Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZQ6mUOYft1zIkKSGdkoaSgXKbzI.roa
File:                     ZQ6mUOYft1zIkKSGdkoaSgXKbzI.roa (raw, json)
Hash identifier:          x/NjUicCgpTqJC4qcGCk+AgnFdLm08hy1b8LxbD9AbA=
Subject key identifier:   65:0E:A6:50:E6:1F:B7:5C:C8:90:A4:86:76:4A:1A:4A:05:CA:6F:32
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142EAE3C2CD4881DA02B5E0A5628ACA
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZQ6mUOYft1zIkKSGdkoaSgXKbzI.roa
Signing time:             Mon 02 Jan 2023 06:54:48 +0000
ROA not before:           Mon 02 Jan 2023 06:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:ea:e3:c2:cd:48:81:da:02:b5:e0:a5:62:8a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=650ea650e61fb75cc890a486764a1a4a05ca6f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:5d:32:a7:ea:fc:cc:9b:15:1a:c0:9d:1c:
                    a8:af:c1:63:f3:39:df:30:08:6d:86:c0:f0:38:7b:
                    9a:d8:b9:e0:db:d9:71:a2:10:d4:53:5c:f0:88:9f:
                    21:42:bb:79:bf:16:f3:d0:cd:2e:c2:dd:7c:12:78:
                    20:17:c9:94:91:57:2e:be:9c:df:ba:24:6d:46:34:
                    79:a6:34:be:0f:b0:d6:39:a8:32:81:3b:fc:c0:0d:
                    c5:3f:60:73:fe:05:0b:21:42:60:14:97:b4:c7:28:
                    fe:2a:2b:a4:09:56:f4:83:f3:bd:41:7f:61:4e:f0:
                    8d:e8:2f:2a:f5:4d:08:83:6c:03:e2:0b:a1:b1:88:
                    20:fd:99:20:f5:65:df:f2:aa:a9:b1:be:e2:1f:98:
                    d2:d4:0f:89:1b:91:dd:5d:ea:4f:bf:cd:c6:6b:37:
                    be:c3:90:bd:39:4a:93:c5:05:1c:4f:cb:ff:b8:3c:
                    69:07:8e:5d:4c:77:6f:14:8c:45:6c:73:49:90:29:
                    05:49:d8:6a:40:7c:32:da:5e:77:06:b6:26:00:f4:
                    bf:9e:34:51:87:6a:7e:15:09:18:a5:bc:eb:aa:6c:
                    d7:59:f1:2a:da:21:d0:55:36:08:57:a9:7b:1e:c8:
                    a3:0a:de:85:58:3e:62:fc:d8:9c:0c:79:fc:82:e2:
                    26:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0E:A6:50:E6:1F:B7:5C:C8:90:A4:86:76:4A:1A:4A:05:CA:6F:32
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZQ6mUOYft1zIkKSGdkoaSgXKbzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:b4:2c:f4:aa:35:c3:58:57:77:7b:49:97:46:e4:08:27:65:
         43:92:40:a4:32:74:2f:e9:c5:b7:c6:48:14:3c:c9:02:91:51:
         c8:95:9c:8e:bd:11:ac:8b:86:c8:88:f0:f3:b1:a3:d1:fa:e3:
         f4:b2:38:e3:14:86:11:24:68:f8:8e:0f:9e:05:9f:f8:30:b6:
         27:37:cf:e0:4f:84:df:b5:fd:b4:10:b2:65:8c:ba:ab:21:90:
         c7:a4:f8:eb:3d:47:17:6d:ec:db:91:3e:c8:1b:62:cb:b9:5d:
         fd:2f:a3:06:5c:b7:b5:a1:3b:91:a7:3b:43:f9:84:0b:02:57:
         12:ef:06:69:b3:11:b1:44:e0:23:69:52:8f:41:fc:a4:01:3d:
         81:0d:81:00:ed:af:3d:f2:6f:b2:16:78:6a:e5:eb:04:9c:7a:
         c9:03:f3:9d:2d:26:68:9b:77:78:93:d4:76:56:ee:07:aa:20:
         f7:df:c4:bb:39:ea:83:b7:b0:20:2a:30:ee:58:11:42:e1:ea:
         bb:bf:9b:ea:1c:96:e3:fa:24:f8:f4:1b:74:3e:74:5f:ef:bc:
         7b:5e:e5:bc:9c:89:e6:d1:cd:5f:ae:06:7c:4a:67:2e:af:5f:
         0e:7d:5b:0f:24:73:a2:e1:ab:bc:7c:4f:6f:4f:c3:88:44:dc:
         71:6e:79:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQurjws1IgdoCteClYorKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjMwMTAyMDY1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTBlYTY1MGU2MWZiNzVjYzg5MGE0ODY3NjRhMWE0YTA1Y2E2ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBJdMqfq/MybFRrAnRyor8Fj8znf
MAhthsDwOHua2Lng29lxohDUU1zwiJ8hQrt5vxbz0M0uwt18EnggF8mUkVcuvpzf
uiRtRjR5pjS+D7DWOagygTv8wA3FP2Bz/gULIUJgFJe0xyj+KiukCVb0g/O9QX9h
TvCN6C8q9U0Ig2wD4guhsYgg/Zkg9WXf8qqpsb7iH5jS1A+JG5HdXepPv83Gaze+
w5C9OUqTxQUcT8v/uDxpB45dTHdvFIxFbHNJkCkFSdhqQHwy2l53BrYmAPS/njRR
h2p+FQkYpbzrqmzXWfEq2iHQVTYIV6l7HsijCt6FWD5i/NicDHn8guIm6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUOplDmH7dcyJCkhnZKGkoFym8yMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvWlE2bVVPWWZ0MXpJa0tTR2Rrb2FTZ1hLYnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVP+MA0G
CSqGSIb3DQEBCwUAA4IBAQDMtCz0qjXDWFd3e0mXRuQIJ2VDkkCkMnQv6cW3xkgU
PMkCkVHIlZyOvRGsi4bIiPDzsaPR+uP0sjjjFIYRJGj4jg+eBZ/4MLYnN8/gT4Tf
tf20ELJljLqrIZDHpPjrPUcXbezbkT7IG2LLuV39L6MGXLe1oTuRpztD+YQLAlcS
7wZpsxGxROAjaVKPQfykAT2BDYEA7a898m+yFnhq5esEnHrJA/OdLSZom3d4k9R2
Vu4HqiD338S7OeqDt7AgKjDuWBFC4eq7v5vqHJbj+iT49Bt0PnRf77x7XuW8nInm
0c1frgZ8Smcur18OfVsPJHOi4au8fE9vT8OIRNxxbnnT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:15 2023 by rpki-client on console-ams.rpki-client.org