Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/DRAGWgoLXc-QKcKfLQyFjgZsGKE.roa
File:                     DRAGWgoLXc-QKcKfLQyFjgZsGKE.roa (raw, json)
Hash identifier:          Q+B7gU/g7jgALN/+9ZY2hQ1gZHTmCMk7SmiD49pSi5o=
Subject key identifier:   0D:10:06:5A:0A:0B:5D:CF:90:29:C2:9F:2D:0C:85:8E:06:6C:18:A1
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       018572E82B70840500E94CF7866153E09473
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/DRAGWgoLXc-QKcKfLQyFjgZsGKE.roa
Signing time:             Mon 02 Jan 2023 14:34:56 +0000
ROA not before:           Mon 02 Jan 2023 14:34:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24921
IP address blocks:        213.175.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:2b:70:84:05:00:e9:4c:f7:86:61:53:e0:94:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  2 14:34:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d10065a0a0b5dcf9029c29f2d0c858e066c18a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:08:8e:5b:2e:f8:d2:0b:ab:64:21:31:ff:
                    1c:d4:d0:4a:ea:e8:75:b2:4d:2f:35:b1:f9:28:89:
                    23:d2:db:7a:e0:94:9b:db:c8:9d:54:61:59:a8:23:
                    c5:2c:1c:6b:e9:81:74:f8:e8:2c:89:d4:c8:3e:6a:
                    c9:0e:6f:f7:c6:bf:58:9f:60:f0:be:1d:54:44:7f:
                    cb:1e:2d:2b:c4:5a:55:dc:7e:63:7d:ab:d4:1a:01:
                    82:7e:5c:8d:7b:9d:92:5b:01:e1:6c:31:37:ab:02:
                    59:12:d1:be:ef:72:72:a6:e6:ce:29:a3:af:93:d5:
                    9f:c2:66:b5:e9:6a:6e:19:cc:b0:54:bb:98:5e:e7:
                    a4:ac:6f:2d:dc:b8:14:48:3a:0b:c2:28:90:7e:66:
                    3a:90:68:20:7b:11:d3:35:4d:db:d5:3d:4b:a6:6e:
                    20:6c:16:c0:01:73:10:1a:e7:88:75:9d:dc:29:3e:
                    b5:c8:b5:39:30:c3:53:de:7b:fd:f4:85:f8:01:ec:
                    23:40:53:2c:4a:c2:3e:7f:91:a7:e8:f5:bb:8b:09:
                    ce:c2:71:c5:12:78:e3:dc:0b:8e:a3:fc:85:f8:78:
                    92:19:5d:d0:3b:5c:3e:c9:bf:26:c0:1d:0d:1f:b7:
                    34:33:66:d1:a5:53:cb:9d:fa:98:13:41:00:5a:fb:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:06:5A:0A:0B:5D:CF:90:29:C2:9F:2D:0C:85:8E:06:6C:18:A1
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/DRAGWgoLXc-QKcKfLQyFjgZsGKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.175.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:73:b0:70:c5:d2:00:7b:e2:45:08:f8:2c:0e:f0:79:e5:9d:
         c4:9d:4c:52:d6:e8:59:06:1e:b3:c5:e4:e1:60:22:b3:ff:7b:
         f0:9d:77:5b:2b:b7:4f:10:05:79:51:84:5b:0a:82:55:3c:a4:
         a1:57:04:a3:56:ea:16:e3:4e:b2:f4:16:75:a6:50:41:d6:f2:
         5a:e0:f1:09:28:83:f0:3b:18:d8:6e:68:1f:10:60:df:6d:c7:
         c3:af:4e:73:2a:31:f7:07:d6:af:9b:ad:f5:74:48:5e:eb:fc:
         a4:1d:f8:35:1a:0e:bc:33:a0:38:11:b2:c1:9a:1c:07:df:27:
         01:f9:52:b5:43:fa:5d:6a:89:1b:b3:f3:ac:be:e9:1c:21:14:
         ef:48:ab:29:5d:68:07:7d:0d:f1:5a:2e:91:1c:15:8d:64:43:
         3b:4c:a8:83:f6:f3:a0:e7:9d:b6:eb:1f:8a:df:c3:49:da:25:
         2c:8a:7b:8f:8f:15:c8:ff:04:d4:c0:28:2a:35:15:e3:79:da:
         e1:2c:a3:3f:23:5c:cd:d5:64:50:73:aa:ab:8b:f4:19:1a:a9:
         93:34:f0:f2:15:5a:15:1f:08:d9:d1:4d:3d:f6:e4:9a:53:99:
         39:d1:8a:1d:2c:98:19:87:72:89:5c:80:fc:ad:98:0d:e8:ab:
         06:8e:d1:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6CtwhAUA6Uz3hmFT4JRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDEwMDY1YTBhMGI1ZGNmOTAyOWMyOWYyZDBjODU4ZTA2NmMxOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQkIjlsu+NILq2QhMf8c1NBK6uh1
sk0vNbH5KIkj0tt64JSb28idVGFZqCPFLBxr6YF0+OgsidTIPmrJDm/3xr9Yn2Dw
vh1URH/LHi0rxFpV3H5jfavUGgGCflyNe52SWwHhbDE3qwJZEtG+73JypubOKaOv
k9Wfwma16WpuGcywVLuYXuekrG8t3LgUSDoLwiiQfmY6kGggexHTNU3b1T1Lpm4g
bBbAAXMQGueIdZ3cKT61yLU5MMNT3nv99IX4AewjQFMsSsI+f5Gn6PW7iwnOwnHF
Enjj3AuOo/yF+HiSGV3QO1w+yb8mwB0NH7c0M2bRpVPLnfqYE0EAWvvIjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0QBloKC13PkCnCny0MhY4GbBihMB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvRFJBR1dnb0xYYy1RS2NLZkxReUZqZ1pzR0tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a9PMA0G
CSqGSIb3DQEBCwUAA4IBAQBhc7BwxdIAe+JFCPgsDvB55Z3EnUxS1uhZBh6zxeTh
YCKz/3vwnXdbK7dPEAV5UYRbCoJVPKShVwSjVuoW406y9BZ1plBB1vJa4PEJKIPw
OxjYbmgfEGDfbcfDr05zKjH3B9avm631dEhe6/ykHfg1Gg68M6A4EbLBmhwH3ycB
+VK1Q/pdaokbs/OsvukcIRTvSKspXWgHfQ3xWi6RHBWNZEM7TKiD9vOg55226x+K
38NJ2iUsinuPjxXI/wTUwCgqNRXjedrhLKM/I1zN1WRQc6qri/QZGqmTNPDyFVoV
HwjZ0U099uSaU5k50YodLJgZh3KJXID8rZgN6KsGjtEM
-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:47 2023 by rpki-client on console-ams.rpki-client.org