Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/uxVWriKzLL3-dm4QnLFK7fcGl0M.roa
File:                     uxVWriKzLL3-dm4QnLFK7fcGl0M.roa (raw, json)
Hash identifier:          yU7U2DMM0df5zb0rpF03RkOLZ+Va7MmHVPhRnKImA6M=
Subject key identifier:   BB:15:56:AE:22:B3:2C:BD:FE:76:6E:10:9C:B1:4A:ED:F7:06:97:43
Certificate issuer:       /CN=d80c2f9f39a454dcdd9731e52836611609e9aae7
Certificate serial:       01896478EBCBB7425E046CB79ED69C8F3944
Authority key identifier: D8:0C:2F:9F:39:A4:54:DC:DD:97:31:E5:28:36:61:16:09:E9:AA:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AwvnzmkVNzdlzHlKDZhFgnpquc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/uxVWriKzLL3-dm4QnLFK7fcGl0M.roa
Signing time:             Mon 17 Jul 2023 15:29:53 +0000
ROA not before:           Mon 17 Jul 2023 15:29:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        80.73.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:78:eb:cb:b7:42:5e:04:6c:b7:9e:d6:9c:8f:39:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80c2f9f39a454dcdd9731e52836611609e9aae7
        Validity
            Not Before: Jul 17 15:29:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bb1556ae22b32cbdfe766e109cb14aedf7069743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:bc:52:30:54:2c:dc:c4:44:c3:83:c2:f8:
                    21:78:54:c5:87:57:45:14:54:c0:e3:2d:8a:a6:60:
                    10:e5:de:27:bb:dd:f2:5e:8a:15:4b:0d:cf:61:6f:
                    88:fc:94:2f:22:04:34:b6:ca:18:d0:6c:fb:9a:77:
                    6a:51:41:7b:31:b2:7d:3c:00:d0:58:d3:7e:30:14:
                    2b:31:27:49:c1:9f:6c:1a:f9:b8:fe:26:f7:01:24:
                    1a:1d:c5:ca:48:c2:24:b5:2d:d3:ba:71:6e:8e:4d:
                    7b:d4:99:90:b1:92:fa:32:06:9a:11:27:64:37:fb:
                    2f:4b:8b:9a:b8:fe:03:40:e9:a0:4d:d6:f7:38:0c:
                    92:cf:8d:67:26:ef:52:db:bf:7b:69:99:ab:ca:9d:
                    66:f8:fc:e4:9f:80:5e:5d:b3:35:3d:87:b5:37:d1:
                    57:c4:bd:0f:d2:97:f2:a4:b7:a7:0a:fc:99:1c:bf:
                    21:70:24:ad:1c:0d:4d:98:31:73:33:64:dc:c2:8a:
                    5e:15:e4:a0:c6:85:6b:6a:86:ea:25:10:d9:0e:8e:
                    aa:1b:2e:31:bd:be:97:93:70:8c:cc:7d:0b:4b:6d:
                    78:ec:f4:9f:be:cd:13:c9:94:c1:c5:5e:6b:e5:a0:
                    1e:43:4c:e1:ce:a4:d1:03:42:4e:09:46:2b:ac:80:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:56:AE:22:B3:2C:BD:FE:76:6E:10:9C:B1:4A:ED:F7:06:97:43
            X509v3 Authority Key Identifier:
                keyid:D8:0C:2F:9F:39:A4:54:DC:DD:97:31:E5:28:36:61:16:09:E9:AA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AwvnzmkVNzdlzHlKDZhFgnpquc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/uxVWriKzLL3-dm4QnLFK7fcGl0M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/052fd3-11be-4ee4-a6cd-286aca1b8bdb/1/2AwvnzmkVNzdlzHlKDZhFgnpquc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ef:3d:6b:05:39:a8:79:e6:1d:24:c1:53:15:5a:9e:d0:6b:
         08:28:a7:85:00:28:a5:ae:a1:ea:92:20:51:c0:d7:9e:0c:3a:
         e4:b6:58:f3:fd:ce:9a:69:3e:3a:84:d0:38:27:7f:9f:ca:bb:
         c4:99:03:e6:6f:61:d0:7c:7a:cc:5e:64:ff:01:32:c8:c6:cb:
         76:1c:57:16:b8:4b:6e:6e:d5:b2:7d:31:42:5b:f4:51:a2:2e:
         d9:73:58:58:64:6b:d0:bd:33:5d:bd:26:a1:ab:d7:f1:6d:fb:
         a4:20:74:63:a7:a6:a1:99:30:1b:9d:bc:80:d0:b1:ba:45:d5:
         56:c7:8d:77:de:37:3e:4e:dc:76:50:69:2e:f8:d2:c7:6b:9c:
         c6:10:96:f3:c6:82:27:c7:c4:b6:32:6a:a7:fc:da:f9:89:0b:
         50:f8:b8:12:62:74:34:0a:b7:7e:c5:2a:08:65:b2:97:35:2b:
         03:de:ce:be:67:04:dc:ac:6e:98:bd:6a:3b:ec:93:e8:9d:de:
         4b:e8:d0:a7:79:55:5b:8b:48:25:1d:0e:e9:ec:06:c9:02:f2:
         ea:32:67:c7:99:1c:9c:24:37:13:a8:d7:63:c6:fd:52:48:16:
         8a:7e:64:6c:ef:0f:4c:11:7b:68:3b:b5:68:7e:24:58:48:c8:
         52:04:88:50
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 16 07:22:16 2023 by rpki-client on console-ams.rpki-client.org