Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/pRdqA1luwfPulLZDbobOrqPOkA8.roa
File:                     pRdqA1luwfPulLZDbobOrqPOkA8.roa (raw, json)
Hash identifier:          11jV7wogUu8R7CqsiBq5xbNaqvNl+x9bq1eTqbWWaxE=
Subject key identifier:   A5:17:6A:03:59:6E:C1:F3:EE:94:B6:43:6E:86:CE:AE:A3:CE:90:0F
Certificate issuer:       /CN=43024627b16e9cf8537f573085db454cf8cee6fe
Certificate serial:       073AA278
Authority key identifier: 43:02:46:27:B1:6E:9C:F8:53:7F:57:30:85:DB:45:4C:F8:CE:E6:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwJGJ7FunPhTf1cwhdtFTPjO5v4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/pRdqA1luwfPulLZDbobOrqPOkA8.roa
Signing time:             Sat 01 Jan 2022 12:54:37 +0000
ROA not before:           Sat 01 Jan 2022 12:54:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48164
IP address blocks:        193.104.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121283192 (0x73aa278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43024627b16e9cf8537f573085db454cf8cee6fe
        Validity
            Not Before: Jan  1 12:54:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5176a03596ec1f3ee94b6436e86ceaea3ce900f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:5f:aa:9c:dd:78:ae:81:50:ae:73:c2:b9:
                    c5:83:3f:ea:4f:04:cd:97:59:0f:99:d6:de:b0:bf:
                    77:cf:f9:20:c7:b2:9a:e7:f3:dd:72:6f:6e:80:fd:
                    e1:64:e0:65:1e:90:95:0b:db:69:d3:c7:59:1f:24:
                    a4:78:c4:a0:76:41:c9:14:18:ff:a4:f1:b9:6a:78:
                    8c:6f:6f:c0:a9:f4:fc:20:dc:2b:f7:d0:c9:b5:32:
                    d0:0c:04:66:37:1b:8c:56:d8:f2:18:ae:85:0c:bd:
                    74:7f:ff:5f:c9:e2:2e:90:ea:d9:4b:46:77:8a:3e:
                    54:c3:79:a9:17:31:53:46:ab:b0:98:5c:10:18:d5:
                    86:e5:58:89:42:fe:59:56:fa:ec:4c:23:d6:23:d7:
                    c4:af:9f:39:a3:a4:55:d0:f2:49:c8:13:71:7c:29:
                    63:25:c4:28:63:f3:e3:e1:23:77:71:90:1c:51:00:
                    b4:63:b9:03:33:46:a1:76:c0:d6:ba:ea:8d:3f:8a:
                    44:ab:1d:de:4f:da:45:52:df:e1:88:f2:ab:d6:9e:
                    14:cf:09:60:be:4d:30:04:45:5f:86:6e:41:9a:18:
                    4b:4f:0b:05:bf:cf:69:f1:41:32:da:ae:42:2c:2e:
                    aa:d5:64:ae:4e:d0:dc:7b:95:4b:a2:30:c3:16:9a:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:17:6A:03:59:6E:C1:F3:EE:94:B6:43:6E:86:CE:AE:A3:CE:90:0F
            X509v3 Authority Key Identifier:
                keyid:43:02:46:27:B1:6E:9C:F8:53:7F:57:30:85:DB:45:4C:F8:CE:E6:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwJGJ7FunPhTf1cwhdtFTPjO5v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/pRdqA1luwfPulLZDbobOrqPOkA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57b216-ee54-4306-9d16-4ff3b79579b4/1/QwJGJ7FunPhTf1cwhdtFTPjO5v4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:c2:1c:da:b9:6c:0c:57:3d:1f:c8:19:98:50:9a:3c:9b:19:
         68:e2:5a:ab:22:3f:40:e4:7f:d2:a1:4e:21:9b:08:f3:4f:fb:
         b8:81:d4:6b:b4:e3:f1:41:d5:02:37:9b:15:ca:7c:bc:5c:db:
         93:ac:22:3d:3b:47:f2:f2:76:de:4d:49:b1:19:3b:5c:76:1c:
         ca:92:9a:4e:56:4d:a4:0f:af:91:65:64:7a:e4:36:0a:28:c7:
         57:d0:90:fd:2b:ef:92:4d:b0:ec:6a:89:1c:14:fc:e0:dd:61:
         c0:73:f6:cd:c5:e4:95:a2:d2:0f:3a:68:8e:3b:71:f2:34:cf:
         0b:18:2f:ac:c4:63:4c:e6:f1:d3:39:92:0f:61:f2:97:f4:5a:
         04:a2:0e:0a:e9:06:53:94:de:f0:49:c3:04:f5:6d:9a:57:81:
         f6:2f:80:db:71:e0:87:9f:5d:d0:a2:8a:78:b0:bb:31:bd:73:
         cc:29:ee:5b:9d:5c:e0:7e:47:bf:15:1e:8f:9e:d8:42:fd:1c:
         fa:51:3f:e5:a9:97:5a:7b:05:d7:69:18:18:af:9f:10:f6:d4:
         43:46:8a:3b:2a:eb:5a:67:0f:6d:cb:e0:91:2c:75:7e:d9:1f:
         52:43:77:69:a4:2b:82:f2:d5:45:db:d0:66:ae:8a:23:e8:14:
         bb:3f:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net