Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa
File:                     fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa (raw, json)
Hash identifier:          MPW7XbRrCtcS5Wy9TYSfB0MXejVdBxsMTEskuWIrBt8=
Subject key identifier:   7C:DD:E0:E2:6C:7F:D6:B5:4A:02:44:50:FA:52:22:FC:44:78:B2:1A
Certificate issuer:       /CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Certificate serial:       D0ADFA
Authority key identifier: 6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa
Signing time:             Sat 01 Jan 2022 13:06:55 +0000
ROA not before:           Sat 01 Jan 2022 13:06:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.38.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13676026 (0xd0adfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
        Validity
            Not Before: Jan  1 13:06:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7cdde0e26c7fd6b54a024450fa5222fc4478b21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:c8:48:46:f6:f0:4f:a8:97:76:5e:18:38:
                    85:f1:e0:e7:75:d6:1c:e1:7a:eb:9a:c6:11:09:fa:
                    61:aa:8d:a0:a3:f8:01:f1:fb:ae:f5:8c:0b:9e:af:
                    f9:60:9a:67:0f:ac:ad:4b:0c:d2:73:c7:06:8c:48:
                    94:2b:43:07:a6:90:b5:b9:89:8a:e7:74:43:77:fe:
                    2a:08:2c:12:6d:b4:1e:30:fe:5e:31:61:42:6f:bd:
                    97:71:ec:47:54:ff:3f:6b:37:fb:4a:3a:63:ee:da:
                    0b:c0:1c:7c:0d:7d:2c:b8:19:09:0e:d4:28:78:30:
                    b5:7d:5e:25:09:3e:63:f2:3a:37:8c:7e:be:2d:2c:
                    ab:2f:f1:25:fc:df:79:3f:5e:e0:32:61:1c:ec:25:
                    58:c1:67:73:0b:3d:96:37:23:3e:4e:17:f3:ad:1b:
                    af:83:3e:73:ce:8d:5d:a7:96:c2:0f:1a:5c:0e:62:
                    9f:7f:f5:b9:7c:d0:54:7a:1d:6f:ac:96:36:e8:05:
                    80:c6:4f:50:67:7e:8f:2b:d3:e0:f7:b0:13:c7:bf:
                    3b:1d:37:a6:3d:4e:05:ac:d7:ba:71:ca:08:84:cc:
                    58:7f:65:14:55:38:19:53:dd:54:64:40:72:15:3c:
                    6d:1b:bb:4a:e2:50:d1:ff:20:7e:ed:7e:ea:36:a7:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DD:E0:E2:6C:7F:D6:B5:4A:02:44:50:FA:52:22:FC:44:78:B2:1A
            X509v3 Authority Key Identifier:
                keyid:6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:73:d5:cc:98:09:00:fc:5b:33:c9:7d:fd:4d:73:31:79:ae:
         97:05:f4:8d:04:a0:72:4e:03:63:cf:6c:aa:83:37:1e:ed:0a:
         ff:f9:0b:40:73:12:49:68:56:c8:c1:4e:38:0a:81:2c:d3:3f:
         a8:30:74:06:7b:f8:b5:59:cf:ee:55:52:bc:d5:b3:c3:fa:bd:
         4b:1c:30:5c:48:14:fa:9c:3c:14:d9:2c:44:a3:43:5a:2f:a1:
         04:2a:69:c8:15:68:0e:70:c3:c7:74:30:84:fc:1f:75:a6:2a:
         5d:5e:d6:3c:04:87:fa:31:2f:9f:b7:3c:b5:d2:62:77:7c:c3:
         af:9e:fe:80:f7:e6:ac:c1:96:a0:fe:ec:43:35:2b:b2:0e:6a:
         3e:1e:8b:b7:b4:28:44:a1:8e:29:61:6a:63:4c:98:bc:bf:e7:
         4e:b6:41:da:c4:23:81:14:9c:2c:0f:17:f3:a9:e9:1d:13:4c:
         23:34:ce:e9:75:ea:09:b7:a8:35:10:d9:44:58:e5:8e:39:05:
         da:89:2b:bd:04:ef:b5:4d:9d:09:73:4d:b6:98:9b:f4:36:bb:
         92:cb:d5:8f:59:f5:f7:e9:8f:82:cb:91:63:90:0c:37:10:ae:
         d4:6e:80:bd:7a:db:ab:08:e8:26:5a:63:a3:90:2e:a1:dc:35:
         34:89:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:37 2023 by rpki-client on console-fra.rpki-client.org