Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6JDhaNtL6MHEzd8YeWcA22cwQjQ.roa
File:                     6JDhaNtL6MHEzd8YeWcA22cwQjQ.roa (raw, json)
Hash identifier:          +qsXYyl4DtfzvUwlrwkYN0I2qrcWhtRVq3sKwO9zJfM=
Subject key identifier:   E8:90:E1:68:DB:4B:E8:C1:C4:CD:DF:18:79:67:00:DB:67:30:42:34
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       0187B94CA8EB8809DF854D76CDCE03A8FD2B
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6JDhaNtL6MHEzd8YeWcA22cwQjQ.roa
Signing time:             Tue 25 Apr 2023 16:43:41 +0000
ROA not before:           Tue 25 Apr 2023 16:43:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3507
IP address blocks:        89.23.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b9:4c:a8:eb:88:09:df:85:4d:76:cd:ce:03:a8:fd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Apr 25 16:43:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e890e168db4be8c1c4cddf18796700db67304234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d2:35:d1:42:e1:bd:30:92:a8:34:30:69:b9:
                    18:2e:f1:18:f0:c0:06:3c:20:30:d1:dc:83:1b:bf:
                    3d:10:6f:ae:f3:6e:fd:c9:99:bf:1d:4e:5c:fd:f3:
                    7c:f3:18:24:31:85:d0:32:96:26:13:17:6d:54:1e:
                    15:94:f0:63:6b:e2:a8:7e:b2:86:b4:3c:50:5c:fa:
                    d2:3e:0c:11:92:97:72:7f:d7:36:59:f8:dc:a7:79:
                    fa:67:79:96:de:5c:d1:6c:f5:96:90:8c:83:cf:ae:
                    81:d9:05:79:4a:1f:72:f7:73:af:1b:53:3b:22:98:
                    aa:93:33:29:51:01:0d:1f:47:ac:40:4a:d4:8b:92:
                    f0:ea:b9:b7:ff:91:be:f9:0c:e5:b6:e4:c7:40:51:
                    4c:9a:c3:bf:25:7d:47:d0:c6:7e:38:bf:a5:57:33:
                    52:8f:ec:8b:c3:87:ec:3c:e9:58:4d:6c:8b:fe:0e:
                    e9:fc:8e:c7:b2:8a:5c:e9:a3:0e:bb:6b:de:09:7a:
                    1d:12:ca:ee:4d:a1:a1:e5:78:b9:2c:69:65:c5:ef:
                    83:ee:39:77:b3:e5:a8:53:c4:cb:74:9c:6d:40:63:
                    00:52:4b:1a:58:63:dd:75:cc:0f:18:0f:ba:2f:f3:
                    47:92:49:60:f6:cf:8a:09:f3:19:5a:03:03:ef:13:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:E1:68:DB:4B:E8:C1:C4:CD:DF:18:79:67:00:DB:67:30:42:34
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/6JDhaNtL6MHEzd8YeWcA22cwQjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:50:42:d7:9e:eb:6d:ff:07:23:69:29:d4:c5:90:64:9e:
         fd:6b:61:b8:48:b7:e6:f4:92:2b:fe:6f:35:5e:3e:fe:5c:cf:
         05:da:66:d3:cb:98:8a:89:89:4d:42:3d:cc:b3:fe:8c:9f:7b:
         04:f1:64:8e:53:f7:06:e6:8c:2c:92:e8:c6:4b:e0:f0:87:97:
         a0:ef:9c:17:33:c3:c1:07:b8:4d:b7:4e:b5:63:b8:cd:f1:60:
         dc:1d:1e:7f:cc:cd:d4:69:e5:e3:98:e5:2f:ac:d4:a0:a0:2f:
         a2:1c:db:86:ce:3a:66:75:c2:32:8e:88:c1:ca:fd:bf:33:d0:
         10:48:f8:51:27:21:69:d4:e6:6b:1e:d5:74:71:86:f4:36:6a:
         b7:83:f4:fd:54:42:08:c7:eb:fa:11:e1:3a:49:fc:b7:87:b6:
         83:65:f1:ed:27:81:11:78:ad:ac:60:df:36:c0:85:b3:00:e8:
         a6:f4:3b:87:a2:43:81:b6:f9:be:93:51:44:dd:a3:4a:ff:ca:
         32:0f:41:25:d6:3d:b7:0b:3c:ee:f8:f5:65:cb:de:60:29:7b:
         7d:12:12:e6:71:a8:66:86:0e:81:a0:12:87:0b:c3:d4:cf:1a:
         c1:c7:7f:2b:ae:ce:d0:16:a8:19:87:08:fa:6f:68:91:7e:45:
         67:86:e4:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe5TKjriAnfhU12zc4DqP0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwNDI1MTY0MzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODkwZTE2OGRiNGJlOGMxYzRjZGRmMTg3OTY3MDBkYjY3MzA0MjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdI10ULhvTCSqDQwabkYLvEY8MAG
PCAw0dyDG789EG+u8279yZm/HU5c/fN88xgkMYXQMpYmExdtVB4VlPBja+KofrKG
tDxQXPrSPgwRkpdyf9c2Wfjcp3n6Z3mW3lzRbPWWkIyDz66B2QV5Sh9y93OvG1M7
IpiqkzMpUQENH0esQErUi5Lw6rm3/5G++QzltuTHQFFMmsO/JX1H0MZ+OL+lVzNS
j+yLw4fsPOlYTWyL/g7p/I7Hsopc6aMOu2veCXodEsruTaGh5Xi5LGllxe+D7jl3
s+WoU8TLdJxtQGMAUksaWGPddcwPGA+6L/NHkklg9s+KCfMZWgMD7xM60wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiQ4WjbS+jBxM3fGHlnANtnMEI0MB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvNkpEaGFOdEw2TUhFemQ4WWVXY0EyMmN3UWpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdQMA0G
CSqGSIb3DQEBCwUAA4IBAQCePlBC157rbf8HI2kp1MWQZJ79a2G4SLfm9JIr/m81
Xj7+XM8F2mbTy5iKiYlNQj3Ms/6Mn3sE8WSOU/cG5owskujGS+Dwh5eg75wXM8PB
B7hNt061Y7jN8WDcHR5/zM3UaeXjmOUvrNSgoC+iHNuGzjpmdcIyjojByv2/M9AQ
SPhRJyFp1OZrHtV0cYb0Nmq3g/T9VEIIx+v6EeE6Sfy3h7aDZfHtJ4EReK2sYN82
wIWzAOim9DuHokOBtvm+k1FE3aNK/8oyD0El1j23Czzu+PVly95gKXt9EhLmcahm
hg6BoBKHC8PUzxrBx38rrs7QFqgZhwj6b2iRfkVnhuQD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org