Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/pUgJIxXSwLXuHuFvb_GGbDrD8ws.roa
File:                     pUgJIxXSwLXuHuFvb_GGbDrD8ws.roa (raw, json)
Hash identifier:          ZpGPaEr19ZmMSYzBTRg+3JdQhT2uKqA8Xn4Z+xfB1p4=
Subject key identifier:   A5:48:09:23:15:D2:C0:B5:EE:1E:E1:6F:6F:F1:86:6C:3A:C3:F3:0B
Certificate issuer:       /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial:       04CE2789
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/pUgJIxXSwLXuHuFvb_GGbDrD8ws.roa
Signing time:             Sat 01 Jan 2022 16:02:28 +0000
ROA not before:           Sat 01 Jan 2022 16:02:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209132
IP address blocks:        88.214.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80619401 (0x4ce2789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
        Validity
            Not Before: Jan  1 16:02:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a548092315d2c0b5ee1ee16f6ff1866c3ac3f30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:3b:2d:cb:9a:52:ce:ed:84:7d:94:c5:ff:
                    4b:4b:3b:79:79:6b:34:44:dc:d1:62:12:ae:b2:ba:
                    0f:5f:90:03:91:f2:0d:2a:72:67:98:27:45:11:5d:
                    76:5e:03:d0:cc:43:24:98:98:87:cb:e2:60:3b:22:
                    25:21:a6:ed:fe:75:09:88:63:d0:f4:84:2d:b8:4d:
                    3c:0c:b9:51:06:28:35:88:d1:f4:81:0f:d2:09:eb:
                    ee:43:33:2f:ff:59:4e:0b:be:dd:83:7d:ea:5f:0e:
                    d1:ce:f1:19:9c:a9:da:d7:9f:46:04:11:71:2e:a5:
                    74:b6:3b:4b:20:e7:6e:66:8d:2f:4e:9b:1c:39:78:
                    b7:e3:c4:9b:9e:5e:2b:55:35:38:88:ce:5f:da:ce:
                    6e:bc:44:e3:c5:d8:08:8f:a9:b6:5e:84:6a:32:48:
                    19:20:14:f6:0d:f5:f9:6e:94:ab:e3:18:6a:57:f5:
                    a6:2c:c8:04:01:31:a3:56:20:55:42:fc:e4:a6:e7:
                    69:04:87:fc:71:cf:82:e3:47:ad:00:3a:44:67:93:
                    ab:c1:ce:a2:92:18:ba:ee:3d:f3:8b:dd:13:02:51:
                    bd:08:62:fb:e0:26:e3:d9:39:92:2d:c8:8e:e0:03:
                    6b:63:66:35:c4:13:f8:7f:49:c6:c6:40:2e:37:09:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:48:09:23:15:D2:C0:B5:EE:1E:E1:6F:6F:F1:86:6C:3A:C3:F3:0B
            X509v3 Authority Key Identifier:
                keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/pUgJIxXSwLXuHuFvb_GGbDrD8ws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6e:06:17:3c:79:81:e7:68:e5:38:9d:6c:6d:21:cc:5f:76:
         87:f6:30:11:af:52:12:6e:0e:35:11:2f:1a:89:fc:0f:fc:b5:
         5f:7f:00:3a:e5:82:06:5f:d2:39:3d:52:85:eb:b6:f9:24:24:
         a2:07:5d:3f:f2:01:3b:19:ff:6c:a3:7d:40:df:a1:be:80:7b:
         ce:9b:46:5c:26:d2:75:45:26:21:74:ca:58:aa:5c:c7:eb:52:
         81:ca:66:da:01:15:ba:73:5c:c1:e9:6f:ba:2b:39:fc:78:6a:
         12:b5:b3:2c:58:15:8e:65:51:14:bf:ac:72:30:19:b9:dd:6b:
         31:14:f6:b5:3a:63:de:5b:79:fd:88:54:10:e8:8b:52:5a:49:
         13:be:dd:17:12:81:d4:9c:34:1e:6f:ab:1c:d4:7a:98:43:cb:
         0e:38:9d:fc:e5:6f:42:81:a9:ed:e3:d0:4a:15:bf:ca:66:e3:
         30:fa:8f:07:72:1d:e0:f3:b2:c7:f6:d3:64:4c:5e:a8:14:bc:
         88:49:c8:1f:37:3d:2a:74:0b:de:90:c6:78:99:c2:d2:a1:3d:
         fa:b1:7b:70:80:65:eb:ac:3a:0f:8c:78:7d:84:54:5f:47:41:
         c6:81:7d:24:d7:7e:fb:d2:55:5e:17:fa:e6:45:01:35:7d:a0:
         d0:bd:66:19
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBM4niTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTE5M2I2ZTRkMGJlODkwMzVlNzk5MzliNTAwMmZjNWMxNmM5YmNjMB4XDTIyMDEw
MTE2MDIyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTU0ODA5MjMxNWQy
YzBiNWVlMWVlMTZmNmZmMTg2NmMzYWMzZjMwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWbOy3LmlLO7YR9lMX/S0s7eXlrNETc0WISrrK6D1+QA5Hy
DSpyZ5gnRRFddl4D0MxDJJiYh8viYDsiJSGm7f51CYhj0PSELbhNPAy5UQYoNYjR
9IEP0gnr7kMzL/9ZTgu+3YN96l8O0c7xGZyp2tefRgQRcS6ldLY7SyDnbmaNL06b
HDl4t+PEm55eK1U1OIjOX9rObrxE48XYCI+ptl6EajJIGSAU9g31+W6Uq+MYalf1
pizIBAExo1YgVUL85KbnaQSH/HHPguNHrQA6RGeTq8HOopIYuu4984vdEwJRvQhi
++Am49k5ki3IjuADa2NmNcQT+H9JxsZALjcJkBUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSlSAkjFdLAte4e4W9v8YZsOsPzCzAfBgNVHSMEGDAWgBQZGTtuTQvokDXn
mTm1AC/FwWybzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dSazdiazBMNkpBMTU1azV0UUF2eGNGc204dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvZTkzODQ4LTM1MjUtNGJjYy1iMjJkLTg5Mzk4OWFlZjAwZS8x
L3BVZ0pJeFhTd0xYdUh1RnZiX0dHYkRyRDh3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
ZTkzODQ4LTM1MjUtNGJjYy1iMjJkLTg5Mzk4OWFlZjAwZS8xL0dSazdiazBMNkpB
MTU1azV0UUF2eGNGc204dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFjWGjANBgkqhkiG9w0BAQsFAAOC
AQEAnW4GFzx5gedo5TidbG0hzF92h/YwEa9SEm4ONREvGon8D/y1X38AOuWCBl/S
OT1Sheu2+SQkogddP/IBOxn/bKN9QN+hvoB7zptGXCbSdUUmIXTKWKpcx+tSgcpm
2gEVunNcwelvuis5/HhqErWzLFgVjmVRFL+scjAZud1rMRT2tTpj3lt5/YhUEOiL
UlpJE77dFxKB1Jw0Hm+rHNR6mEPLDjid/OVvQoGp7ePQShW/ymbjMPqPB3Id4POy
x/bTZExeqBS8iEnIHzc9KnQL3pDGeJnC0qE9+rF7cIBl66w6D4x4fYRUX0dBxoF9
JNd++9JVXhf65kUBNX2g0L1mGQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net