Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/LOB70XmNT9NHuXBqO48EzMx2h5w.roa
File:                     LOB70XmNT9NHuXBqO48EzMx2h5w.roa (raw, json)
Hash identifier:          nRwOitDL3h8x2yAvbfQFcgKxhQth8YkoINdMdtFRlWw=
Subject key identifier:   2C:E0:7B:D1:79:8D:4F:D3:47:B9:70:6A:3B:8F:04:CC:CC:76:87:9C
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       01854DCBBAE3BB66E31D69860D9B9829AB73
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/LOB70XmNT9NHuXBqO48EzMx2h5w.roa
Signing time:             Mon 26 Dec 2022 09:37:55 +0000
ROA not before:           Mon 26 Dec 2022 09:37:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204843
IP address blocks:        93.127.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:4d:cb:ba:e3:bb:66:e3:1d:69:86:0d:9b:98:29:ab:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Dec 26 09:37:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ce07bd1798d4fd347b9706a3b8f04cccc76879c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:43:f5:42:b6:29:02:98:81:db:f6:f7:51:
                    6f:1a:8d:4c:1f:7a:0a:e8:26:7a:15:dd:c7:3e:a3:
                    33:95:82:12:4a:f1:fb:c1:2d:23:1d:b4:96:b6:26:
                    a0:0e:bd:c4:33:5a:9f:8d:46:8e:2c:f2:92:18:23:
                    f0:a9:20:7c:a3:af:a6:c6:4d:a4:39:2d:79:e4:8a:
                    3c:ce:78:3b:24:46:c3:b8:7d:4e:ae:2c:71:1e:08:
                    63:57:74:2f:f0:89:d4:45:63:39:9d:ab:f4:66:22:
                    23:8d:e0:24:87:eb:89:96:e0:31:0d:c2:21:34:8e:
                    e4:8d:b9:9c:3e:f6:8c:54:98:13:1d:84:2f:a6:e1:
                    11:9f:0c:36:d0:b0:af:5f:ea:43:57:5f:31:9f:66:
                    fd:ee:06:4f:b4:f4:b0:c4:83:68:6a:f9:fa:a2:28:
                    69:2a:20:38:ef:ea:07:cd:45:b6:b2:2b:c0:43:36:
                    ae:f1:07:fd:e8:0e:71:8d:3d:19:fe:0d:4b:b6:12:
                    ba:58:29:9c:b6:a7:4f:ed:64:6b:56:53:c9:47:97:
                    06:15:48:26:d9:8c:0f:8c:13:66:f0:0d:4e:3c:bf:
                    a6:66:d3:d1:f9:7c:66:cb:bf:bb:bd:29:db:69:a8:
                    e4:c3:94:df:05:61:25:20:b9:dc:8b:84:5a:1a:58:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:7B:D1:79:8D:4F:D3:47:B9:70:6A:3B:8F:04:CC:CC:76:87:9C
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/LOB70XmNT9NHuXBqO48EzMx2h5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:04:3a:f3:80:74:88:45:e4:dd:8e:e3:18:fc:eb:30:39:71:
         13:44:30:e4:57:9b:73:7d:79:6d:be:4b:33:f8:c1:8a:6c:af:
         a4:d6:e8:bf:6a:1a:05:87:0e:76:2d:2c:a2:99:d5:6e:07:b5:
         e0:be:44:68:e5:35:f6:be:76:3c:8b:fb:ca:91:63:82:1b:e9:
         12:57:b0:6c:81:51:49:46:67:e1:2f:02:ba:94:18:cf:7c:37:
         7a:e1:b9:f8:9b:a8:00:c9:33:9a:2b:4e:65:bd:70:a1:0d:3b:
         1b:b5:1b:b5:d3:44:51:ab:dd:18:23:1d:b9:28:43:f0:99:2f:
         ac:a0:9c:b2:39:f9:6d:11:bc:85:17:e4:b5:1b:9f:ae:5b:19:
         88:5a:57:ba:09:4c:58:9b:bf:a7:f5:b1:6d:f7:f0:6c:f5:fa:
         59:d6:bc:af:97:a3:c1:39:f7:b1:09:cf:85:74:49:dd:23:3a:
         08:35:af:ab:db:63:80:ff:b8:d4:01:f9:da:65:85:cf:25:4b:
         53:cb:c1:93:8a:67:e3:1f:ca:f0:d6:93:53:c2:71:ed:d7:f1:
         84:97:1a:b0:5c:a4:8e:f9:5e:54:c8:f9:c6:57:a8:a6:08:f8:
         2a:02:d9:b2:89:b5:7d:f7:9d:b6:d8:b0:a6:4b:a2:76:42:d6:
         d7:f5:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net