Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/5-AYzLkxqko45mJwN26L9cLeXnw.roa
File:                     5-AYzLkxqko45mJwN26L9cLeXnw.roa (raw, json)
Hash identifier:          lQyqwQciYuoeuawI+aeIDjFQQws27Hnnms4XfjIe1BI=
Subject key identifier:   E7:E0:18:CC:B9:31:AA:4A:38:E6:62:70:37:6E:8B:F5:C2:DE:5E:7C
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       018572E82EA79315A00DEB72398AF8A55076
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/5-AYzLkxqko45mJwN26L9cLeXnw.roa
Signing time:             Mon 02 Jan 2023 14:34:57 +0000
ROA not before:           Mon 02 Jan 2023 14:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35407
IP address blocks:        80.233.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:2e:a7:93:15:a0:0d:eb:72:39:8a:f8:a5:50:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  2 14:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7e018ccb931aa4a38e66270376e8bf5c2de5e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4c:23:b4:fc:51:9f:1e:50:47:3a:76:40:51:
                    57:4b:57:b3:7f:17:ce:60:28:85:a1:71:a1:1c:7e:
                    dd:00:2f:e8:a6:70:e5:98:73:53:19:7f:15:10:78:
                    bc:2b:6f:95:d0:e1:5a:9e:1d:20:02:cc:f8:1c:99:
                    6e:52:03:74:c9:0e:33:6d:3c:9b:8b:b8:64:8c:01:
                    ef:f7:8f:d1:da:33:ea:2b:3b:11:3d:47:f9:26:cf:
                    77:3f:1e:22:44:65:13:fd:95:8f:3a:d2:3d:32:d9:
                    70:93:7c:48:c8:be:06:0b:79:54:51:5f:ae:c9:c9:
                    4a:0d:f8:44:06:3f:fc:16:fd:ef:ad:2a:19:ff:fa:
                    c8:9c:f7:17:9f:6f:b7:d8:d0:37:a5:d2:ac:13:48:
                    6c:2c:f9:0a:ea:fa:db:6c:d2:a0:d4:19:46:98:9b:
                    b6:d3:98:e9:b2:1e:43:41:89:2d:38:45:da:d7:dd:
                    4d:c4:cc:d1:24:60:42:f3:bc:1f:75:08:aa:65:87:
                    ec:81:aa:2e:60:c5:79:99:03:cb:47:c0:8b:05:e1:
                    55:7b:69:31:52:9c:e7:37:94:f6:ad:d5:bc:d9:8d:
                    63:ea:c6:f7:2b:4e:64:f5:3d:45:e1:95:a6:b6:a2:
                    71:6e:b3:ed:d6:4d:9c:75:9b:aa:e8:01:a7:07:da:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:18:CC:B9:31:AA:4A:38:E6:62:70:37:6E:8B:F5:C2:DE:5E:7C
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/5-AYzLkxqko45mJwN26L9cLeXnw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:60:a3:b7:72:0d:5f:c5:b9:5e:13:b3:34:d8:c9:0d:97:bc:
         8a:a2:d3:ba:79:a3:24:ad:2d:21:f7:8b:87:bc:44:93:f1:2d:
         33:bb:b3:af:c8:ae:c6:e6:0e:05:e4:56:f1:e1:64:b6:3d:69:
         b7:a1:25:a2:79:2a:98:58:df:af:11:f5:09:08:90:36:47:1b:
         35:a0:de:77:12:e1:47:a1:42:a3:cb:e9:a3:78:3d:c0:4e:75:
         3a:28:f3:9b:a4:7d:07:93:7e:56:fb:6c:e3:2c:eb:4e:2a:2a:
         7a:b5:70:da:02:79:32:11:2e:6b:8a:27:ee:72:0d:cb:83:f8:
         37:7a:c4:09:f2:33:3f:fb:60:10:7c:22:1d:8d:3f:20:75:48:
         b9:c7:0f:cc:6a:f0:5e:c6:cd:25:c0:23:34:00:54:3e:3a:32:
         ab:1d:8b:a5:ea:c4:a9:ce:90:19:e1:01:9b:5a:b7:e9:85:52:
         33:f4:b6:ce:4a:40:a5:eb:dc:fa:8b:16:b3:68:21:a0:47:53:
         3e:31:5a:0c:e7:c9:d6:b1:40:bf:c3:f8:e3:6b:c1:44:e8:56:
         96:0e:05:44:2d:46:ff:b0:1c:01:9e:f4:9d:9d:f6:08:21:b4:
         35:de:b0:93:ea:da:c3:80:a7:48:3a:6b:66:f4:25:43:92:04:
         27:dd:28:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6C6nkxWgDetyOYr4pVB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2UwMThjY2I5MzFhYTRhMzhlNjYyNzAzNzZlOGJmNWMyZGU1ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEwjtPxRnx5QRzp2QFFXS1ezfxfO
YCiFoXGhHH7dAC/opnDlmHNTGX8VEHi8K2+V0OFanh0gAsz4HJluUgN0yQ4zbTyb
i7hkjAHv94/R2jPqKzsRPUf5Js93Px4iRGUT/ZWPOtI9Mtlwk3xIyL4GC3lUUV+u
yclKDfhEBj/8Fv3vrSoZ//rInPcXn2+32NA3pdKsE0hsLPkK6vrbbNKg1BlGmJu2
05jpsh5DQYktOEXa191NxMzRJGBC87wfdQiqZYfsgaouYMV5mQPLR8CLBeFVe2kx
UpznN5T2rdW82Y1j6sb3K05k9T1F4ZWmtqJxbrPt1k2cdZuq6AGnB9pEgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOfgGMy5MapKOOZicDdui/XC3l58MB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvNS1BWXpMa3hxa280NW1Kd04yNkw5Y0xlWG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOn7MA0G
CSqGSIb3DQEBCwUAA4IBAQBTYKO3cg1fxbleE7M02MkNl7yKotO6eaMkrS0h94uH
vEST8S0zu7OvyK7G5g4F5Fbx4WS2PWm3oSWieSqYWN+vEfUJCJA2Rxs1oN53EuFH
oUKjy+mjeD3ATnU6KPObpH0Hk35W+2zjLOtOKip6tXDaAnkyES5riifucg3Lg/g3
esQJ8jM/+2AQfCIdjT8gdUi5xw/MavBexs0lwCM0AFQ+OjKrHYul6sSpzpAZ4QGb
WrfphVIz9LbOSkCl69z6ixazaCGgR1M+MVoM58nWsUC/w/jja8FE6FaWDgVELUb/
sBwBnvSdnfYIIbQ13rCT6trDgKdIOmtm9CVDkgQn3ShZ
-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org