Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HCV7WI87xmunu95hRTpodlNA_74.roa
File:                     HCV7WI87xmunu95hRTpodlNA_74.roa (raw, json)
Hash identifier:          p3S+tVzekyLEA4bXqpnIScac7FzEEFWT87OZRFwH3Qo=
Subject key identifier:   1C:25:7B:58:8F:3B:C6:6B:A7:BB:DE:61:45:3A:68:76:53:40:FF:BE
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       0184B2A8657D6EE37F3E9B4334D1724DCECB
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HCV7WI87xmunu95hRTpodlNA_74.roa
Signing time:             Sat 26 Nov 2022 06:38:11 +0000
ROA not before:           Sat 26 Nov 2022 06:38:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     132335
IP address blocks:        109.122.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b2:a8:65:7d:6e:e3:7f:3e:9b:43:34:d1:72:4d:ce:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Nov 26 06:38:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c257b588f3bc66ba7bbde61453a68765340ffbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:d5:7a:d9:2f:e3:dd:a5:2d:be:dc:4a:19:
                    c1:57:ee:72:93:40:2c:00:e0:76:05:55:0d:4d:d3:
                    d4:78:bd:d0:df:0e:2f:cc:e5:72:a5:9a:0b:58:f9:
                    3f:de:2e:a4:71:e5:0f:96:e5:3a:ba:2e:bf:eb:54:
                    b7:6b:39:bf:23:ff:d0:dd:1c:6b:ee:c1:80:1a:19:
                    f3:d7:37:22:12:4f:cf:aa:35:3e:c9:fc:a1:f9:96:
                    7e:64:2a:da:d7:dd:07:fd:60:ce:05:bb:fa:c2:2b:
                    38:d2:88:2f:b6:d2:17:11:bb:1e:90:9c:71:86:4f:
                    75:35:22:3d:b1:25:9e:89:c8:b4:4b:32:78:46:a4:
                    0e:76:8e:b2:94:87:22:7f:15:fb:a3:2a:ec:53:f0:
                    c3:ac:0b:df:aa:28:67:61:b0:ae:61:87:59:ba:a5:
                    ad:b3:61:7a:5d:f1:c6:f3:c4:44:de:4b:ce:f3:b4:
                    9c:05:c4:76:30:ff:35:9d:07:3e:4b:58:db:1b:34:
                    5c:28:8d:27:dc:1b:2a:d6:32:4e:9f:fc:68:58:04:
                    6a:58:2c:df:02:4a:e9:25:da:9c:e2:2a:91:3a:39:
                    37:a1:87:b2:1f:13:eb:3e:78:0d:7d:8d:93:12:c6:
                    d9:ad:86:5c:f4:d5:da:45:01:e0:55:9d:b3:54:0a:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:7B:58:8F:3B:C6:6B:A7:BB:DE:61:45:3A:68:76:53:40:FF:BE
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/HCV7WI87xmunu95hRTpodlNA_74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:83:39:8a:c4:96:be:04:68:60:9e:43:77:ae:4f:d2:60:
         aa:75:68:62:9f:a4:0d:fc:94:e2:65:7a:43:1e:70:58:c3:a7:
         3b:34:1a:41:67:25:49:46:03:5a:5d:49:59:96:dc:4b:08:02:
         22:dd:eb:40:cf:fb:e4:61:42:c9:d3:4c:31:f4:b7:29:e2:30:
         fb:46:73:99:42:49:72:69:c5:64:4e:20:fa:fa:85:33:9c:07:
         20:c0:42:5d:e2:6c:f4:9d:96:7f:a2:ca:42:4a:70:d8:dc:13:
         70:7a:04:01:b5:b4:b5:85:4c:58:9f:1c:5a:ab:21:82:b1:21:
         58:8f:1b:8a:2b:b7:13:48:fd:f8:81:d2:93:63:34:a8:b4:6e:
         4e:7f:3f:0d:83:a8:bc:c8:4a:db:c9:8b:2e:b2:53:9e:d8:70:
         98:0d:bf:40:9f:a4:d2:30:73:ae:ac:a1:9c:5b:d2:97:e2:d5:
         2b:94:32:26:7e:bc:5f:6d:cf:a9:c3:4e:35:91:71:29:65:ec:
         52:c7:71:f1:28:97:10:aa:a5:6b:d1:5f:5f:3b:d3:57:e3:b4:
         80:ba:7f:a3:44:5f:00:7d:5a:24:9b:19:3a:91:eb:75:fc:99:
         3d:a7:ce:42:02:88:02:d9:7d:4e:96:1c:b0:99:b9:90:27:58:
         60:c0:5c:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSyqGV9buN/PptDNNFyTc7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmE1Yjc0NGU4ZGY1MDNkOTRmNDFmYjI5MDI0Mjg5YzZm
YTVlNWIwHhcNMjIxMTI2MDYzODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzI1N2I1ODhmM2JjNjZiYTdiYmRlNjE0NTNhNjg3NjUzNDBmZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9nVetkv492lLb7cShnBV+5yk0As
AOB2BVUNTdPUeL3Q3w4vzOVypZoLWPk/3i6kceUPluU6ui6/61S3azm/I//Q3Rxr
7sGAGhnz1zciEk/PqjU+yfyh+ZZ+ZCra190H/WDOBbv6wis40ogvttIXEbsekJxx
hk91NSI9sSWeici0SzJ4RqQOdo6ylIcifxX7oyrsU/DDrAvfqihnYbCuYYdZuqWt
s2F6XfHG88RE3kvO87ScBcR2MP81nQc+S1jbGzRcKI0n3Bsq1jJOn/xoWARqWCzf
AkrpJdqc4iqROjk3oYeyHxPrPngNfY2TEsbZrYZc9NXaRQHgVZ2zVAo2CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwle1iPO8Zrp7veYUU6aHZTQP++MB8GA1UdIwQY
MBaAFFC6W3ROjfUD2U9B+ykCQonG+l5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgt
ZjU1OWNkYThkNDlmLzEvSENWN1dJODd4bXVudTk1aFJUcG9kbE5BXzc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83YWZmNjgtYmFlNi00OThhLTlmNTgtZjU1OWNkYThkNDlm
LzEvVUxwYmRFNk45UVBaVDBIN0tRSkNpY2I2WGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXrIMA0G
CSqGSIb3DQEBCwUAA4IBAQCjyIM5isSWvgRoYJ5Dd65P0mCqdWhin6QN/JTiZXpD
HnBYw6c7NBpBZyVJRgNaXUlZltxLCAIi3etAz/vkYULJ00wx9Lcp4jD7RnOZQkly
acVkTiD6+oUznAcgwEJd4mz0nZZ/ospCSnDY3BNwegQBtbS1hUxYnxxaqyGCsSFY
jxuKK7cTSP34gdKTYzSotG5Ofz8Ng6i8yErbyYsuslOe2HCYDb9An6TSMHOurKGc
W9KX4tUrlDImfrxfbc+pw041kXEpZexSx3HxKJcQqqVr0V9fO9NX47SAun+jRF8A
fVokmxk6ket1/Jk9p85CAogC2X1OlhywmbmQJ1hgwFwd
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org