Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/W4uMreYqX6iByop18x2idygx908.roa
File:                     W4uMreYqX6iByop18x2idygx908.roa (raw, json)
Hash identifier:          FfSdrNYelUIVsXLJ6j8T2WbiNltnp24WDlol859WzdE=
Subject key identifier:   5B:8B:8C:AD:E6:2A:5F:A8:81:CA:8A:75:F3:1D:A2:77:28:31:F7:4F
Certificate issuer:       /CN=862b88563d6847558f99cf48edd4005409b1f4bc
Certificate serial:       01856C53A4E447D03695EAF118F44EB960BF
Authority key identifier: 86:2B:88:56:3D:68:47:55:8F:99:CF:48:ED:D4:00:54:09:B1:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/W4uMreYqX6iByop18x2idygx908.roa
Signing time:             Sun 01 Jan 2023 07:54:58 +0000
ROA not before:           Sun 01 Jan 2023 07:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50430
IP address blocks:        93.157.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:a4:e4:47:d0:36:95:ea:f1:18:f4:4e:b9:60:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862b88563d6847558f99cf48edd4005409b1f4bc
        Validity
            Not Before: Jan  1 07:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b8b8cade62a5fa881ca8a75f31da2772831f74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:1d:e8:29:92:c2:80:3a:e7:94:95:91:aa:
                    b4:85:8f:4a:cb:a9:4b:dc:2a:1e:d7:0a:b8:f1:f0:
                    97:68:ed:00:67:cb:91:45:1b:ce:0b:45:e7:a4:a2:
                    3c:a5:62:1a:9a:d4:15:bb:b4:12:2b:d0:17:ea:de:
                    08:27:0e:3d:ab:9d:e2:d4:27:13:e1:dc:3a:9b:a5:
                    29:24:24:81:6c:c5:04:86:a3:74:b9:22:92:a5:bf:
                    b1:f5:3b:39:65:2a:fd:62:ab:8e:ad:35:c3:a9:95:
                    71:4a:46:73:39:2b:86:22:a9:f6:e1:c8:66:f8:46:
                    97:4e:47:23:64:75:2d:7d:ae:62:96:e2:34:c1:14:
                    4c:9d:aa:a5:12:32:40:3e:79:5a:b5:e9:8e:80:78:
                    43:aa:3a:26:8f:d0:b1:dd:58:42:b2:eb:4d:bd:07:
                    59:0c:4e:0c:58:bb:8d:e2:e0:ad:31:6a:01:ca:42:
                    c3:07:54:c7:1a:a9:0f:a4:95:93:e1:25:fd:2b:8e:
                    3f:ff:fc:67:5f:cc:7d:7a:44:28:e0:da:ee:89:bb:
                    53:e1:e7:12:2d:b6:64:ee:1b:4d:e2:6b:32:f1:47:
                    7a:07:e4:34:45:4a:a5:bd:7e:50:b1:9b:7b:7c:37:
                    ea:d5:a0:87:1d:02:fc:8e:7c:d3:f7:ab:99:99:c3:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:8C:AD:E6:2A:5F:A8:81:CA:8A:75:F3:1D:A2:77:28:31:F7:4F
            X509v3 Authority Key Identifier:
                keyid:86:2B:88:56:3D:68:47:55:8F:99:CF:48:ED:D4:00:54:09:B1:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/W4uMreYqX6iByop18x2idygx908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:18:1f:d1:d9:af:9c:23:71:fb:1c:38:ec:e9:3e:25:87:b6:
         cd:b1:f1:b5:77:a8:5c:96:4c:f3:80:31:21:d1:bb:f9:da:c8:
         6f:19:7a:c1:f6:ce:e8:15:c9:87:12:42:a7:38:02:e3:02:9b:
         76:6d:e6:60:76:16:28:28:d4:1e:c2:c3:f1:4a:27:1a:f0:81:
         bd:99:03:fb:06:34:f4:28:56:45:c7:92:77:ac:3c:fb:12:2a:
         d4:0c:75:56:04:ee:35:23:22:a6:bc:4c:2a:b8:01:8e:a4:85:
         13:f2:18:d9:65:9e:6e:08:d4:3a:21:8b:5d:5a:4b:db:5c:da:
         ec:7a:25:d2:99:7f:ef:ee:e9:8b:47:8b:9e:a8:c6:1b:aa:d4:
         5e:b7:64:97:98:60:1f:c9:1e:85:59:9e:ac:18:da:13:fe:b4:
         3a:cf:55:b9:7f:96:af:b9:4c:27:07:88:ef:7d:bd:91:44:c4:
         91:f8:d0:35:13:10:08:58:d3:24:40:24:4d:9b:7e:9d:f4:dc:
         36:af:a6:2d:a8:8e:22:5c:64:4e:cd:ec:9b:2c:3d:0f:f5:4e:
         28:ec:2c:15:d3:f8:42:89:5f:cd:99:28:6d:18:2a:a9:f1:e3:
         07:e2:7a:86:c5:62:9d:70:61:4f:55:34:84:a0:43:21:31:c0:
         3c:ae:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:35 2023 by rpki-client on console.sobornost.net