Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TVdlyBkIMm959bsgOUUphMf1O-o.roa
File:                     TVdlyBkIMm959bsgOUUphMf1O-o.roa (raw, json)
Hash identifier:          0UlCSr57F2zX0aqbu5BZB2ICZ9qqnqLF2kkgg341LKo=
Subject key identifier:   4D:57:65:C8:19:08:32:6F:79:F5:BB:20:39:45:29:84:C7:F5:3B:EA
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       018572E83A6D413894B8824AF0BABC57EC93
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TVdlyBkIMm959bsgOUUphMf1O-o.roa
Signing time:             Mon 02 Jan 2023 14:35:00 +0000
ROA not before:           Mon 02 Jan 2023 14:35:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199300
IP address blocks:        80.233.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:3a:6d:41:38:94:b8:82:4a:f0:ba:bc:57:ec:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  2 14:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d5765c81908326f79f5bb2039452984c7f53bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:53:4d:11:15:d8:f5:f8:91:e5:01:9a:35:
                    ea:2f:d7:54:b9:b6:1d:8e:12:f4:b4:88:40:49:c5:
                    21:a1:8c:2a:ce:5a:96:c7:b4:3c:5a:ad:4b:23:d8:
                    64:b2:44:52:bf:c2:e0:db:6f:4f:14:c7:5d:f7:a8:
                    ae:f4:de:cc:6b:1a:69:46:6d:fe:5e:57:c2:51:92:
                    8a:21:41:74:13:8d:9b:4d:87:89:57:d3:1a:e8:eb:
                    8d:d1:af:03:ec:2e:e1:f3:8b:f1:97:22:df:12:f5:
                    96:95:fe:44:1b:63:7e:9e:95:b3:d1:29:31:34:65:
                    23:61:ca:21:5e:1e:a9:85:5e:46:ba:fe:0b:a2:0c:
                    72:52:16:a9:d2:95:5f:0e:1a:2e:dd:58:0a:a2:4c:
                    d0:9d:1d:d1:03:6c:cf:62:10:26:e4:d0:df:2f:5f:
                    0b:89:41:86:aa:b5:30:b9:a8:d6:0d:8f:86:a4:2b:
                    15:49:e3:92:35:00:be:5d:3a:87:ac:e6:37:3a:30:
                    f0:22:29:ae:61:5b:9b:53:e9:17:24:fb:53:10:df:
                    8e:d3:1f:12:e2:85:df:c9:65:e8:19:18:93:89:35:
                    5a:7c:f3:74:a8:87:94:71:3b:c4:98:c9:ba:19:46:
                    34:67:2c:e0:37:23:72:0b:1f:19:2c:0d:38:65:77:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:65:C8:19:08:32:6F:79:F5:BB:20:39:45:29:84:C7:F5:3B:EA
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/TVdlyBkIMm959bsgOUUphMf1O-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:d3:9c:b3:0b:76:7e:f6:a8:3b:64:63:a9:71:64:da:95:fa:
         fc:01:71:6a:fa:80:38:2c:43:dd:1e:18:9e:23:4b:ff:b0:cb:
         fd:f9:07:c8:8c:cc:8c:be:1b:50:37:50:03:5d:b6:bd:a9:e3:
         84:33:3b:b2:91:d9:64:97:d4:94:df:c9:8e:de:68:c9:22:d9:
         14:df:0d:01:fe:b4:67:4f:e1:c1:03:06:1e:e5:44:91:0d:84:
         ed:5a:ae:db:cc:e6:68:47:22:20:21:48:e1:8d:15:1c:21:67:
         df:ce:dd:6d:9c:5d:63:bd:07:95:ea:87:2e:73:c4:c5:5e:ad:
         65:f0:7b:55:04:0b:83:05:92:1e:b6:1d:4f:db:93:a2:df:d4:
         eb:07:43:27:19:a5:33:18:d7:48:70:00:04:10:06:9e:37:2a:
         32:35:ac:3c:eb:f5:61:6e:58:e4:2b:2f:28:69:fc:a3:13:bf:
         c3:f9:61:cb:d0:29:5d:69:8c:02:7c:e5:de:95:ec:f7:97:76:
         03:5a:44:e9:22:32:19:fa:eb:7a:23:d6:4c:fc:22:98:fc:b0:
         2d:56:b3:ad:d8:f7:7d:5b:0b:67:e0:14:6f:db:3f:fd:fd:00:
         ee:23:dc:53:4a:34:de:ff:8f:ff:92:84:79:14:34:a4:f2:e0:
         08:9c:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org