Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/GvTrFibFLmYDBgHUtTR3x7K6Edg.roa
File:                     GvTrFibFLmYDBgHUtTR3x7K6Edg.roa (raw, json)
Hash identifier:          7mAB7dWXpa2ecvnYQ3NESVbKZgTqTuD13tQMC4FK/eY=
Subject key identifier:   1A:F4:EB:16:26:C5:2E:66:03:06:01:D4:B5:34:77:C7:B2:BA:11:D8
Certificate issuer:       /CN=d50dde56b292f82b1e525788123678ce51f83bd6
Certificate serial:       01896478EC7F00E00146361435CDEAB1C891
Authority key identifier: D5:0D:DE:56:B2:92:F8:2B:1E:52:57:88:12:36:78:CE:51:F8:3B:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/GvTrFibFLmYDBgHUtTR3x7K6Edg.roa
Signing time:             Mon 17 Jul 2023 15:29:53 +0000
ROA not before:           Mon 17 Jul 2023 15:29:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202656
IP address blocks:        193.28.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:78:ec:7f:00:e0:01:46:36:14:35:cd:ea:b1:c8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50dde56b292f82b1e525788123678ce51f83bd6
        Validity
            Not Before: Jul 17 15:29:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1af4eb1626c52e66030601d4b53477c7b2ba11d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:a7:ba:d4:3d:75:59:44:9b:98:04:12:c6:
                    e8:9d:60:c7:32:77:81:83:7a:b3:d0:1e:41:24:00:
                    d2:d5:f1:ad:7c:d0:df:c1:e7:a2:c2:5c:5a:99:26:
                    0d:52:52:e8:14:9e:30:ec:66:75:65:70:92:65:28:
                    93:40:51:08:84:10:f1:7e:5b:36:0a:5b:ed:50:b8:
                    b2:ad:e1:2a:fb:36:92:f0:35:cc:fd:b2:bd:0a:e9:
                    f8:a2:c2:e0:75:14:d0:ca:d3:11:ab:7b:c4:8a:63:
                    9a:41:48:b6:5b:5a:0b:84:b0:ae:b2:b4:2c:8a:6d:
                    28:ed:85:a2:aa:33:86:5c:5c:22:d7:b7:e0:10:b0:
                    11:32:77:69:27:41:c4:31:26:a6:65:85:2d:08:ae:
                    23:07:c9:b5:7d:b8:9b:ea:f0:a1:bf:53:69:fe:8b:
                    1a:07:51:e5:a3:84:bc:cc:dd:8f:19:63:3b:2c:9f:
                    16:2e:da:8a:43:b9:89:dc:2b:d9:36:44:86:8a:97:
                    10:c9:cb:c5:b0:9c:1b:ac:f5:0d:4f:5a:43:e6:d6:
                    10:c4:d9:64:9a:08:c4:74:6f:ed:27:f8:5b:13:ee:
                    f6:1e:4d:27:8e:f4:46:19:2c:f4:22:06:09:75:01:
                    11:2d:f2:74:75:d9:95:69:5f:1a:e2:df:27:14:6c:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:EB:16:26:C5:2E:66:03:06:01:D4:B5:34:77:C7:B2:BA:11:D8
            X509v3 Authority Key Identifier:
                keyid:D5:0D:DE:56:B2:92:F8:2B:1E:52:57:88:12:36:78:CE:51:F8:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/GvTrFibFLmYDBgHUtTR3x7K6Edg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:b8:10:88:26:8d:ac:6d:8c:db:08:bc:7e:fe:65:e1:84:
         e2:31:ce:85:f1:8b:8a:c9:6f:6f:3c:19:3d:b5:f9:56:20:97:
         f9:13:6a:ff:86:8e:3a:b6:cc:17:65:70:d6:24:7c:cd:12:38:
         7c:aa:da:86:7f:47:e9:ef:e9:0b:b9:30:b3:c5:ca:88:b0:1f:
         2c:81:cf:ed:a9:8a:8b:99:f3:36:7a:e5:72:55:72:15:46:85:
         d4:33:b7:82:a1:f2:d1:f9:8e:ef:53:bd:9c:5c:bd:2e:35:6a:
         f8:3a:45:e1:6a:bc:71:50:47:9f:b6:51:d9:d1:e8:5e:d6:47:
         95:2d:af:d9:7c:a1:d6:12:bc:ad:e4:fd:e4:70:36:99:36:f4:
         af:02:75:16:1d:fa:6e:00:2d:e5:ec:c5:83:5d:44:ad:78:8e:
         c5:e7:74:ac:da:45:aa:cc:87:93:a8:7b:88:1a:3b:1a:90:84:
         e8:24:d3:ac:17:72:47:26:b8:57:b3:09:3b:4f:5c:b4:97:fd:
         e1:e2:7f:70:8e:41:53:a9:c7:c1:33:36:4d:e8:55:5d:0e:e9:
         9a:52:e1:9d:4d:52:15:5e:43:35:e4:7b:f1:9e:9e:a1:f2:d5:
         4e:2d:0a:b6:11:b7:39:a1:86:79:60:39:3c:6e:c7:bd:6f:b5:
         e4:e5:bc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 07:43:41 2023 by rpki-client on console-ams.rpki-client.org