Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa
File:                     mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa (raw, json)
Hash identifier:          /zmLnCGDllPkwg19s87tanFGnfif39OW33Gq5edDjec=
Subject key identifier:   9A:6E:52:16:56:05:A4:8F:ED:E3:F0:80:B6:FE:92:91:D6:8B:2A:A1
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       018572E82F44D9BB704FA0B57F4712A9064A
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa
Signing time:             Mon 02 Jan 2023 14:34:57 +0000
ROA not before:           Mon 02 Jan 2023 14:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41333
IP address blocks:        80.233.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:2f:44:d9:bb:70:4f:a0:b5:7f:47:12:a9:06:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  2 14:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a6e52165605a48fede3f080b6fe9291d68b2aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:8b:f1:a6:4f:48:54:25:3a:d6:18:db:9e:
                    87:7a:e8:53:af:8c:dc:b7:24:70:f4:81:92:3f:ae:
                    a9:1e:ac:22:36:4c:ae:fa:61:4c:70:9c:0b:bc:2f:
                    8a:61:97:b1:0b:c3:db:9a:da:b0:61:7c:91:1a:cf:
                    68:71:a5:73:49:0f:2b:3b:57:4c:67:8f:47:63:03:
                    fe:5c:14:8d:46:14:29:61:a8:e9:47:d8:a6:2a:e2:
                    10:75:14:4a:89:d7:41:d1:9b:1f:cb:71:5e:ce:3e:
                    e1:24:b0:28:45:82:25:7d:d7:a9:a8:05:26:b3:93:
                    20:19:3b:21:95:84:c1:d9:2a:e4:90:f2:32:14:e2:
                    31:7e:44:27:af:cf:a2:2f:35:07:bb:36:ae:bc:eb:
                    e7:51:62:99:0f:e5:d3:30:67:e1:23:39:41:90:17:
                    b9:6e:ac:70:e2:05:8f:f8:c6:3a:3d:91:bc:52:be:
                    92:8e:4a:c9:49:f3:1c:49:d5:a2:d8:6b:a2:04:47:
                    c8:01:84:92:96:3c:3f:71:bc:2c:ca:14:fb:d1:ad:
                    32:df:05:99:29:af:16:ea:b1:70:99:b7:ef:84:33:
                    01:49:fd:51:55:0b:3d:0e:5c:b4:90:fc:dc:48:d3:
                    65:66:75:d4:f6:5e:36:41:2e:22:99:6c:ef:f5:82:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6E:52:16:56:05:A4:8F:ED:E3:F0:80:B6:FE:92:91:D6:8B:2A:A1
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/mm5SFlYFpI_t4_CAtv6SkdaLKqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:57:f6:7e:a4:96:a1:cd:51:00:04:5b:b5:d4:7c:6c:28:d7:
         7b:bc:a6:1a:5b:50:3f:0f:8d:be:e4:b3:e4:87:9c:53:98:27:
         2f:1b:15:1e:fe:d1:b9:1c:bf:22:ba:1e:2e:e2:08:35:b2:92:
         6c:70:22:11:6e:08:c4:b2:e9:82:e1:e6:c5:0f:bc:0e:15:1c:
         43:26:b2:02:7c:e5:c4:f8:ac:c4:46:67:85:8b:46:e4:91:83:
         1b:c4:6b:d4:c8:b2:2e:e5:1c:b8:9e:c9:2e:b1:fe:1e:5e:a5:
         ee:67:d0:73:8b:7c:66:0d:28:b5:ab:e1:60:4d:2f:00:09:10:
         d2:4b:5f:42:b3:45:07:d6:8f:a9:1d:2d:38:a1:d2:6b:48:b5:
         83:61:76:ad:d8:15:ee:8d:6f:73:91:c3:6a:c8:56:5b:6b:b0:
         c6:91:fc:32:21:e1:8a:32:3c:cb:04:75:e6:83:21:e5:e0:3d:
         8d:e3:53:cd:6b:dd:6d:22:37:57:11:ef:34:95:5e:53:eb:e7:
         ce:3c:fb:b6:1a:25:81:fb:f7:10:5e:e4:44:c4:46:de:1a:d6:
         1d:1c:f6:96:a9:26:91:04:32:6d:0f:c8:ac:e9:92:73:b5:8f:
         75:5d:bf:93:3b:d6:01:8a:d3:71:0f:d4:5b:65:89:cf:72:1a:
         33:7d:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:47 2023 by rpki-client on console-ams.rpki-client.org