Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/pRlm3YoYESLrSA0RevjGqC34EsY.roa
File:                     pRlm3YoYESLrSA0RevjGqC34EsY.roa (raw, json)
Hash identifier:          Jel2iT8sAA/AOGckfUbkstqUn614Ew6uUuQUHQSKYAM=
Subject key identifier:   A5:19:66:DD:8A:18:11:22:EB:48:0D:11:7A:F8:C6:A8:2D:F8:12:C6
Certificate issuer:       /CN=7f7a8875274853b0707c36501152f890588cdb21
Certificate serial:       0185EE9EE17268A6865C9B14F4B84E7D9CB2
Authority key identifier: 7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/pRlm3YoYESLrSA0RevjGqC34EsY.roa
Signing time:             Thu 26 Jan 2023 15:07:47 +0000
ROA not before:           Thu 26 Jan 2023 15:07:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59392
IP address blocks:        93.190.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ee:9e:e1:72:68:a6:86:5c:9b:14:f4:b8:4e:7d:9c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7a8875274853b0707c36501152f890588cdb21
        Validity
            Not Before: Jan 26 15:07:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a51966dd8a181122eb480d117af8c6a82df812c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:bf:9e:a8:31:0c:91:16:84:81:bd:c6:33:
                    23:6f:36:9f:29:87:a8:32:f0:19:52:c5:1e:9f:2a:
                    1b:10:d6:05:68:71:6d:60:7a:bf:c2:ca:14:b1:5f:
                    be:40:cd:92:7b:10:31:8e:93:a9:b7:c1:f3:a0:2e:
                    f1:56:b7:9c:77:c4:a4:37:be:c0:1f:a1:22:f6:45:
                    f5:21:55:1a:5c:c9:b0:b1:40:d6:69:c7:79:c8:b1:
                    56:91:fe:d5:90:02:dd:23:eb:be:1d:a5:9e:b1:40:
                    87:9c:0a:5d:5a:0c:ea:62:3a:f3:d9:65:74:b8:5f:
                    06:dd:0e:34:5e:dd:6d:64:1e:23:4e:8e:36:86:91:
                    e4:be:23:47:37:64:a9:c1:5b:cb:f7:a8:92:f2:db:
                    b4:40:3b:a7:dc:0a:0e:8b:e3:2c:e9:b5:5c:05:33:
                    32:22:be:e8:7b:f3:74:d1:8d:a4:93:e2:f9:5f:36:
                    12:05:74:f0:d0:85:46:73:cd:f8:a8:fd:e3:66:26:
                    a7:a2:9a:fd:c8:f2:d8:19:c0:d4:99:70:44:0d:b0:
                    7d:a8:39:1e:79:39:2c:3e:f4:a9:90:06:d2:9b:a9:
                    f7:77:ba:d4:93:31:40:c5:ee:6b:04:d0:43:fc:e2:
                    e9:44:1e:9e:68:5a:18:52:bc:11:9f:f5:b6:61:eb:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:19:66:DD:8A:18:11:22:EB:48:0D:11:7A:F8:C6:A8:2D:F8:12:C6
            X509v3 Authority Key Identifier:
                keyid:7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/pRlm3YoYESLrSA0RevjGqC34EsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:5c:22:d2:80:58:6c:2f:e5:62:85:e3:d4:ff:3a:78:08:a1:
         ca:d0:d6:fe:19:d1:46:94:de:69:cd:ee:ec:c2:5c:52:80:a7:
         17:13:10:59:03:e5:0c:be:4b:cd:15:a7:6c:e3:80:db:b1:8e:
         9f:8a:4c:a9:4d:ff:b2:33:0c:6d:f3:1c:5a:36:a0:40:6a:05:
         d2:a5:1a:f9:68:f7:31:37:48:d6:54:b8:32:bb:c4:6f:bb:43:
         b3:1c:e1:ec:8f:68:1b:9c:b9:45:80:04:76:9b:11:b5:05:99:
         94:55:c4:e0:c3:3d:5d:42:c6:f6:c0:3f:75:7b:0f:8b:d0:de:
         e9:91:57:54:2b:ac:cb:0d:90:aa:19:6c:0d:34:ea:11:62:68:
         6b:73:78:5f:51:1a:7a:46:dd:84:6f:33:2d:58:3f:fc:54:08:
         e7:b0:2b:cc:6d:9a:ce:ac:f3:f6:ef:aa:17:3d:52:d4:fe:b2:
         a0:42:00:a4:38:ac:e4:72:c9:57:60:2a:af:ee:2e:f2:fa:3b:
         40:f5:06:81:34:f3:2f:ca:be:a0:a2:ae:33:b0:0e:69:8d:b3:
         9f:29:6c:b7:e4:8a:63:4b:c6:8d:d5:db:ab:85:be:e5:a1:f6:
         8e:80:77:65:09:b2:fb:81:97:a0:81:ce:9f:8f:5a:b7:c3:00:
         d0:b0:dc:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXunuFyaKaGXJsU9LhOfZyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmN2E4ODc1Mjc0ODUzYjA3MDdjMzY1MDExNTJmODkwNTg4
Y2RiMjEwHhcNMjMwMTI2MTUwNzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTE5NjZkZDhhMTgxMTIyZWI0ODBkMTE3YWY4YzZhODJkZjgxMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTK/nqgxDJEWhIG9xjMjbzafKYeo
MvAZUsUenyobENYFaHFtYHq/wsoUsV++QM2SexAxjpOpt8HzoC7xVrecd8SkN77A
H6Ei9kX1IVUaXMmwsUDWacd5yLFWkf7VkALdI+u+HaWesUCHnApdWgzqYjrz2WV0
uF8G3Q40Xt1tZB4jTo42hpHkviNHN2SpwVvL96iS8tu0QDun3AoOi+Ms6bVcBTMy
Ir7oe/N00Y2kk+L5XzYSBXTw0IVGc834qP3jZianopr9yPLYGcDUmXBEDbB9qDke
eTksPvSpkAbSm6n3d7rUkzFAxe5rBNBD/OLpRB6eaFoYUrwRn/W2Yev87QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKUZZt2KGBEi60gNEXr4xqgt+BLGMB8GA1UdIwQY
MBaAFH96iHUnSFOwcHw2UBFS+JBYjNshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNxSWRTZElVN0J3ZkRaUUVWTDRrRmlNMnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xNWQxYmUtMDM1My00ZTJiLWI4YTkt
ZTFiOTBkNTY2NWZjLzEvcFJsbTNZb1lFU0xyU0EwUmV2akdxQzM0RXNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xNWQxYmUtMDM1My00ZTJiLWI4YTktZTFiOTBkNTY2NWZj
LzEvZjNxSWRTZElVN0J3ZkRaUUVWTDRrRmlNMnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb59MA0G
CSqGSIb3DQEBCwUAA4IBAQDQXCLSgFhsL+VihePU/zp4CKHK0Nb+GdFGlN5pze7s
wlxSgKcXExBZA+UMvkvNFads44DbsY6fikypTf+yMwxt8xxaNqBAagXSpRr5aPcx
N0jWVLgyu8Rvu0OzHOHsj2gbnLlFgAR2mxG1BZmUVcTgwz1dQsb2wD91ew+L0N7p
kVdUK6zLDZCqGWwNNOoRYmhrc3hfURp6Rt2EbzMtWD/8VAjnsCvMbZrOrPP276oX
PVLU/rKgQgCkOKzkcslXYCqv7i7y+jtA9QaBNPMvyr6goq4zsA5pjbOfKWy35Ipj
S8aN1durhb7lofaOgHdlCbL7gZeggc6fj1q3wwDQsNwI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:31 2024 by rpki-client on console-fra.rpki-client.org