Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/uYRbIth7MEiUWApeFbu6ZbsdBCE.roa
File:                     uYRbIth7MEiUWApeFbu6ZbsdBCE.roa (raw, json)
Hash identifier:          Ag+QZBNDoAsI9i5e8QLTDQwt6rpPOzib5hIfe0hXJo4=
Subject key identifier:   B9:84:5B:22:D8:7B:30:48:94:58:0A:5E:15:BB:BA:65:BB:1D:04:21
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       018316CE04D06355C7F168BDBE592A1AAC92
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/uYRbIth7MEiUWApeFbu6ZbsdBCE.roa
Signing time:             Wed 07 Sep 2022 07:15:43 +0000
ROA not before:           Wed 07 Sep 2022 07:15:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55720
IP address blocks:        89.116.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:16:ce:04:d0:63:55:c7:f1:68:bd:be:59:2a:1a:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Sep  7 07:15:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9845b22d87b304894580a5e15bbba65bb1d0421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:da:db:36:ab:8c:34:4e:88:c1:cc:73:a0:
                    26:42:4f:4c:11:bf:78:30:6a:5c:0f:11:22:76:55:
                    06:b0:fa:b4:f7:64:ed:85:73:21:2c:67:96:f8:4d:
                    39:d5:73:42:c3:c9:ac:7b:53:fd:e6:61:7b:54:2c:
                    fb:1b:d3:1d:fc:3a:fb:37:61:19:b1:b3:28:d1:35:
                    53:eb:bf:21:9b:f9:4e:55:d3:57:c2:6b:f7:68:61:
                    ae:f7:bb:94:ac:40:77:be:02:b6:6f:fd:10:fa:07:
                    1a:b3:1a:40:4e:f6:88:61:5c:80:8e:d2:7c:de:89:
                    b9:bb:b3:00:70:97:c4:fe:c0:dc:5b:dd:e1:b4:a2:
                    a8:2a:32:27:d9:de:c3:8f:9f:fe:ed:e8:ba:67:2a:
                    be:af:bb:da:6f:a2:f8:6e:a7:ec:ab:98:b3:1f:a8:
                    08:76:df:81:93:df:0c:69:f0:92:d5:ca:b8:cb:47:
                    77:ad:3c:d0:5b:22:d7:d7:cb:41:76:59:3f:26:d0:
                    32:0d:27:30:80:c4:6a:21:0f:a0:c5:1d:02:0a:0b:
                    f2:bd:45:22:30:ab:85:f9:77:75:19:5b:11:84:34:
                    67:26:f4:e9:c7:c1:ed:27:5f:04:fd:89:b5:8e:36:
                    8e:d5:49:24:21:02:73:8b:ab:c7:e0:dd:72:24:62:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:5B:22:D8:7B:30:48:94:58:0A:5E:15:BB:BA:65:BB:1D:04:21
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/uYRbIth7MEiUWApeFbu6ZbsdBCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:dc:3f:cc:e3:d6:17:1a:5a:ba:c5:07:b8:6d:9a:f0:7b:7d:
         89:dc:03:60:0a:c0:38:7a:18:8b:1d:2b:9b:de:e5:81:73:ca:
         d3:17:fb:ee:5a:3c:eb:af:06:ae:0c:0c:2c:46:32:a4:fb:b4:
         a7:af:56:f7:3e:2e:21:ce:a8:d0:30:21:77:44:34:49:61:6d:
         4e:65:a0:9b:06:6a:81:2e:e0:f3:fd:c7:b1:8a:7a:31:c7:16:
         3f:d1:35:1e:fa:43:06:03:dc:4a:4c:84:0c:2e:26:47:5b:11:
         c6:3b:39:2a:31:ba:67:38:3f:8a:e0:e3:60:93:df:a2:84:37:
         45:2b:16:e6:c3:0c:44:26:0e:f9:72:50:82:12:5b:1f:91:08:
         44:67:59:b0:62:3f:08:7b:51:22:de:a1:50:e5:dd:0c:7c:c2:
         bd:8e:08:a5:48:71:de:33:9e:d8:bd:6c:e8:bb:32:2d:e6:86:
         49:dd:b0:e0:2e:e7:ba:68:bf:fa:82:fc:67:1f:cd:dc:4e:0d:
         46:d5:9e:6f:8e:37:39:31:bb:d3:dc:4f:0b:bf:4e:93:d7:7c:
         b1:63:d6:3a:25:0c:29:c9:79:92:09:b3:ef:8b:02:5a:43:25:
         58:bf:43:4f:2f:d0:39:41:2e:17:6b:c5:06:f5:87:42:c7:70:
         41:f7:01:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMWzgTQY1XH8Wi9vlkqGqySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwOTA3MDcxNTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTg0NWIyMmQ4N2IzMDQ4OTQ1ODBhNWUxNWJiYmE2NWJiMWQwNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt3a2zarjDROiMHMc6AmQk9MEb94
MGpcDxEidlUGsPq092TthXMhLGeW+E051XNCw8mse1P95mF7VCz7G9Md/Dr7N2EZ
sbMo0TVT678hm/lOVdNXwmv3aGGu97uUrEB3vgK2b/0Q+gcasxpATvaIYVyAjtJ8
3om5u7MAcJfE/sDcW93htKKoKjIn2d7Dj5/+7ei6Zyq+r7vab6L4bqfsq5izH6gI
dt+Bk98MafCS1cq4y0d3rTzQWyLX18tBdlk/JtAyDScwgMRqIQ+gxR0CCgvyvUUi
MKuF+Xd1GVsRhDRnJvTpx8HtJ18E/Ym1jjaO1UkkIQJzi6vH4N1yJGKo4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmEWyLYezBIlFgKXhW7umW7HQQhMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvdVlSYkl0aDdNRWlVV0FwZUZidTZaYnNkQkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSMMA0G
CSqGSIb3DQEBCwUAA4IBAQC63D/M49YXGlq6xQe4bZrwe32J3ANgCsA4ehiLHSub
3uWBc8rTF/vuWjzrrwauDAwsRjKk+7Snr1b3Pi4hzqjQMCF3RDRJYW1OZaCbBmqB
LuDz/cexinoxxxY/0TUe+kMGA9xKTIQMLiZHWxHGOzkqMbpnOD+K4ONgk9+ihDdF
KxbmwwxEJg75clCCElsfkQhEZ1mwYj8Ie1Ei3qFQ5d0MfMK9jgilSHHeM57YvWzo
uzIt5oZJ3bDgLue6aL/6gvxnH83cTg1G1Z5vjjc5MbvT3E8Lv06T13yxY9Y6JQwp
yXmSCbPviwJaQyVYv0NPL9A5QS4Xa8UG9YdCx3BB9wGD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org