Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/1-c06sLx655JQzvjIS8LGFV2c3nk.roa
File:                     1-c06sLx655JQzvjIS8LGFV2c3nk.roa (raw, json)
Hash identifier:          iClSA1OV8Jn5tQv239tPb3kOajgphlCTeiaDyjfdAoA=
Subject key identifier:   F9:CD:3A:B0:BC:7A:E7:92:50:CE:F8:C8:4B:C2:C6:15:5D:9C:DE:79
Certificate issuer:       /CN=08bd0e1f2bc52307b0040f1eb8173f930216b1b3
Certificate serial:       018964C05C5289798CD33BC6FE8DA496B89C
Authority key identifier: 08:BD:0E:1F:2B:C5:23:07:B0:04:0F:1E:B8:17:3F:93:02:16:B1:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CL0OHyvFIwewBA8euBc_kwIWsbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/1-c06sLx655JQzvjIS8LGFV2c3nk.roa
Signing time:             Mon 17 Jul 2023 16:47:55 +0000
ROA not before:           Mon 17 Jul 2023 16:47:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49505
IP address blocks:        62.233.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:5c:52:89:79:8c:d3:3b:c6:fe:8d:a4:96:b8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bd0e1f2bc52307b0040f1eb8173f930216b1b3
        Validity
            Not Before: Jul 17 16:47:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9cd3ab0bc7ae79250cef8c84bc2c6155d9cde79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:25:7f:c7:90:60:e7:69:62:2c:f2:5b:83:
                    49:42:3a:c0:13:35:7b:14:3a:77:52:f6:2f:26:95:
                    8b:57:4d:52:c6:8d:cb:d4:ea:d5:66:1b:13:ee:be:
                    8f:f8:70:1d:43:b2:06:eb:e6:32:57:99:b8:56:a0:
                    22:f2:27:2f:c8:32:38:d7:cf:13:d6:10:f6:7d:79:
                    0e:3e:b1:08:96:01:96:72:9d:13:b9:90:b8:ba:14:
                    09:1a:bb:ed:80:b3:ed:f1:00:94:31:7c:24:4c:87:
                    a3:10:e4:8f:82:68:7d:14:21:11:44:78:be:6b:66:
                    39:51:4c:43:85:31:f7:20:e1:a4:52:e1:6f:ae:9e:
                    58:85:26:f9:20:8e:a5:c3:b3:be:7c:3a:74:04:45:
                    b7:f1:83:19:b5:15:0b:90:6c:3c:87:35:a6:26:0b:
                    58:bd:61:6a:54:28:56:ce:26:41:a9:27:7f:36:3b:
                    27:f2:c9:8d:54:47:c4:56:9a:d0:32:05:1c:77:af:
                    b5:e0:ee:c7:ec:38:2a:3f:2d:f6:f9:e1:79:a9:dc:
                    07:8d:ac:73:86:e8:76:89:8d:71:d0:94:6b:bb:9e:
                    56:e4:55:f3:c3:50:a8:c8:67:e0:a7:49:f7:87:61:
                    cb:4a:37:cb:ba:39:9c:bd:be:27:62:13:3f:3c:3a:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CD:3A:B0:BC:7A:E7:92:50:CE:F8:C8:4B:C2:C6:15:5D:9C:DE:79
            X509v3 Authority Key Identifier:
                keyid:08:BD:0E:1F:2B:C5:23:07:B0:04:0F:1E:B8:17:3F:93:02:16:B1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL0OHyvFIwewBA8euBc_kwIWsbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/1-c06sLx655JQzvjIS8LGFV2c3nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfaa4a-0b39-4a21-a7ad-3e40e1fd46d6/1/CL0OHyvFIwewBA8euBc_kwIWsbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:18:da:c0:eb:04:cb:9f:5f:ea:d3:ef:54:8e:62:34:5f:
         99:1f:e1:a0:3b:08:09:3b:b8:10:13:9a:64:55:b2:8c:53:52:
         41:79:bf:9b:6e:54:3a:1b:fa:5a:44:8a:31:4c:91:2e:42:3b:
         d7:82:bf:94:77:23:61:18:20:95:74:57:1b:65:5b:4f:bf:77:
         7c:2c:03:ff:b4:5d:be:15:1a:14:bf:7e:ab:cc:05:89:0a:ad:
         81:0c:2f:6b:46:37:df:a3:68:a2:a0:5e:ce:22:fc:2d:e6:d8:
         e1:e3:ac:ac:37:5b:aa:70:c6:b3:ca:b9:eb:eb:1f:a4:60:40:
         13:3b:2c:29:f5:49:41:bf:b3:3f:14:9f:c7:e8:43:48:b4:e0:
         5d:0a:de:9a:55:56:04:92:40:3d:70:8c:85:d7:d4:87:cd:97:
         54:68:e3:bd:d6:f4:54:d5:e5:90:97:47:98:0b:8a:c4:b7:cd:
         cd:7c:99:2d:54:9c:65:15:df:23:9f:7d:53:1e:23:36:b9:3f:
         70:c8:c6:d7:1d:11:ec:c7:6b:1f:42:4f:45:23:e0:19:d1:d9:
         7d:68:28:b0:80:60:5d:41:7a:34:5f:3f:26:36:8b:5d:10:15:
         ed:b3:e2:10:78:96:ee:14:d8:db:43:b0:cb:2a:0e:36:bd:16:
         5d:a0:ce:90
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYlkwFxSiXmM0zvG/o2klricMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YmQwZTFmMmJjNTIzMDdiMDA0MGYxZWI4MTczZjkzMDIx
NmIxYjMwHhcNMjMwNzE3MTY0NzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWNkM2FiMGJjN2FlNzkyNTBjZWY4Yzg0YmMyYzYxNTVkOWNkZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tglf8eQYOdpYizyW4NJQjrAEzV7
FDp3UvYvJpWLV01Sxo3L1OrVZhsT7r6P+HAdQ7IG6+YyV5m4VqAi8icvyDI4188T
1hD2fXkOPrEIlgGWcp0TuZC4uhQJGrvtgLPt8QCUMXwkTIejEOSPgmh9FCERRHi+
a2Y5UUxDhTH3IOGkUuFvrp5YhSb5II6lw7O+fDp0BEW38YMZtRULkGw8hzWmJgtY
vWFqVChWziZBqSd/Njsn8smNVEfEVprQMgUcd6+14O7H7DgqPy32+eF5qdwHjaxz
huh2iY1x0JRru55W5FXzw1CoyGfgp0n3h2HLSjfLujmcvb4nYhM/PDo0wwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPnNOrC8eueSUM74yEvCxhVdnN55MB8GA1UdIwQY
MBaAFAi9Dh8rxSMHsAQPHrgXP5MCFrGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0wwT0h5dkZJd2V3QkE4ZXVCY19rd0lXc2JNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmFhNGEtMGIzOS00YTIxLWE3YWQt
M2U0MGUxZmQ0NmQ2LzEvMS1jMDZzTHg2NTVKUXp2aklTOExHRlYyYzNuay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTgvYmZhYTRhLTBiMzktNGEyMS1hN2FkLTNlNDBlMWZkNDZk
Ni8xL0NMME9IeXZGSXdld0JBOGV1QmNfa3dJV3NiTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7pMDAN
BgkqhkiG9w0BAQsFAAOCAQEAi0IY2sDrBMufX+rT71SOYjRfmR/hoDsICTu4EBOa
ZFWyjFNSQXm/m25UOhv6WkSKMUyRLkI714K/lHcjYRgglXRXG2VbT793fCwD/7Rd
vhUaFL9+q8wFiQqtgQwva0Y336NooqBeziL8LebY4eOsrDdbqnDGs8q56+sfpGBA
EzssKfVJQb+zPxSfx+hDSLTgXQremlVWBJJAPXCMhdfUh82XVGjjvdb0VNXlkJdH
mAuKxLfNzXyZLVScZRXfI599Ux4jNrk/cMjG1x0R7MdrH0JPRSPgGdHZfWgosIBg
XUF6NF8/JjaLXRAV7bPiEHiW7hTY20OwyyoONr0WXaDOkA==
-----END CERTIFICATE-----
Generated at Fri Oct 20 13:20:42 2023 by rpki-client on console-ams.rpki-client.org