Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/Kiqx-QZjgx9jGtHuTpHCVeYGyAg.roa
File:                     Kiqx-QZjgx9jGtHuTpHCVeYGyAg.roa (raw, json)
Hash identifier:          wErGMF/EZIogfuO6oCnUgGeCwXbOD3lkMR4ubBJ2dGY=
Subject key identifier:   2A:2A:B1:F9:06:63:83:1F:63:1A:D1:EE:4E:91:C2:55:E6:06:C8:08
Certificate issuer:       /CN=09a861d281e0456cad92e39359751d9d728021c8
Certificate serial:       05F50D36
Authority key identifier: 09:A8:61:D2:81:E0:45:6C:AD:92:E3:93:59:75:1D:9D:72:80:21:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cahh0oHgRWytkuOTWXUdnXKAIcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/Kiqx-QZjgx9jGtHuTpHCVeYGyAg.roa
Signing time:             Sat 01 Jan 2022 15:06:00 +0000
ROA not before:           Sat 01 Jan 2022 15:06:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54600
IP address blocks:        193.243.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99945782 (0x5f50d36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a861d281e0456cad92e39359751d9d728021c8
        Validity
            Not Before: Jan  1 15:06:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a2ab1f90663831f631ad1ee4e91c255e606c808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:df:1d:ce:eb:31:03:46:21:08:66:83:7b:
                    6a:d9:2f:c1:b0:7b:b8:fd:2d:68:3b:df:6c:6b:22:
                    66:fc:58:9e:f5:22:49:4b:a9:5c:91:7e:90:ea:f9:
                    47:5b:51:0a:2a:41:6b:c2:6d:f8:b6:40:2a:f7:e7:
                    22:3b:2d:6c:2f:da:d5:0f:85:d5:0d:ae:7f:e1:4c:
                    42:0e:ef:6a:8e:26:41:64:62:fd:73:67:2a:64:2c:
                    ca:2e:97:8e:eb:ff:35:62:5a:a6:b9:ff:35:54:0d:
                    8e:6a:0a:a5:fc:48:ab:09:a5:f6:2a:7a:cb:91:37:
                    dc:2e:ab:3b:39:f3:4a:99:88:d5:25:3f:a3:8e:32:
                    d0:45:c1:94:9c:71:19:45:bd:c8:be:a4:e3:49:0a:
                    65:31:a8:51:18:2a:26:b3:a5:dc:3d:1d:3d:1b:df:
                    08:72:7a:ec:0b:cf:8d:89:b3:76:44:c5:f9:3d:ef:
                    9c:2c:ae:1b:fe:bf:f4:03:9f:eb:99:ca:7b:48:5f:
                    12:fa:ef:1d:2b:f2:63:d2:a5:e3:7f:4a:c2:f9:b4:
                    3a:64:72:5b:df:b3:46:a3:2e:27:75:d4:3a:28:b0:
                    aa:78:e4:a6:45:74:49:a6:8b:f2:ae:0a:77:d7:ed:
                    24:9a:12:f6:f8:78:4e:40:67:e2:84:43:8e:9d:c2:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2A:B1:F9:06:63:83:1F:63:1A:D1:EE:4E:91:C2:55:E6:06:C8:08
            X509v3 Authority Key Identifier:
                keyid:09:A8:61:D2:81:E0:45:6C:AD:92:E3:93:59:75:1D:9D:72:80:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cahh0oHgRWytkuOTWXUdnXKAIcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/Kiqx-QZjgx9jGtHuTpHCVeYGyAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bc92ab-243f-4687-a069-c976de13e1ef/1/Cahh0oHgRWytkuOTWXUdnXKAIcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:9d:74:98:0b:80:25:c4:75:f0:37:27:10:b5:50:25:84:
         73:c6:99:b3:0e:1e:1d:f6:b5:43:ec:84:1a:0f:af:2c:b1:0f:
         e6:4d:7f:1b:20:1d:68:a9:cb:be:4f:b2:28:8c:e0:9b:ab:30:
         63:40:ad:36:e4:cf:86:bb:82:83:c5:00:f4:a8:46:4b:a2:dc:
         65:fd:58:e6:c8:a3:9d:7e:44:7e:01:27:a1:f2:22:df:74:45:
         fc:f4:90:95:ff:31:c1:c0:9d:fa:9f:c6:9c:4b:c3:38:98:8a:
         8f:ea:9c:8f:79:ea:a3:5b:30:59:21:4f:98:c6:28:46:70:88:
         c3:43:bf:b7:57:b8:61:57:bf:b2:da:78:d9:90:ee:54:8f:b2:
         e7:45:13:64:16:87:e7:b0:f2:f1:24:7e:ff:11:13:38:f3:4e:
         81:39:f6:8a:4c:37:e2:4a:88:63:20:52:e8:ef:52:0d:29:f7:
         00:c2:96:07:54:a9:81:5a:fb:f6:5f:31:a0:15:db:45:75:86:
         58:e0:f8:2d:4e:a8:3b:ad:1b:b9:bb:a0:18:fe:3b:18:ef:65:
         53:56:c0:e4:bc:2d:5d:19:af:b2:13:35:60:fa:ea:c6:8a:54:
         65:b9:57:84:97:f0:44:57:0e:b9:ce:9c:72:0a:5e:25:b2:bc:
         47:a3:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:48 2023 by rpki-client on console-fra.rpki-client.org