Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/b9suZEE_2xBeg5N-EWHiAD2R5WU.roa
File:                     b9suZEE_2xBeg5N-EWHiAD2R5WU.roa (raw, json)
Hash identifier:          pMi5FQMOhaP8ca44MqZGiCStmucHjkOF7WW6R71q8b4=
Subject key identifier:   6F:DB:2E:64:41:3F:DB:10:5E:83:93:7E:11:61:E2:00:3D:91:E5:65
Certificate issuer:       /CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Certificate serial:       01856E41C4F28B451C1E0FB51ABA219CDDAC
Authority key identifier: F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/b9suZEE_2xBeg5N-EWHiAD2R5WU.roa
Signing time:             Sun 01 Jan 2023 16:54:42 +0000
ROA not before:           Sun 01 Jan 2023 16:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59427
IP address blocks:        193.178.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:41:c4:f2:8b:45:1c:1e:0f:b5:1a:ba:21:9c:dd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
        Validity
            Not Before: Jan  1 16:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fdb2e64413fdb105e83937e1161e2003d91e565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:31:70:62:23:44:db:27:5e:5c:a8:ba:bf:
                    ef:27:ba:dc:f0:b0:7a:1e:0a:5e:a2:73:be:b9:ca:
                    f2:88:ad:67:8c:af:fa:59:ee:66:81:58:08:a9:cd:
                    42:ed:b3:a3:7b:66:18:e8:e9:68:7f:d1:4e:76:e5:
                    e4:8f:7c:17:ee:1f:56:4f:bf:63:13:6e:58:8a:2b:
                    a0:08:13:d5:d8:32:70:bc:88:28:6f:3b:ba:96:e3:
                    f6:13:4c:f8:08:b6:6f:bb:c3:f5:7a:d5:36:77:4b:
                    ab:77:46:a1:9b:93:51:49:5e:ca:ac:3e:97:cb:6f:
                    be:6f:d4:3d:1f:3a:bf:04:a5:7f:a3:e7:d8:e0:33:
                    4e:06:a5:b7:07:17:6d:7f:e5:fa:b0:f0:06:fd:0e:
                    12:72:0b:6c:2a:69:33:a1:06:9d:0c:29:df:8e:fd:
                    c1:4c:9a:da:42:8b:f8:55:c0:40:13:f2:36:34:ad:
                    ee:48:f7:7c:4d:2e:c5:ce:bf:77:df:63:9b:5b:5c:
                    0b:fa:1c:e0:51:76:40:0b:07:f7:8e:4b:43:1d:45:
                    61:87:a9:a1:88:f9:04:65:01:01:1a:08:9c:f2:08:
                    0d:d2:cb:71:a3:73:1c:3f:66:e4:16:f6:32:f2:76:
                    90:25:8e:af:39:72:54:42:f1:9a:02:c2:b0:2c:24:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DB:2E:64:41:3F:DB:10:5E:83:93:7E:11:61:E2:00:3D:91:E5:65
            X509v3 Authority Key Identifier:
                keyid:F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/b9suZEE_2xBeg5N-EWHiAD2R5WU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:3b:25:f2:03:b6:48:5d:9b:3a:66:5d:8b:b1:68:e7:73:69:
         67:c5:31:72:c3:ac:45:76:12:41:f2:03:e5:7a:be:03:93:f4:
         8a:bf:82:e0:5d:69:ad:20:f7:0a:be:50:b8:03:a7:41:6a:3f:
         72:03:5d:1e:82:e4:b0:d6:4a:ba:36:95:f3:f0:66:32:44:ba:
         8b:bb:6b:b2:98:a4:63:9b:94:f9:53:92:e7:7e:14:2c:2d:c0:
         b4:c8:49:e0:e5:74:65:e9:14:80:7e:55:77:e8:61:4a:05:1b:
         db:76:8a:6a:8d:e1:b9:0b:1e:0a:40:a7:c0:9d:bd:db:ec:3a:
         50:02:9d:a9:6c:e0:93:5f:ac:5a:df:eb:d0:71:d3:6f:54:c3:
         f0:aa:62:3e:52:d4:ae:8c:f6:89:5a:ec:2e:9c:39:fa:5a:f0:
         3f:87:91:48:02:41:a8:d4:b3:17:bc:b0:c9:63:81:5c:71:d6:
         02:a1:2f:54:02:c7:25:92:17:84:6c:d7:da:60:c6:59:13:b7:
         3a:c1:0a:75:a8:c4:20:5e:e4:a3:f9:7c:c7:f9:76:87:46:bb:
         8f:d1:79:ae:8c:62:e5:e8:5c:b1:aa:7d:f2:19:dc:2c:80:78:
         df:9d:ad:97:fb:d6:33:37:d4:97:06:61:8e:ff:36:a9:ed:16:
         85:17:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:07 2024 by rpki-client on console-ams.rpki-client.org