Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa
File:                     Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa (raw, json)
Hash identifier:          peUxHeNiz+fH8nbCOCYsRkuwwMY+SxJRD7icSc0BEwc=
Subject key identifier:   46:CA:B5:2A:DC:DF:65:BD:86:BF:83:9B:6C:48:F1:19:C5:E4:67:02
Certificate issuer:       /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial:       019424B2A71D40CE0A3FC3681BA2E7BCDAB4
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa
Signing time:             Thu 02 Jan 2025 01:47:55 +0000
ROA not before:           Thu 02 Jan 2025 01:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207280
IP address blocks:        83.136.223.0/24 maxlen: 32
                          2a10:f00::/48 maxlen: 128
                          2a10:f00:1::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:a7:1d:40:ce:0a:3f:c3:68:1b:a2:e7:bc:da:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
        Validity
            Not Before: Jan  2 01:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=46cab52adcdf65bd86bf839b6c48f119c5e46702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1a:69:fc:83:90:d5:a6:ed:57:b0:de:8a:a6:
                    39:6b:8b:6d:0c:d1:c0:e3:4a:ae:b6:7d:ac:9a:19:
                    85:36:97:64:1d:3a:e9:5d:c6:96:26:27:49:98:ae:
                    0b:91:e4:a3:3a:0c:0a:24:36:7b:76:ed:09:3d:07:
                    c5:be:03:84:61:4d:c6:c2:8d:89:5b:c0:a3:ee:2a:
                    50:83:76:bc:d1:0b:d6:e0:77:ed:d1:fb:be:45:5f:
                    29:33:8f:76:a9:d5:1b:1c:96:18:5f:09:53:1a:9a:
                    81:20:2a:98:96:7b:fe:1f:06:cd:97:5a:05:ae:2f:
                    ae:a6:0e:03:a5:4b:96:48:a6:dd:15:43:6b:82:0a:
                    a3:4c:68:f9:85:6e:d9:8e:ee:b6:1e:46:69:3b:41:
                    08:a2:1a:49:41:8f:cf:24:6c:f7:9d:aa:9b:64:a5:
                    1b:03:0f:9d:62:41:29:83:5d:37:e1:23:86:fd:82:
                    26:9a:f4:5c:ff:06:27:29:87:3d:cd:5e:ec:1f:48:
                    7b:28:c5:4c:de:48:51:b6:26:9f:17:7b:6f:95:b2:
                    28:d8:c5:72:68:ce:e3:a0:ba:3c:9e:0d:63:a7:6b:
                    17:7f:45:1c:10:33:18:be:b3:e7:98:55:b6:e1:c4:
                    c9:6c:79:77:be:9a:40:92:57:e5:a1:84:c6:70:c5:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:B5:2A:DC:DF:65:BD:86:BF:83:9B:6C:48:F1:19:C5:E4:67:02
            X509v3 Authority Key Identifier:
                keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.223.0/24
                IPv6:
                  2a10:f00::/47

    Signature Algorithm: sha256WithRSAEncryption
         c6:5a:3b:f7:d3:99:fb:de:72:e8:fa:ac:6b:d4:5e:f7:d1:9c:
         62:2b:f4:7f:fe:1f:87:a8:9d:a2:89:2d:5f:a9:58:33:1b:0e:
         15:d5:33:65:af:d8:a0:46:54:3c:35:83:ad:c6:d0:b4:7a:f1:
         78:0b:e4:a1:3f:d8:74:5d:8f:ab:e7:f4:27:2b:54:3c:db:00:
         19:ec:ff:98:57:f8:30:1d:2e:8d:50:ab:e1:7a:ca:36:07:9d:
         d6:d2:c2:68:6a:c6:0e:6d:a1:50:4a:4e:dd:a8:47:b6:ab:54:
         d9:4c:e3:d3:04:2d:23:b9:ad:c5:ff:c2:de:a9:77:a7:3c:23:
         e8:b5:ff:5e:40:51:ae:63:fc:24:21:bf:bd:41:c0:15:1a:d0:
         35:38:26:9d:0c:0f:09:72:4d:1d:59:30:c4:d7:b3:17:68:2f:
         7b:fd:9b:a4:04:ed:98:76:ac:40:17:b0:6e:7c:05:42:be:da:
         42:6d:16:f4:e7:1e:02:6e:8c:22:11:ac:20:f6:d8:75:74:1d:
         25:1a:d7:34:0e:4e:76:90:f4:a9:61:29:b4:3e:a0:7f:c9:29:
         f6:b5:8d:a4:ac:ea:94:1f:4e:10:67:f9:71:39:ec:33:c2:5e:
         c9:a0:d9:b6:d6:bb:1b:85:bf:d0:a1:c0:ee:09:12:35:3f:ea:
         17:2a:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----