Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/ULO0syPFLmNifKDDOaBT3wvP9wg.roa
File:                     ULO0syPFLmNifKDDOaBT3wvP9wg.roa (raw, json)
Hash identifier:          5w9kfL2RHPMzWljDseEcKpQe6n09FEjNa4b1k4Fg3v4=
Subject key identifier:   50:B3:B4:B3:23:C5:2E:63:62:7C:A0:C3:39:A0:53:DF:0B:CF:F7:08
Certificate issuer:       /CN=fb483ef4cdf6606a3eda98cee8f39b8fde105e10
Certificate serial:       01856D81BA272E9AF163E5F5865DB6D8D2EE
Authority key identifier: FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0g-9M32YGo-2pjO6PObj94QXhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/ULO0syPFLmNifKDDOaBT3wvP9wg.roa
Signing time:             Sun 01 Jan 2023 13:24:56 +0000
ROA not before:           Sun 01 Jan 2023 13:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58061
IP address blocks:        185.232.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:ba:27:2e:9a:f1:63:e5:f5:86:5d:b6:d8:d2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb483ef4cdf6606a3eda98cee8f39b8fde105e10
        Validity
            Not Before: Jan  1 13:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50b3b4b323c52e63627ca0c339a053df0bcff708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:3d:ae:52:64:62:42:b2:0c:86:29:85:db:
                    76:37:29:71:6a:02:fc:f3:56:5c:a0:fb:c9:c8:ef:
                    df:90:6f:a5:57:1b:f2:53:b8:23:d3:85:19:ff:b6:
                    0d:dc:e6:a9:ee:66:90:bc:8f:31:13:08:17:a1:3a:
                    0f:14:89:23:e1:6c:df:3a:8b:fb:a9:0e:74:88:99:
                    c0:f8:ed:24:f8:ee:08:b3:7d:58:42:29:e1:2e:ff:
                    18:10:7e:b1:0f:b9:59:0b:21:5a:b7:c7:75:06:6f:
                    d2:0f:4d:d1:30:90:cf:47:e8:14:fc:10:79:9a:e6:
                    ec:5c:d9:59:f0:8a:a6:f8:ff:ef:44:e5:39:6a:b8:
                    9a:1f:ad:a2:22:f1:39:88:20:7e:ca:76:98:be:60:
                    54:28:8b:af:5f:56:47:17:91:0f:eb:95:cc:30:e2:
                    95:53:28:f7:71:7c:7d:32:58:70:b3:ee:da:32:92:
                    83:f4:e2:48:73:d3:50:16:59:a0:fb:36:47:13:84:
                    05:00:b7:b2:87:86:63:da:6f:0e:2c:e6:bd:71:b5:
                    a1:34:f2:a9:70:69:db:88:3d:7f:1f:9a:6b:46:2b:
                    f8:54:75:9c:40:2b:41:84:c4:8f:f9:57:75:34:7e:
                    31:99:06:18:d9:11:29:d8:4a:61:ba:5f:01:f9:57:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B3:B4:B3:23:C5:2E:63:62:7C:A0:C3:39:A0:53:DF:0B:CF:F7:08
            X509v3 Authority Key Identifier:
                keyid:FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0g-9M32YGo-2pjO6PObj94QXhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/ULO0syPFLmNifKDDOaBT3wvP9wg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/1-0g-9M32YGo-2pjO6PObj94QXhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:9d:34:7a:58:7a:c9:6f:e8:a3:82:4f:5f:b1:c4:d2:ef:
         db:45:1b:c6:2e:35:77:d2:f0:ee:65:39:0b:db:4c:3f:13:02:
         20:88:d3:86:1e:ea:76:8c:e6:1a:c1:6d:7c:d3:3e:2b:9a:fa:
         b1:6c:3c:b5:fd:5e:f3:84:7c:e0:5b:2e:30:78:d4:b2:ae:75:
         24:07:78:31:47:41:b7:fb:df:27:5d:11:d1:37:23:79:96:0e:
         a0:39:22:05:89:41:e3:b3:4b:84:e4:c8:89:25:4b:ab:c5:a6:
         a4:73:ab:0f:65:2b:d0:3c:e1:e2:fe:66:6e:ab:4a:d2:a8:c1:
         d2:40:99:9c:22:f3:f7:e1:ff:e0:f0:28:08:92:19:b6:fe:6a:
         5f:ad:72:10:9f:49:68:c2:d5:0e:a2:d4:be:04:86:4f:28:c3:
         3a:95:f6:22:88:d8:13:d3:96:09:f3:64:ac:5d:1a:5c:8b:5a:
         e1:04:64:4f:74:10:8c:7e:4d:f3:c5:17:34:ab:46:e0:02:31:
         59:18:d5:d1:13:19:e6:fb:93:21:c2:c8:0d:3f:c4:8a:9c:57:
         cc:dc:3c:34:a1:4d:15:8a:99:ba:27:a0:36:7c:50:05:a3:f0:
         ff:f9:df:e4:9a:73:61:fd:51:3d:1d:8a:b1:42:ff:2a:39:73:
         aa:f4:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 07:35:17 2023 by rpki-client on console-fra.rpki-client.org