Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/OLTLmuUb7HhgvsErfrF6c0t_Qtk.roa
File:                     OLTLmuUb7HhgvsErfrF6c0t_Qtk.roa (raw, json)
Hash identifier:          ycGggyfQB749AoW5jdnuHCP3Q0GbEXyiZ7BD0ds/r6U=
Subject key identifier:   38:B4:CB:9A:E5:1B:EC:78:60:BE:C1:2B:7E:B1:7A:73:4B:7F:42:D9
Certificate issuer:       /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial:       0688CBE4
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/OLTLmuUb7HhgvsErfrF6c0t_Qtk.roa
Signing time:             Sat 01 Jan 2022 12:56:30 +0000
ROA not before:           Sat 01 Jan 2022 12:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211715
IP address blocks:        193.105.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109628388 (0x688cbe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
        Validity
            Not Before: Jan  1 12:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38b4cb9ae51bec7860bec12b7eb17a734b7f42d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:35:09:d4:ef:ea:f6:8c:6f:70:ec:49:41:
                    56:64:cd:b9:c3:a1:ac:fc:2e:f3:b5:04:16:fc:d9:
                    10:1d:75:66:cd:8b:4e:a8:f0:f3:f4:69:95:3f:66:
                    f4:4a:9c:cc:cb:e4:0b:00:2e:cc:4c:7f:da:8a:cc:
                    9b:e4:bc:3b:99:59:e5:0b:5d:c0:8f:99:44:c4:10:
                    1d:60:2c:6e:2a:e2:8b:1a:aa:74:72:01:9d:70:63:
                    b3:05:0c:45:7e:0c:7a:75:c2:b8:d3:e3:3c:14:3d:
                    cf:61:8e:79:c1:5a:6a:52:a6:f4:83:70:7d:8e:f0:
                    75:4d:0f:89:f1:be:fe:85:c4:70:7d:00:68:5e:6f:
                    6a:0b:e3:43:39:38:2e:b9:e7:90:ff:f9:2a:65:ba:
                    69:14:dc:2e:10:bb:70:24:c6:14:00:98:a2:70:99:
                    8f:57:a9:d7:85:e9:1e:52:b8:09:82:86:ae:b8:3e:
                    14:d9:65:eb:c7:2e:66:b6:e3:2f:59:a8:75:dc:86:
                    2b:df:b5:c4:e5:f2:89:cd:74:b5:17:d5:1c:bb:29:
                    b8:ed:7d:ef:21:21:7e:b8:92:02:b9:ae:9d:aa:c5:
                    2d:b8:81:86:03:ae:fa:65:06:c8:93:cd:6e:39:cf:
                    10:da:af:81:51:ff:96:86:17:74:18:a7:12:3c:90:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B4:CB:9A:E5:1B:EC:78:60:BE:C1:2B:7E:B1:7A:73:4B:7F:42:D9
            X509v3 Authority Key Identifier:
                keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/OLTLmuUb7HhgvsErfrF6c0t_Qtk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:26:a4:9f:0b:3b:43:29:33:8a:01:45:d7:fe:f9:4d:1b:cd:
         27:16:6a:0e:ef:fe:60:de:97:3d:0c:88:de:b1:4d:cd:be:ec:
         85:f8:e4:c9:3d:7b:cc:4f:25:8d:8c:46:63:50:95:c7:5f:27:
         42:a8:85:8a:24:21:56:63:9c:d0:d6:b1:72:91:1a:54:22:4e:
         2e:0f:69:5d:e8:03:13:5b:d6:69:7b:79:f9:c2:68:f1:e9:b1:
         94:7d:06:86:87:fc:03:a6:47:07:38:62:b1:ac:df:34:0d:c9:
         c6:fc:47:a5:ce:5c:e4:c7:c9:69:73:49:51:2f:9f:50:61:29:
         05:b5:43:cd:af:8f:3c:26:ad:10:2f:58:cc:57:f4:69:e5:51:
         a3:88:f5:08:67:d3:36:40:57:88:c1:11:94:b8:c1:92:56:97:
         2e:3f:d3:87:06:cf:17:9c:76:76:f9:f8:5a:dc:ef:0f:de:6a:
         e6:3a:5e:77:d9:d6:02:4a:67:d1:8a:f2:97:c7:75:ab:c9:7d:
         1c:ce:cd:c3:d5:ce:32:e3:d9:15:72:05:83:a2:ea:96:ab:57:
         e4:34:15:67:fd:1d:22:dd:c2:a3:a2:99:18:d1:e8:57:a9:ec:
         ff:56:45:62:6c:ac:f7:f7:d1:1e:6c:44:f3:ef:8e:a7:68:4a:
         7b:9d:b1:ec
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBojL5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ODA4YWVkNmNmY2NmM2RhYWY0NGZjNGRjYTkwZWE1MTMyMTM5MDhjMB4XDTIyMDEw
MTEyNTYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhiNGNiOWFlNTFi
ZWM3ODYwYmVjMTJiN2ViMTdhNzM0YjdmNDJkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZyNQnU7+r2jG9w7ElBVmTNucOhrPwu87UEFvzZEB11Zs2L
Tqjw8/RplT9m9EqczMvkCwAuzEx/2orMm+S8O5lZ5QtdwI+ZRMQQHWAsbiriixqq
dHIBnXBjswUMRX4MenXCuNPjPBQ9z2GOecFaalKm9INwfY7wdU0PifG+/oXEcH0A
aF5vagvjQzk4LrnnkP/5KmW6aRTcLhC7cCTGFACYonCZj1ep14XpHlK4CYKGrrg+
FNll68cuZrbjL1moddyGK9+1xOXyic10tRfVHLspuO197yEhfriSArmunarFLbiB
hgOu+mUGyJPNbjnPENqvgVH/loYXdBinEjyQSbcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4tMua5RvseGC+wSt+sXpzS39C2TAfBgNVHSMEGDAWgBR4CK7Wz8zz2q9E
/E3KkOpRMhOQjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VBaXUxc19NODlxdlJQeE55cERxVVRJVGtJdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTEvOTM1ZjNmLTZlMzktNDU2OC05OTk1LTNjYzQ1YTc3M2ZlMS8x
L09MVExtdVViN0hoZ3ZzRXJmckY2YzB0X1F0ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEv
OTM1ZjNmLTZlMzktNDU2OC05OTk1LTNjYzQ1YTc3M2ZlMS8xL2VBaXUxc19NODlx
dlJQeE55cERxVVRJVGtJdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFpzzANBgkqhkiG9w0BAQsFAAOC
AQEAQyaknws7QykzigFF1/75TRvNJxZqDu/+YN6XPQyI3rFNzb7shfjkyT17zE8l
jYxGY1CVx18nQqiFiiQhVmOc0NaxcpEaVCJOLg9pXegDE1vWaXt5+cJo8emxlH0G
hof8A6ZHBzhisazfNA3JxvxHpc5c5MfJaXNJUS+fUGEpBbVDza+PPCatEC9YzFf0
aeVRo4j1CGfTNkBXiMERlLjBklaXLj/ThwbPF5x2dvn4WtzvD95q5jped9nWAkpn
0Yryl8d1q8l9HM7Nw9XOMuPZFXIFg6LqlqtX5DQVZ/0dIt3Co6KZGNHoV6ns/1ZF
Ymys9/fRHmxE8++Op2hKe52x7A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:04 2023 by rpki-client on console-ams.rpki-client.org