Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/fvK2lP2qgvbSN-dN_xi3iBzCksg.roa
File:                     fvK2lP2qgvbSN-dN_xi3iBzCksg.roa (raw, json)
Hash identifier:          lP0zYeZ0AnLCqt6WzLGgypOt4dqUq+uLSMHaGR7NLso=
Subject key identifier:   7E:F2:B6:94:FD:AA:82:F6:D2:37:E7:4D:FF:18:B7:88:1C:C2:92:C8
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       0184D2930386D406C1835EF051EC62381815
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/fvK2lP2qgvbSN-dN_xi3iBzCksg.roa
Signing time:             Fri 02 Dec 2022 11:22:40 +0000
ROA not before:           Fri 02 Dec 2022 11:22:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62068
IP address blocks:        77.37.36.0/24 maxlen: 24
                          77.37.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d2:93:03:86:d4:06:c1:83:5e:f0:51:ec:62:38:18:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Dec  2 11:22:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ef2b694fdaa82f6d237e74dff18b7881cc292c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:e1:a4:48:49:f7:21:98:70:51:77:77:50:
                    68:54:ad:93:40:bd:05:94:70:0a:d3:1a:5c:2e:15:
                    9f:e6:a7:94:2e:d5:4a:74:10:7d:75:9d:b7:9c:f9:
                    a1:95:4b:f6:3a:49:af:7f:fb:4f:6b:87:3b:45:71:
                    4d:a9:28:6d:11:39:05:07:41:53:43:c4:0e:bf:cd:
                    d3:99:35:c8:b4:33:a6:96:5f:d9:0d:11:ce:39:3e:
                    0e:9e:87:38:10:f0:92:0d:c1:64:20:0e:7b:ea:64:
                    ec:6f:15:ca:66:3a:e0:5e:87:3e:9e:d4:b6:3a:e9:
                    bf:b4:e3:c0:c4:00:89:9d:af:e7:1f:f3:1e:d2:a9:
                    fd:2a:52:38:21:ff:9d:aa:f8:c2:5b:93:0c:53:52:
                    41:c2:96:2d:51:c2:60:ee:15:e5:a6:19:06:ef:21:
                    67:41:aa:f0:8f:8e:cc:34:4d:a8:3b:a3:8b:0f:07:
                    25:af:72:91:e9:e8:da:17:20:74:fb:3f:fc:14:85:
                    bd:4b:d6:91:f0:29:38:66:19:d9:db:ef:e3:43:2e:
                    10:5d:68:78:13:ef:fc:d3:66:b5:7e:25:44:47:d5:
                    71:bc:b7:67:ab:9d:89:30:26:be:e4:d7:7c:84:26:
                    45:d2:f8:a7:07:b1:94:d5:3c:f2:0c:b0:a5:13:61:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:B6:94:FD:AA:82:F6:D2:37:E7:4D:FF:18:B7:88:1C:C2:92:C8
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/fvK2lP2qgvbSN-dN_xi3iBzCksg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.36.0/24
                  77.37.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:db:32:4f:2d:10:19:5e:d3:0d:7b:6f:ab:8d:76:6d:71:
         98:30:77:c5:bc:a4:72:54:fc:61:ac:d4:21:9d:a2:cd:7a:60:
         98:90:dd:3f:80:64:1d:d0:95:32:bd:08:b5:3c:dc:e5:18:3e:
         2c:f3:e5:ec:16:a5:ca:6b:df:ea:18:d5:15:60:66:48:fc:c9:
         00:21:cc:25:df:45:00:d7:b3:43:ae:3b:85:6a:13:b0:c6:2f:
         f5:7b:46:04:5b:4f:2b:43:0d:26:fe:f5:16:da:da:68:e7:7a:
         3a:de:03:72:af:ae:22:99:87:61:41:47:82:81:fd:8e:26:04:
         0a:9d:a5:bd:7b:20:c6:7f:e4:43:ff:33:66:91:3a:3a:1a:0c:
         92:62:a2:71:8b:61:42:90:0f:21:5e:42:bc:9a:82:a6:cb:06:
         b0:21:94:66:94:37:b1:b2:86:2c:64:26:c2:28:43:92:c2:1f:
         c3:f8:ba:aa:82:fb:af:a6:1c:86:1d:fa:8d:e6:41:7d:81:99:
         83:25:96:53:1e:fb:dc:7b:65:86:e2:51:57:eb:3e:6f:d7:16:
         c3:ae:5b:b3:b9:9b:d3:58:64:75:57:c4:5b:ec:85:34:37:d0:
         35:b6:f7:56:76:40:de:3a:88:b9:65:55:5c:e8:6e:9a:b4:5d:
         a9:6e:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net