Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/GI885Z-m1RACko9lPly0YVkSREc.roa
File:                     GI885Z-m1RACko9lPly0YVkSREc.roa (raw, json)
Hash identifier:          /cmbvf7kCKPvkybtpMt7uBUt52pUEmvXFktWORXATas=
Subject key identifier:   18:8F:3C:E5:9F:A6:D5:10:02:92:8F:65:3E:5C:B4:61:59:12:44:47
Certificate issuer:       /CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Certificate serial:       018976C284558276FFBE042E9C4984271EA4
Authority key identifier: 23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/GI885Z-m1RACko9lPly0YVkSREc.roa
Signing time:             Fri 21 Jul 2023 04:43:26 +0000
ROA not before:           Fri 21 Jul 2023 04:43:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42708
IP address blocks:        176.116.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:76:c2:84:55:82:76:ff:be:04:2e:9c:49:84:27:1e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23daf57a212bb7f320a2246f97959575d0e68ce3
        Validity
            Not Before: Jul 21 04:43:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=188f3ce59fa6d51002928f653e5cb46159124447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:ef:74:37:ed:23:c1:d8:65:c6:92:8a:90:
                    23:8c:47:36:62:ba:af:0b:b0:e1:b8:04:af:d6:ef:
                    12:23:fa:8f:9b:04:32:f7:50:ba:1e:b6:0d:87:ba:
                    e6:9d:bd:fd:dc:a5:f1:04:91:a5:f3:8c:ce:02:52:
                    f4:0a:85:25:d9:ce:ac:9c:f3:ae:37:06:90:81:9b:
                    11:ac:21:22:05:2d:5e:f4:e7:e6:c6:38:51:54:50:
                    91:f7:02:85:61:66:7d:01:0e:d7:85:6b:f0:d0:f6:
                    d7:aa:78:62:6c:70:6c:ec:fc:22:e7:97:48:f3:9c:
                    46:19:5a:10:18:c1:d6:6d:b6:21:01:e4:0b:44:02:
                    b0:20:d8:00:0b:d8:63:1c:6a:84:34:c1:61:42:fd:
                    a6:41:c7:e7:6a:b1:8e:ba:ce:16:db:f4:e4:6a:ee:
                    b8:22:56:ba:ad:c3:16:19:96:b2:81:6f:21:fa:77:
                    e4:a4:66:9b:cf:05:f8:d7:4d:e3:6a:92:f9:a0:ca:
                    50:7a:0f:29:57:49:27:84:d9:53:a7:81:6e:f8:f5:
                    48:3d:2e:eb:64:2c:04:f7:8b:20:58:7c:76:15:20:
                    6d:08:f5:23:08:01:52:8b:1f:16:04:80:f3:b1:05:
                    16:8b:0c:90:c5:ca:26:d4:10:f1:7b:cb:5d:4e:df:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8F:3C:E5:9F:A6:D5:10:02:92:8F:65:3E:5C:B4:61:59:12:44:47
            X509v3 Authority Key Identifier:
                keyid:23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/GI885Z-m1RACko9lPly0YVkSREc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:8a:50:28:d7:dd:d0:e7:f2:e0:74:df:05:f4:88:6a:47:
         d0:be:71:94:34:60:a1:5c:68:ce:f0:9b:75:b6:68:2b:0e:5f:
         2c:ca:10:28:ee:7b:2b:fa:29:aa:00:b1:52:10:9d:37:c8:d3:
         76:f5:77:61:86:2f:51:40:04:30:f2:39:89:bf:b0:f7:39:12:
         6c:0c:5c:92:83:fd:ec:dc:f2:40:99:37:12:09:4d:db:ab:bc:
         92:3c:db:4a:e7:a4:e9:c5:17:69:8e:02:7c:10:c5:b9:ae:4d:
         bc:16:2e:3a:a6:17:f9:3a:76:e2:47:0e:ef:7e:6d:30:b1:f3:
         8a:ad:de:f4:74:63:34:6a:61:af:01:a6:f1:34:24:98:8d:5f:
         5d:cc:2c:47:74:0f:2e:18:82:2c:4f:fc:7a:ee:a3:68:81:67:
         54:b6:9c:fd:ed:8d:5a:83:9e:1c:d1:42:ea:e5:39:05:60:0a:
         aa:b3:f3:5c:44:91:e8:45:6b:6d:8d:8e:58:00:f6:79:1a:bf:
         15:4d:c3:85:5b:ad:0b:14:5a:c0:53:41:ec:81:f8:bd:21:c8:
         45:e5:f2:fb:83:9d:24:d7:dc:90:74:01:33:38:c8:94:4a:97:
         ca:0d:30:cc:6d:60:d6:70:8d:f0:9e:b4:ab:b1:11:7d:00:a7:
         cb:92:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org