Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/E2Cm3SrF_VZhWu26r5_Q4AExe-o.roa
File:                     E2Cm3SrF_VZhWu26r5_Q4AExe-o.roa (raw, json)
Hash identifier:          HYv48d4BGoLrmeK/vnaphalJVvDrTEt447UWyR3eUl8=
Subject key identifier:   13:60:A6:DD:2A:C5:FD:56:61:5A:ED:BA:AF:9F:D0:E0:01:31:7B:EA
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       01877950F60756B737CE586B7174B5DB517F
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/E2Cm3SrF_VZhWu26r5_Q4AExe-o.roa
Signing time:             Thu 13 Apr 2023 06:32:41 +0000
ROA not before:           Thu 13 Apr 2023 06:32:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        194.59.8.0/24 maxlen: 24
                          194.59.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:50:f6:07:56:b7:37:ce:58:6b:71:74:b5:db:51:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: Apr 13 06:32:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1360a6dd2ac5fd56615aedbaaf9fd0e001317bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:27:0b:2b:50:df:8e:04:92:d0:ac:da:74:
                    5b:a1:a4:21:a7:bf:7a:8e:58:71:07:1e:8f:ab:bd:
                    c4:a5:0f:ff:c7:4a:6b:f1:57:03:8f:55:08:19:fd:
                    8a:29:b2:ec:cb:bc:7d:f7:49:5c:3f:d0:99:14:0d:
                    4b:77:5c:6b:0f:fa:74:e2:3c:b0:0e:b0:c2:07:f3:
                    a6:ae:c5:07:b8:1a:c9:c6:15:3d:f5:c8:db:c6:67:
                    e2:7e:02:50:4b:0d:d6:6e:94:4d:2a:7c:2b:34:9d:
                    1a:1f:cf:89:13:7b:05:c7:4f:ad:34:8d:b1:05:9c:
                    b3:32:4c:fe:f0:a3:47:d6:54:ab:06:4f:0e:b1:e2:
                    28:be:e8:9b:0b:e3:6a:d0:1d:7a:9e:07:85:eb:9d:
                    be:7c:5d:e9:ee:e5:4c:3d:57:a1:95:7a:d5:58:3e:
                    27:74:76:46:65:54:11:cf:8d:1f:09:5a:88:73:6e:
                    2e:d8:55:7e:39:ed:a2:77:7b:1b:6e:af:c5:a8:11:
                    32:60:2a:3e:af:0b:8e:31:ba:bc:f6:0b:26:14:1e:
                    14:91:ed:e3:47:37:ff:84:3a:9a:97:3d:34:99:74:
                    6b:49:21:72:a0:c9:64:e1:23:d7:aa:ae:3e:0a:af:
                    17:d0:06:f0:43:e3:ba:dd:1b:23:22:f4:d6:d1:89:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:60:A6:DD:2A:C5:FD:56:61:5A:ED:BA:AF:9F:D0:E0:01:31:7B:EA
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/E2Cm3SrF_VZhWu26r5_Q4AExe-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:b5:13:26:b5:a7:2e:7d:9e:f3:1d:8f:70:f5:b3:e2:62:7a:
         31:b7:0b:b0:c6:b2:18:07:6e:16:66:50:03:a2:02:ce:27:4e:
         67:97:ba:63:d4:66:98:27:ba:0d:e0:da:68:93:4f:1a:a7:39:
         66:54:7d:5a:45:16:3b:2a:81:aa:d8:c8:69:8e:bb:c7:a1:c1:
         66:3d:dc:a8:e7:f9:94:9e:4e:d5:ab:98:25:88:70:a2:c9:78:
         2b:a9:7a:04:ea:85:15:9b:14:fe:ec:09:52:52:00:70:c0:6a:
         b9:ea:ce:8d:6c:31:e1:e2:f4:34:39:ef:86:a2:3b:65:ac:6b:
         79:50:2b:f6:3f:10:49:e8:e7:5f:7e:2f:a9:67:e2:95:32:50:
         9a:80:96:20:97:41:76:4f:7e:b1:ea:64:f1:67:8f:41:d0:4a:
         dd:db:33:8f:52:be:41:19:be:ae:10:59:4b:8c:8b:3d:17:f2:
         ba:ad:ae:3b:c4:66:27:61:54:fe:58:f0:b7:22:f4:02:01:a2:
         29:e3:95:26:43:c7:54:72:0e:79:ad:f1:fd:92:1e:7c:e7:5b:
         03:31:cf:d2:25:7d:5e:9c:2f:70:80:73:bb:bf:32:92:2a:41:
         8c:81:84:0f:27:5b:99:04:af:0f:93:4b:fa:43:1f:57:e8:1a:
         e1:48:65:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd5UPYHVrc3zlhrcXS121F/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDY1Y2NmMWViZTU1NWIzNzUyNzE3ZTU5NWMyNzViY2Fk
MDBiNGUwHhcNMjMwNDEzMDYzMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzYwYTZkZDJhYzVmZDU2NjE1YWVkYmFhZjlmZDBlMDAxMzE3YmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZwnCytQ344EktCs2nRboaQhp796
jlhxBx6Pq73EpQ//x0pr8VcDj1UIGf2KKbLsy7x990lcP9CZFA1Ld1xrD/p04jyw
DrDCB/OmrsUHuBrJxhU99cjbxmfifgJQSw3WbpRNKnwrNJ0aH8+JE3sFx0+tNI2x
BZyzMkz+8KNH1lSrBk8OseIovuibC+Nq0B16ngeF652+fF3p7uVMPVehlXrVWD4n
dHZGZVQRz40fCVqIc24u2FV+Oe2id3sbbq/FqBEyYCo+rwuOMbq89gsmFB4Uke3j
Rzf/hDqalz00mXRrSSFyoMlk4SPXqq4+Cq8X0AbwQ+O63RsjIvTW0Yk8LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNgpt0qxf1WYVrtuq+f0OABMXvqMB8GA1UdIwQY
MBaAFHkGXM8evlVbN1JxfllcJ1vK0AtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTIt
MDE3ZWI1NzM1YjEzLzEvRTJDbTNTckZfVlpoV3UyNnI1X1E0QUV4ZS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTItMDE3ZWI1NzM1YjEz
LzEvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjsIMA0G
CSqGSIb3DQEBCwUAA4IBAQCztRMmtacufZ7zHY9w9bPiYnoxtwuwxrIYB24WZlAD
ogLOJ05nl7pj1GaYJ7oN4Npok08apzlmVH1aRRY7KoGq2MhpjrvHocFmPdyo5/mU
nk7Vq5gliHCiyXgrqXoE6oUVmxT+7AlSUgBwwGq56s6NbDHh4vQ0Oe+GojtlrGt5
UCv2PxBJ6Odffi+pZ+KVMlCagJYgl0F2T36x6mTxZ49B0Erd2zOPUr5BGb6uEFlL
jIs9F/K6ra47xGYnYVT+WPC3IvQCAaIp45UmQ8dUcg55rfH9kh5851sDMc/SJX1e
nC9wgHO7vzKSKkGMgYQPJ1uZBK8Pk0v6Qx9X6BrhSGXF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-fra.rpki-client.org