Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/N26Uhg49gyYj5hXANGfi5oJZebY.roa
File:                     N26Uhg49gyYj5hXANGfi5oJZebY.roa (raw, json)
Hash identifier:          3VNP7jMjquzmG3vUH9Gdswbp8WfstADln4fr8MclYEI=
Subject key identifier:   37:6E:94:86:0E:3D:83:26:23:E6:15:C0:34:67:E2:E6:82:59:79:B6
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       018293EC6F1E341E819D89202071C144DCAA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/N26Uhg49gyYj5hXANGfi5oJZebY.roa
Signing time:             Fri 12 Aug 2022 21:18:41 +0000
ROA not before:           Fri 12 Aug 2022 21:18:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140947
IP address blocks:        89.116.239.0/24 maxlen: 24
                          89.116.244.0/24 maxlen: 24
                          89.116.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:93:ec:6f:1e:34:1e:81:9d:89:20:20:71:c1:44:dc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Aug 12 21:18:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=376e94860e3d832623e615c03467e2e6825979b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:2b:cb:dd:c2:c5:d4:e3:35:e0:cf:a5:2b:
                    4c:35:bf:2b:c7:ac:96:67:c6:63:a3:50:1c:3f:66:
                    17:7a:cb:2d:61:57:4a:b2:63:13:62:c9:02:8f:e9:
                    b2:57:00:0f:ef:4d:54:0b:39:7d:1c:a0:81:5c:50:
                    a9:70:08:1e:1a:fe:c2:2d:10:24:bb:e4:87:b7:d8:
                    9e:d9:73:08:42:8c:1b:4a:1c:74:04:4e:9d:c2:2d:
                    bb:75:46:24:32:50:39:88:cb:86:aa:e1:6b:49:d2:
                    7a:29:f4:ff:52:fe:1b:ff:75:1e:6c:7f:4f:55:00:
                    0a:37:dd:b5:0c:67:d6:b5:38:55:a0:6b:5b:15:e4:
                    62:58:22:bb:46:26:fd:6d:32:e5:c1:8b:5e:1f:4c:
                    e1:22:b3:e5:53:67:2e:66:89:de:43:30:b6:da:8d:
                    27:5e:e0:2d:74:2e:01:d4:f7:c0:26:8d:f1:af:fd:
                    74:d7:bf:4b:7f:9b:9e:a7:99:61:0a:30:e0:66:17:
                    f1:eb:e0:99:1c:23:7b:48:a4:f8:55:da:1d:20:22:
                    d9:64:56:8b:ff:fd:9f:6b:24:b3:1c:e5:90:9a:97:
                    93:16:d8:a0:f3:a6:fb:55:f6:0d:c1:03:65:9b:73:
                    55:52:53:9b:50:0e:86:fc:76:f1:44:70:bc:aa:81:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:94:86:0E:3D:83:26:23:E6:15:C0:34:67:E2:E6:82:59:79:B6
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/N26Uhg49gyYj5hXANGfi5oJZebY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.177.0/24
                  89.116.239.0/24
                  89.116.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:08:62:28:aa:e3:c1:3a:9c:dc:8b:58:e6:a2:df:4d:4f:
         bb:61:2f:c1:5a:30:20:da:57:7c:d9:9b:28:29:5e:e0:de:e2:
         72:16:9f:30:b5:0c:88:8d:07:1c:dd:6c:e1:47:b1:9e:86:d3:
         de:ad:c6:25:d9:81:cb:9d:b4:89:c9:22:ac:8e:19:1c:67:40:
         dc:5d:c2:56:4d:4b:51:cc:c6:60:4b:85:a5:e3:0c:31:13:23:
         e9:08:3c:31:d0:1d:9c:b4:9d:f7:1b:02:aa:f6:a4:5e:ba:db:
         d1:be:1d:c1:d2:d5:5d:bc:bd:9f:0d:b0:38:2c:28:a3:4a:e1:
         3a:7c:e1:76:9d:a3:56:15:4b:58:c5:f7:41:29:b1:4e:e6:f0:
         40:28:cd:22:a8:62:93:21:9c:91:11:46:5a:95:d5:6a:85:70:
         08:16:cb:ec:b9:54:25:e5:82:a4:b9:07:e5:79:eb:42:13:2c:
         51:5c:2a:33:41:45:37:d8:c2:12:23:a5:d8:6a:2e:f4:ca:b1:
         8c:23:12:26:a4:1e:56:fe:f2:3e:0a:1e:c9:ec:0a:df:0b:16:
         08:92:cd:45:e0:2b:d7:01:70:1b:7a:d4:1c:bd:41:65:79:19:
         a4:9b:ca:13:0b:a7:77:56:4e:67:43:0b:49:ab:92:98:e4:2b:
         14:bb:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org