Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/dvobcUb-iNkmkOT4JJ5xzyxLJXw.roa
File:                     dvobcUb-iNkmkOT4JJ5xzyxLJXw.roa (raw, json)
Hash identifier:          kHuikIuaqHNSk1ACBUFGN8GzVaqXk11mB/xGZwONjLk=
Subject key identifier:   76:FA:1B:71:46:FE:88:D9:26:90:E4:F8:24:9E:71:CF:2C:4B:25:7C
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       018572E83749BFA3D19AF02DD67FA0E0B020
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/dvobcUb-iNkmkOT4JJ5xzyxLJXw.roa
Signing time:             Mon 02 Jan 2023 14:34:59 +0000
ROA not before:           Mon 02 Jan 2023 14:34:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51610
IP address blocks:        213.175.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:37:49:bf:a3:d1:9a:f0:2d:d6:7f:a0:e0:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  2 14:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=76fa1b7146fe88d92690e4f8249e71cf2c4b257c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:20:4c:8d:03:3e:91:c9:c2:38:b1:4b:5b:0f:
                    9c:ae:94:dc:ef:0e:06:e4:ae:d6:9b:40:5b:5b:64:
                    e3:0e:3f:d8:cd:9a:f6:e4:a1:dd:05:d8:85:59:61:
                    7f:80:48:eb:fe:b4:94:b5:5d:51:ce:2d:42:50:10:
                    f1:38:16:9f:61:58:3a:44:eb:fa:b5:7e:e1:52:d3:
                    0d:a9:06:2f:10:67:3d:f9:70:c5:b0:3b:89:bd:5d:
                    c3:a8:f4:f6:5b:c6:54:8f:ec:da:da:66:c1:cc:49:
                    1f:1a:05:e6:9a:f9:6f:00:38:34:8a:03:42:dd:87:
                    04:cd:6d:c8:5c:3b:29:20:a7:9f:55:43:ed:4f:0e:
                    fd:9f:5a:35:fb:61:ae:fe:ab:6f:9d:70:91:6b:5a:
                    a8:73:15:f1:18:13:04:d4:91:b0:64:51:58:5b:6a:
                    75:77:ea:83:3d:74:49:8e:11:9c:e2:44:a4:c9:e5:
                    66:2b:1f:c4:71:3e:74:62:7c:bd:ea:57:40:a3:db:
                    be:01:4a:9e:44:92:79:ac:5c:47:4f:f1:77:49:ab:
                    60:fb:1a:82:49:4e:93:7c:3d:23:11:79:73:61:cb:
                    18:6c:25:58:a7:01:c8:45:37:e9:0f:25:f0:cb:56:
                    56:c2:7b:e3:2d:35:48:b7:4f:f7:55:80:4a:b3:19:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FA:1B:71:46:FE:88:D9:26:90:E4:F8:24:9E:71:CF:2C:4B:25:7C
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/dvobcUb-iNkmkOT4JJ5xzyxLJXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.175.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:08:2b:71:a6:da:6d:2d:bd:c9:c7:f5:ba:22:db:2d:04:16:
         5b:64:4d:fe:a4:4e:8b:1a:3d:be:2f:5c:d3:40:85:a9:3b:3c:
         c9:f1:f0:3b:55:1c:12:96:04:52:a6:37:07:d2:83:4e:04:d0:
         8a:01:c8:39:a0:66:38:36:0a:38:df:46:e4:82:28:a6:8e:60:
         97:18:4f:14:85:3a:1e:b3:b2:a7:41:3b:f7:a0:d9:78:03:f3:
         e6:ea:dc:b4:58:97:c1:2f:0f:4c:2c:15:47:02:aa:02:f8:8a:
         05:7c:7d:eb:81:9e:50:f7:b9:d3:70:4e:d0:26:8f:e8:d0:82:
         f4:e1:22:43:6e:32:6f:0c:c7:af:4a:6f:bd:0e:c3:85:fd:8b:
         3f:65:3d:b7:2f:2c:a0:5d:53:e8:ff:0c:1a:24:34:cf:c3:e6:
         e5:0e:d2:0e:d5:03:3b:bb:16:a9:ff:35:f4:9b:98:63:0c:31:
         c8:c5:f2:bd:99:b2:21:99:48:1d:bd:c9:99:a5:35:17:d0:c0:
         e9:6d:85:29:47:1e:2d:92:fc:f4:32:ac:76:34:4e:da:c8:9e:
         92:c8:1e:86:4e:a5:19:ee:83:8e:60:2f:82:fb:01:2f:a9:cb:
         fa:05:0e:45:13:46:a2:2a:fa:15:f4:0e:0c:45:f1:35:91:61:
         f3:17:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org