Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/XSncXPtQFrR6OnvjwCgjlXBOnuo.roa
File:                     XSncXPtQFrR6OnvjwCgjlXBOnuo.roa (raw, json)
Hash identifier:          rd3Hq9XOP2VOFYgoOm/3MT8hh96eW3ccA06wMc+ZiZE=
Subject key identifier:   5D:29:DC:5C:FB:50:16:B4:7A:3A:7B:E3:C0:28:23:95:70:4E:9E:EA
Certificate issuer:       /CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
Certificate serial:       01856E0B0768353FBCEFE7AEA669D5E7EA06
Authority key identifier: B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/XSncXPtQFrR6OnvjwCgjlXBOnuo.roa
Signing time:             Sun 01 Jan 2023 15:54:54 +0000
ROA not before:           Sun 01 Jan 2023 15:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        146.255.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:0b:07:68:35:3f:bc:ef:e7:ae:a6:69:d5:e7:ea:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
        Validity
            Not Before: Jan  1 15:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d29dc5cfb5016b47a3a7be3c0282395704e9eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:fa:70:7e:4f:ab:4a:ec:14:6c:f2:bc:11:
                    8a:db:c3:11:d9:80:16:0e:93:2c:39:fe:4a:df:44:
                    f1:e0:b0:96:35:fc:d8:63:97:c0:11:21:7c:aa:ff:
                    6e:b6:70:e5:07:36:1b:80:2d:d9:63:3d:cb:70:d5:
                    b0:a5:3f:34:6d:89:a1:16:70:94:5b:44:05:7b:53:
                    94:19:e5:ff:18:45:d7:e1:60:50:95:65:2f:b2:98:
                    af:b5:91:7a:2b:83:37:90:95:6b:3a:c3:00:be:c0:
                    45:6f:c5:9a:db:ae:58:73:eb:d1:a9:21:3c:01:c9:
                    ff:f0:62:ab:be:8a:25:bf:2b:82:e5:d0:a6:bd:23:
                    d4:49:45:dc:c4:69:11:03:cd:06:51:28:14:a3:e6:
                    a1:bc:26:46:a6:ff:f2:3e:74:6f:55:93:3e:d4:83:
                    e0:9e:29:d7:5b:d1:96:f3:fc:6e:91:74:54:01:59:
                    ff:ff:26:3d:08:23:d4:99:a2:09:b6:d2:e2:5a:f1:
                    44:52:f7:d6:99:eb:71:63:66:e6:1b:d9:0b:c8:4a:
                    97:27:18:74:2f:7a:96:53:42:c8:51:33:aa:ba:01:
                    c6:d9:06:ea:25:b6:e5:9c:bd:73:16:49:fc:24:59:
                    c3:01:c0:86:2b:6b:bc:06:24:3f:b2:90:fa:fc:8a:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:29:DC:5C:FB:50:16:B4:7A:3A:7B:E3:C0:28:23:95:70:4E:9E:EA
            X509v3 Authority Key Identifier:
                keyid:B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/XSncXPtQFrR6OnvjwCgjlXBOnuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/s76g2lblX6LrUA8VDcR47Ryzna8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.255.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:25:88:e3:d6:61:39:a3:f7:57:4b:a5:3a:2a:04:72:11:61:
         12:d8:7e:6a:47:d7:c0:36:c0:6c:b1:94:52:86:0a:c6:bb:a1:
         6f:58:c5:d9:f1:60:71:36:00:dd:04:ef:18:78:46:41:0b:4e:
         34:14:a4:ca:ae:71:4f:b6:8d:16:5c:52:e3:22:b4:2d:46:8f:
         40:5e:cb:bb:21:db:9a:d1:13:f8:09:f4:28:8f:45:8c:44:a7:
         c5:2d:cf:30:44:23:76:7a:e4:f7:da:29:23:48:23:9a:02:74:
         0e:44:50:ac:29:c2:06:1d:70:24:19:3c:23:84:e6:7a:20:f7:
         f1:b4:bb:13:d5:15:bb:f9:4a:31:d5:f7:2c:77:d3:ab:db:9c:
         0f:f8:d5:03:e8:e5:c6:c1:95:5b:a9:c1:bc:bf:98:a8:61:ce:
         72:8c:d5:d0:c3:b4:24:fa:92:73:bb:8a:a5:93:5c:04:de:01:
         e1:72:1a:5f:93:9f:d6:ca:5e:74:b3:48:97:66:0d:17:59:d2:
         0f:ff:6e:cb:30:e4:a9:9f:9d:1c:75:f9:c0:84:b7:e3:41:da:
         68:17:fd:8e:52:e4:cf:62:50:91:e0:f3:f2:87:8d:95:f8:88:
         4a:24:c0:5d:f4:56:10:ba:64:2b:6d:21:a3:9a:e7:2b:d3:06:
         47:6a:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 09:03:20 2023 by rpki-client on console-fra.rpki-client.org