Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/VDHqAjD01G6x7pJCIgIceyLR6Ok.roa
File:                     VDHqAjD01G6x7pJCIgIceyLR6Ok.roa (raw, json)
Hash identifier:          laeencMBz5KnYBq/P944HerH2I3X8TW6BxuZfQu7GCE=
Subject key identifier:   54:31:EA:02:30:F4:D4:6E:B1:EE:92:42:22:02:1C:7B:22:D1:E8:E9
Certificate issuer:       /CN=5a33b9aebb6cf6ff70963bbe71760c7b4f9571e2
Certificate serial:       01877A9CB7AC8B2DF2A87437873D7FA24EA6
Authority key identifier: 5A:33:B9:AE:BB:6C:F6:FF:70:96:3B:BE:71:76:0C:7B:4F:95:71:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WjO5rrts9v9wlju-cXYMe0-VceI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/VDHqAjD01G6x7pJCIgIceyLR6Ok.roa
Signing time:             Thu 13 Apr 2023 12:35:03 +0000
ROA not before:           Thu 13 Apr 2023 12:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        176.110.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7a:9c:b7:ac:8b:2d:f2:a8:74:37:87:3d:7f:a2:4e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a33b9aebb6cf6ff70963bbe71760c7b4f9571e2
        Validity
            Not Before: Apr 13 12:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5431ea0230f4d46eb1ee924222021c7b22d1e8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:26:59:3d:1c:d4:12:d8:17:08:e4:cc:a4:
                    98:27:c6:51:4b:73:81:92:aa:8d:ad:e6:e3:45:33:
                    2d:42:d3:cc:5a:d3:73:d2:41:5c:f8:ce:c4:6b:a3:
                    aa:9d:7e:97:19:cc:59:14:f1:51:f8:d6:95:e6:40:
                    19:ff:0b:31:e3:4b:e2:3d:2b:39:46:97:f0:fc:a8:
                    d6:14:c7:4f:f5:23:6f:91:3d:43:8e:79:43:a5:85:
                    cf:4b:bb:3e:ac:ef:b6:7e:44:ec:b7:c5:b3:1b:8e:
                    4a:dc:d1:f8:ad:b3:0f:e7:af:a8:b6:10:e0:80:38:
                    60:7d:2c:2a:f0:d3:1f:ef:69:c4:60:f2:08:9c:b0:
                    3b:39:cb:82:2a:ee:43:ea:9f:fa:23:eb:48:72:f9:
                    61:61:98:7d:10:eb:44:6d:cd:58:eb:62:de:86:ae:
                    91:a8:cc:6c:a5:04:1e:34:e6:f9:46:a4:01:7c:79:
                    b5:da:33:d4:d4:f4:a7:33:e1:8d:2b:51:27:8b:38:
                    1c:b8:17:6e:e9:e1:ea:69:35:b9:9f:62:05:32:cf:
                    38:11:48:3f:87:32:38:37:ff:e3:41:5c:04:88:14:
                    d9:73:c8:1b:8b:4c:c5:a8:8b:69:d0:a2:8b:49:42:
                    80:c9:c0:77:18:36:dc:58:1b:d5:47:3e:2a:57:0c:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:EA:02:30:F4:D4:6E:B1:EE:92:42:22:02:1C:7B:22:D1:E8:E9
            X509v3 Authority Key Identifier:
                keyid:5A:33:B9:AE:BB:6C:F6:FF:70:96:3B:BE:71:76:0C:7B:4F:95:71:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjO5rrts9v9wlju-cXYMe0-VceI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/VDHqAjD01G6x7pJCIgIceyLR6Ok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/80c901-cc75-4817-bcd2-b9229ec7c490/1/WjO5rrts9v9wlju-cXYMe0-VceI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.110.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:03:f8:88:4c:00:39:98:6e:94:f1:13:91:af:69:5e:11:
         86:9d:8b:7e:f0:0a:52:b8:0c:cf:4f:02:d7:73:5d:83:d0:95:
         6f:ad:9c:dc:62:f5:0d:86:43:1a:7d:83:e5:3f:29:0f:b9:c5:
         eb:cd:2a:6f:4e:c1:51:e8:18:54:5a:3a:d7:cc:1e:d4:e1:be:
         ad:52:6c:6f:59:4b:82:2a:4a:3e:83:01:c8:20:5b:7d:71:46:
         e1:5c:55:5e:12:cd:df:fa:66:b0:87:d0:d7:1e:0f:2f:01:97:
         ec:9a:e0:e6:ed:4c:68:c9:25:a4:93:7c:13:2e:09:34:4c:8a:
         74:33:87:9b:9c:8a:08:7e:9f:df:c5:a2:13:68:8b:e3:08:02:
         fa:47:07:a6:83:62:24:ac:cd:0e:c0:bc:94:3f:08:f7:f4:35:
         55:6b:16:26:df:d5:90:f7:83:92:43:52:94:e0:0b:41:a3:8f:
         36:55:47:ba:38:1a:49:ad:34:cb:db:d1:fb:88:63:c0:22:66:
         00:88:11:40:88:18:c5:cd:1e:09:77:d1:bb:07:7c:e3:01:cf:
         37:67:6d:02:1d:11:1a:ac:04:6f:ec:3a:05:c1:1b:dd:bc:6a:
         b0:a7:0d:e4:57:17:b0:a8:17:1b:86:e7:1e:33:a5:dd:c5:c5:
         24:84:36:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd6nLesiy3yqHQ3hz1/ok6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMzNiOWFlYmI2Y2Y2ZmY3MDk2M2JiZTcxNzYwYzdiNGY5
NTcxZTIwHhcNMjMwNDEzMTIzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDMxZWEwMjMwZjRkNDZlYjFlZTkyNDIyMjAyMWM3YjIyZDFlOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiywmWT0c1BLYFwjkzKSYJ8ZRS3OB
kqqNrebjRTMtQtPMWtNz0kFc+M7Ea6OqnX6XGcxZFPFR+NaV5kAZ/wsx40viPSs5
Rpfw/KjWFMdP9SNvkT1DjnlDpYXPS7s+rO+2fkTst8WzG45K3NH4rbMP56+othDg
gDhgfSwq8NMf72nEYPIInLA7OcuCKu5D6p/6I+tIcvlhYZh9EOtEbc1Y62Lehq6R
qMxspQQeNOb5RqQBfHm12jPU1PSnM+GNK1EnizgcuBdu6eHqaTW5n2IFMs84EUg/
hzI4N//jQVwEiBTZc8gbi0zFqItp0KKLSUKAycB3GDbcWBvVRz4qVwzd7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQx6gIw9NRuse6SQiICHHsi0ejpMB8GA1UdIwQY
MBaAFFozua67bPb/cJY7vnF2DHtPlXHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pPNXJydHM5djl3bGp1LWNYWU1lMC1WY2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84MGM5MDEtY2M3NS00ODE3LWJjZDIt
YjkyMjllYzdjNDkwLzEvVkRIcUFqRDAxRzZ4N3BKQ0lnSWNleUxSNk9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84MGM5MDEtY2M3NS00ODE3LWJjZDItYjkyMjllYzdjNDkw
LzEvV2pPNXJydHM5djl3bGp1LWNYWU1lMC1WY2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsG5uMA0G
CSqGSIb3DQEBCwUAA4IBAQBE/QP4iEwAOZhulPETka9pXhGGnYt+8ApSuAzPTwLX
c12D0JVvrZzcYvUNhkMafYPlPykPucXrzSpvTsFR6BhUWjrXzB7U4b6tUmxvWUuC
Kko+gwHIIFt9cUbhXFVeEs3f+mawh9DXHg8vAZfsmuDm7UxoySWkk3wTLgk0TIp0
M4ebnIoIfp/fxaITaIvjCAL6Rwemg2IkrM0OwLyUPwj39DVVaxYm39WQ94OSQ1KU
4AtBo482VUe6OBpJrTTL29H7iGPAImYAiBFAiBjFzR4Jd9G7B3zjAc83Z20CHREa
rARv7DoFwRvdvGqwpw3kVxewqBcbhuceM6XdxcUkhDaW
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-fra.rpki-client.org