Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/C7OdrelbKjM0i740XZ9NdpAiZKM.roa
File:                     C7OdrelbKjM0i740XZ9NdpAiZKM.roa (raw, json)
Hash identifier:          u0Tq9U5AlcEcckTd14/yXxkinRPu+I8TzTF+ytepNAo=
Subject key identifier:   0B:B3:9D:AD:E9:5B:2A:33:34:8B:BE:34:5D:9F:4D:76:90:22:64:A3
Certificate issuer:       /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial:       018CC49307D776783425BA46A34BEF8505C4
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/C7OdrelbKjM0i740XZ9NdpAiZKM.roa
Signing time:             Mon 01 Jan 2024 10:30:19 +0000
ROA not before:           Mon 01 Jan 2024 10:30:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44081
IP address blocks:        92.87.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:07:d7:76:78:34:25:ba:46:a3:4b:ef:85:05:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
        Validity
            Not Before: Jan  1 10:30:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0bb39dade95b2a33348bbe345d9f4d76902264a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:e9:10:27:ce:25:63:6a:f6:4e:78:fa:f6:
                    a5:11:43:58:d2:c0:ed:25:53:26:1c:80:49:6f:a0:
                    80:ef:1d:bc:68:8b:e5:1a:4a:28:c2:7c:23:02:ef:
                    78:24:46:8b:fd:df:19:04:e0:f5:52:03:7c:c6:e9:
                    f2:c2:69:40:9d:25:7f:77:b8:ca:6e:74:bc:b7:22:
                    e5:5e:bb:16:71:a5:f1:82:5a:81:e4:63:66:f1:24:
                    a4:96:7e:5b:da:df:ac:1c:45:c3:f5:97:7f:8c:40:
                    0a:ba:e9:21:d9:02:a1:6e:ac:7b:10:c6:32:17:f6:
                    87:9e:f6:a7:d2:e6:fb:ab:a3:da:ca:92:fe:5b:d1:
                    4c:e5:42:42:f4:71:79:93:13:1c:78:67:cc:70:fb:
                    b6:60:1e:51:d2:d3:b2:f7:72:a6:e1:55:07:a6:7e:
                    bc:e5:b5:4f:98:df:83:fb:82:43:1d:5d:a2:73:69:
                    57:c8:16:f0:71:09:66:d3:25:cb:6d:0c:6a:17:63:
                    93:19:8a:4b:be:31:b1:65:e1:8a:d5:fc:3c:98:93:
                    94:b9:4b:ac:4e:79:58:cd:04:65:5f:81:d2:35:50:
                    24:6f:00:67:e7:74:e8:62:69:c5:30:70:16:07:eb:
                    5d:49:03:72:83:0c:c5:54:04:d4:71:45:12:f1:ba:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:9D:AD:E9:5B:2A:33:34:8B:BE:34:5D:9F:4D:76:90:22:64:A3
            X509v3 Authority Key Identifier:
                keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/C7OdrelbKjM0i740XZ9NdpAiZKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.87.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:3d:98:d1:ec:b6:48:8f:c8:38:23:29:73:dd:8f:34:e0:
         4e:d8:03:ac:dc:73:8f:db:63:23:ff:5a:db:13:f1:bb:5c:91:
         1d:37:4e:97:f4:2c:b5:4e:bd:2f:e4:38:5f:8c:1e:85:7c:5f:
         df:b4:ee:33:84:3a:67:7a:b2:af:18:29:83:f7:f4:f4:9f:df:
         64:07:13:5e:17:20:fc:cc:3e:59:d1:bd:5a:d4:11:76:66:ce:
         f1:2d:a9:54:f7:0b:b1:48:6f:7f:5f:18:98:e2:fd:2e:b4:d7:
         ff:93:c4:3e:f7:e1:f6:b7:b6:1a:65:7a:86:eb:16:ce:bc:d2:
         7d:6e:2c:7c:b8:bb:ed:e9:c6:36:96:34:26:94:96:dc:ac:a6:
         6f:ec:6f:24:6e:e4:4d:06:f0:81:3b:8b:44:c7:19:df:33:28:
         45:28:d5:4d:9d:5d:4c:c5:44:51:1f:8b:66:25:2b:32:87:e9:
         43:48:cc:66:6c:1f:6c:cd:50:46:62:de:05:44:33:af:d5:a4:
         33:ff:15:7c:5f:92:7e:d1:1a:8e:2b:31:f5:cc:d0:b2:d7:3b:
         d8:df:8c:eb:db:c1:58:8f:f3:c6:3f:86:e8:63:5e:67:1c:69:
         79:f9:6f:17:9b:bc:4d:e8:04:b3:a6:04:30:63:18:8d:ef:e6:
         1c:78:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 15:27:03 2024 by rpki-client on console-fra.rpki-client.org