Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FeE_jZ_ufHwem0XS02cUW8K4BHM.roa
File:                     FeE_jZ_ufHwem0XS02cUW8K4BHM.roa (raw, json)
Hash identifier:          mKog/jbJh9Y3sX8vnSjKj7t29WtjKrwmJE/0WNVB+Rw=
Subject key identifier:   15:E1:3F:8D:9F:EE:7C:7C:1E:9B:45:D2:D3:67:14:5B:C2:B8:04:73
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       01835ADC9B8B986A5F56E49A16C36130D347
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FeE_jZ_ufHwem0XS02cUW8K4BHM.roa
Signing time:             Tue 20 Sep 2022 12:25:50 +0000
ROA not before:           Tue 20 Sep 2022 12:25:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     32181
IP address blocks:        89.116.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5a:dc:9b:8b:98:6a:5f:56:e4:9a:16:c3:61:30:d3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Sep 20 12:25:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15e13f8d9fee7c7c1e9b45d2d367145bc2b80473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:d9:ad:9b:70:e3:e9:bb:dd:16:3f:74:fb:
                    af:72:4c:64:b3:61:15:1c:51:c7:77:61:6d:69:e7:
                    16:f2:e1:5e:8d:f2:6a:13:50:3c:d8:b6:ab:3c:e9:
                    8d:1a:1a:00:af:b8:31:5b:c4:1e:70:2f:8b:4f:dd:
                    f4:b4:3f:94:c7:58:36:e6:82:dc:b2:07:2d:97:e9:
                    72:df:49:fb:59:17:e3:ba:db:9a:a8:11:9a:6f:78:
                    4b:43:d9:8e:02:c5:e5:96:f9:84:19:7c:49:8f:08:
                    b8:bc:5a:6c:29:aa:15:b1:fb:90:3f:93:3b:e6:c1:
                    6e:95:30:25:ff:60:ff:87:b0:d7:e1:92:79:99:16:
                    f1:9d:0a:e8:9c:89:e7:a6:81:9c:0c:62:a6:d7:db:
                    d1:85:dd:0c:4a:a3:ef:2b:e5:0b:a9:48:95:a1:8f:
                    a0:04:3a:fe:85:e0:f9:4b:82:d5:97:50:75:5f:6b:
                    49:a4:be:44:92:99:80:89:f2:a3:ab:30:4d:bb:24:
                    81:13:98:7e:b3:a1:71:56:3d:bb:f5:f9:9a:14:3d:
                    01:a8:30:9f:a2:11:53:f8:fc:e2:85:8d:4c:2b:f8:
                    0f:9f:9d:15:71:72:1e:a8:bb:90:66:f2:13:4e:ca:
                    53:0a:5e:a2:83:5e:fb:98:81:4b:2a:ae:10:51:6e:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E1:3F:8D:9F:EE:7C:7C:1E:9B:45:D2:D3:67:14:5B:C2:B8:04:73
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FeE_jZ_ufHwem0XS02cUW8K4BHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:5c:19:5a:f9:07:31:b6:3b:0d:54:ba:a1:99:bc:0d:fa:64:
         b9:5f:1d:aa:88:ac:d6:5a:d1:cb:12:1c:48:83:06:de:ba:c4:
         62:73:c2:1c:8d:d1:56:b5:56:0c:8f:d1:90:37:28:ec:1b:a6:
         a9:43:e4:27:af:dd:41:9c:d2:88:c6:ad:90:4d:42:53:f5:ee:
         d5:d6:4c:44:3f:d6:16:4d:b0:48:a4:b8:5a:c9:ff:2e:f8:56:
         52:57:de:1d:ac:59:76:0c:24:ac:1a:2c:8e:46:f8:19:11:16:
         61:ec:8a:65:07:f0:92:ec:36:e7:d0:bf:dc:6a:86:f5:52:f6:
         6a:a2:7c:92:c2:97:ba:20:9a:09:35:03:5a:d9:ae:d9:57:62:
         90:c6:8a:1c:4b:88:86:3a:25:77:f8:5d:f1:f7:69:44:55:69:
         bd:c4:52:0b:49:58:0f:de:94:b7:6c:c8:e1:53:9d:4f:e5:2c:
         e2:ae:ca:c9:18:d2:e4:c2:06:d5:1c:fb:73:e9:17:d8:28:8e:
         2a:f5:22:e6:b8:76:22:b7:0b:13:62:35:ae:70:25:9e:30:80:
         7d:37:25:79:d8:5d:74:3c:62:b4:98:3c:c6:ec:05:16:7e:10:
         53:4b:5e:d7:9e:67:c3:c5:cf:9d:f0:52:27:d0:86:dd:16:10:
         d8:41:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org