Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/R6xi-NLfmoHgKEt9P1HuhonVKgw.roa
File:                     R6xi-NLfmoHgKEt9P1HuhonVKgw.roa (raw, json)
Hash identifier:          eM0JpCdaK3y/HnNwwVEVU+w8od2IBLTJHRmaMTl5hdc=
Subject key identifier:   47:AC:62:F8:D2:DF:9A:81:E0:28:4B:7D:3F:51:EE:86:89:D5:2A:0C
Certificate issuer:       /CN=e65ba1e901ad59eb7be4c3375236897a54c4329e
Certificate serial:       02D736BB
Authority key identifier: E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5luh6QGtWet75MM3UjaJelTEMp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/R6xi-NLfmoHgKEt9P1HuhonVKgw.roa
Signing time:             Sat 01 Jan 2022 14:58:06 +0000
ROA not before:           Sat 01 Jan 2022 14:58:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212356
IP address blocks:        193.162.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47658683 (0x2d736bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65ba1e901ad59eb7be4c3375236897a54c4329e
        Validity
            Not Before: Jan  1 14:58:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47ac62f8d2df9a81e0284b7d3f51ee8689d52a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:06:fc:6f:8f:b5:d4:b0:d1:90:95:15:38:
                    70:e6:9e:39:46:7d:6b:d1:1c:8a:ff:0f:b6:9b:38:
                    c7:9f:e6:b2:49:e7:34:a6:f1:fd:55:e6:54:5e:36:
                    56:24:65:dc:42:c3:08:e5:96:9d:fe:38:23:b7:e2:
                    42:8c:6b:5c:c8:39:2a:99:5b:6b:1d:12:6d:38:ab:
                    b5:14:d2:74:11:1b:f3:bc:0f:cd:a5:b5:51:3f:f8:
                    ec:e6:8d:d1:09:16:eb:56:9e:28:4e:96:bc:20:f5:
                    4c:2a:ea:c5:b6:4f:30:01:6a:3f:83:1d:2c:23:86:
                    d6:6c:bd:fa:33:bd:19:02:1b:e6:fe:fb:1d:d8:fc:
                    3a:83:65:3b:84:a2:2f:3f:8e:1a:06:9a:ad:04:ea:
                    11:dd:09:60:b2:be:10:26:0d:1c:d6:f4:d2:b4:4a:
                    47:93:80:5b:f0:c9:63:dc:fe:9a:8b:b7:ed:d1:98:
                    30:05:7a:8c:3a:b0:c7:c6:4a:fd:45:9c:ed:56:32:
                    2e:0f:e7:58:cd:af:01:55:ae:17:34:40:0f:95:ee:
                    ca:3a:f6:f4:0a:88:28:70:58:ef:64:19:74:41:8e:
                    91:4d:60:f9:7b:cc:16:68:22:79:b1:a7:af:d7:9e:
                    53:2b:30:67:58:b0:76:d6:b5:64:c2:6d:ac:13:5a:
                    6f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:62:F8:D2:DF:9A:81:E0:28:4B:7D:3F:51:EE:86:89:D5:2A:0C
            X509v3 Authority Key Identifier:
                keyid:E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5luh6QGtWet75MM3UjaJelTEMp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/R6xi-NLfmoHgKEt9P1HuhonVKgw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:39:10:71:bb:76:7f:ca:68:fe:f3:89:85:39:f1:6d:ac:e1:
         5b:6e:4d:99:14:43:e2:6a:ed:71:6a:31:d3:39:bb:33:aa:0c:
         e8:f8:21:0f:f9:f6:e3:f5:d7:64:20:e3:f3:83:0c:fa:7a:5c:
         39:b3:84:b8:9d:4e:b5:a1:4d:1c:13:88:49:19:15:32:64:cb:
         91:05:11:20:09:ca:2b:df:eb:19:43:14:ef:86:fe:67:c0:08:
         4f:5f:92:0c:a0:8c:55:19:e9:fa:12:92:0d:7f:4d:50:39:c3:
         d2:83:e6:f6:88:7e:d2:eb:9d:ff:c9:1f:90:60:1b:6c:8d:92:
         63:8b:f8:66:15:60:52:5a:fe:2c:3b:f3:c8:10:3a:dd:34:dd:
         4a:72:0e:17:4a:69:fe:57:5f:d1:11:71:10:f2:6d:9d:65:a0:
         05:c6:11:71:2b:b9:31:b5:bb:67:41:97:16:08:07:77:80:c2:
         5d:ac:17:6f:a7:41:5c:47:aa:94:6f:77:55:eb:39:61:df:dd:
         6c:95:3a:53:d2:cf:43:54:7a:7a:1f:7e:74:57:ba:33:53:9c:
         27:37:e1:33:d8:0d:15:7a:ab:d7:9b:fe:a5:e7:ff:24:52:d5:
         00:b0:96:1c:33:2e:bd:8c:59:a0:d3:78:9e:5c:a2:f4:01:cf:
         d5:9f:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:27 2023 by rpki-client on console-fra.rpki-client.org