Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/j8nem6GKY-2j662HDvKHA5F8chY.roa
File:                     j8nem6GKY-2j662HDvKHA5F8chY.roa (raw, json)
Hash identifier:          j5dl3gmB7RIHqp7hyPNrf4VutCCBlPJf5BunNJIhh54=
Subject key identifier:   8F:C9:DE:9B:A1:8A:63:ED:A3:EB:AD:87:0E:F2:87:03:91:7C:72:16
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0A352974
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/j8nem6GKY-2j662HDvKHA5F8chY.roa
Signing time:             Fri 13 May 2022 00:35:02 +0000
ROA not before:           Fri 13 May 2022 00:35:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        2.58.84.0/22 maxlen: 24
                          77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171256180 (0xa352974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: May 13 00:35:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fc9de9ba18a63eda3ebad870ef28703917c7216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:a0:cd:5a:c5:fa:ca:e5:32:3b:ca:b5:33:
                    85:21:8d:11:80:10:0c:ef:7a:65:67:7c:8f:37:d9:
                    1c:fb:18:32:57:e7:17:f0:3a:61:3f:bc:d3:e1:ef:
                    e6:89:03:04:84:55:f9:3f:1c:8b:cb:0f:02:d4:b0:
                    50:60:6d:a5:c3:32:71:6b:4c:54:56:1e:88:2f:30:
                    22:1b:17:82:c8:03:00:c3:1a:0f:5a:99:0f:65:8b:
                    b0:5c:a1:a6:0f:6d:fe:04:03:27:f3:28:0c:93:b5:
                    6c:a3:c9:da:3b:f9:c9:17:4f:1f:2f:24:b5:83:71:
                    00:bc:0c:e7:09:87:ec:9e:27:b9:03:ba:08:b1:2a:
                    53:c6:e4:3f:09:c6:ea:ae:25:ca:dd:17:56:8d:18:
                    e4:4b:92:db:82:d4:20:e5:eb:28:7d:84:6f:df:25:
                    f6:10:bb:4e:d5:ac:8b:cc:cf:d9:a0:30:a7:c4:f7:
                    02:aa:cf:8d:81:83:0b:6e:5c:ed:18:ec:2d:25:d9:
                    c8:c9:04:df:ee:75:85:de:3d:45:5a:e2:ed:f7:f1:
                    4c:12:96:76:92:a4:58:5d:97:aa:e2:01:61:30:39:
                    08:75:c8:66:ae:ed:13:75:d4:8e:f8:5c:e2:7f:b5:
                    8d:e0:aa:cc:cf:ce:3c:dc:3c:70:5c:d8:fd:22:30:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C9:DE:9B:A1:8A:63:ED:A3:EB:AD:87:0E:F2:87:03:91:7C:72:16
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/j8nem6GKY-2j662HDvKHA5F8chY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.84.0/22
                  77.83.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:a0:4c:80:70:f3:74:b7:02:4f:8a:ac:25:85:cd:c3:d9:fb:
         43:ba:0f:4c:2f:7f:27:51:4c:3c:44:46:8d:dd:66:78:ae:69:
         47:f9:7e:66:3e:da:98:5b:37:a8:2b:ab:38:51:fa:05:da:4c:
         da:e5:76:c0:e6:8e:ee:45:9b:ee:de:f2:78:6a:08:95:04:a2:
         60:4a:e0:a9:0e:69:a8:bf:2e:da:6e:c1:51:e1:c9:e2:65:33:
         ce:93:b0:c9:c2:4f:d5:b5:f9:7d:82:14:81:6f:32:60:14:b8:
         2f:43:ee:51:b8:82:11:22:53:00:02:5e:e2:31:c0:17:46:33:
         a9:0a:ba:9e:6d:54:ae:b9:8a:8a:51:26:ee:df:2a:b9:ac:86:
         28:f4:3e:bd:9b:6c:da:93:18:c3:f7:5e:c4:70:b9:53:b4:d3:
         12:a5:f9:40:5e:e6:e7:70:22:0f:31:2d:c4:84:92:d1:68:b7:
         a9:26:b2:12:95:00:33:bf:95:ab:7d:fb:c7:94:d6:0e:c4:fa:
         73:e8:80:93:6e:2a:d8:47:e0:99:65:c7:e4:74:65:b0:bf:5a:
         58:00:fd:73:e8:bd:eb:6d:d9:bf:33:f4:64:2c:96:4b:79:40:
         3a:ec:43:1e:ec:3a:c4:9e:5a:54:2a:7a:8a:3a:5c:71:e4:a2:
         09:1b:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-fra.rpki-client.org