Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/qjWVktc6KwV-8xaAtdIDjTgnUPU.roa
File:                     qjWVktc6KwV-8xaAtdIDjTgnUPU.roa (raw, json)
Hash identifier:          GcoBnvb3QW2YSoDqYDXe/9G5CFc2hyHwdZaG66p4i7Q=
Subject key identifier:   AA:35:95:92:D7:3A:2B:05:7E:F3:16:80:B5:D2:03:8D:38:27:50:F5
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C441DD4A3A14E90510F8D79ADE56D821E
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/qjWVktc6KwV-8xaAtdIDjTgnUPU.roa
Signing time:             Thu 07 Dec 2023 11:50:54 +0000
ROA not before:           Thu 07 Dec 2023 11:50:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216398
IP address blocks:        185.212.33.0/24 maxlen: 24
                          2a13:ef41:e000::/35 maxlen: 48
                          2a13:ef45::/32 maxlen: 48
                          2a13:ef44:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:44:1d:d4:a3:a1:4e:90:51:0f:8d:79:ad:e5:6d:82:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec  7 11:50:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa359592d73a2b057ef31680b5d2038d382750f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:19:21:84:5c:1b:c6:f8:12:ed:4f:03:1b:
                    d9:01:ff:f6:c7:ae:44:8c:43:9e:f3:f5:bc:db:9c:
                    ef:9b:1d:88:08:e8:bc:2b:70:a9:16:41:c1:9a:e4:
                    e8:e5:78:15:2f:b9:66:23:a9:70:cb:23:45:7d:81:
                    51:c2:f8:90:98:b1:f5:b7:15:f2:b9:5e:a2:7a:39:
                    22:8e:44:2f:16:a6:5d:c6:38:e0:eb:48:ee:92:d6:
                    03:0d:ce:60:4e:c5:0d:42:39:7d:e5:fe:cd:ed:42:
                    9a:93:cd:90:c6:ea:c6:6f:8f:3d:dd:c1:8f:b8:3f:
                    9b:7f:10:bd:46:d7:e0:b7:2c:3b:5c:1f:b2:12:b5:
                    aa:8a:16:bc:53:88:72:1b:04:47:b6:7c:d3:d5:31:
                    df:a8:0e:7f:ab:90:92:33:09:60:b2:4f:01:90:0b:
                    15:1f:ba:5b:d6:35:df:3f:a1:65:aa:8c:83:56:e3:
                    31:47:44:8b:2f:22:3d:3a:99:1f:28:05:6d:fb:df:
                    6a:3e:6f:67:64:90:14:6b:1a:34:cc:dc:4c:76:4b:
                    d9:fa:68:f7:c4:52:b0:eb:6d:b2:b5:f2:86:82:ff:
                    44:49:3d:de:31:bd:70:03:9b:d0:f5:28:21:f5:40:
                    96:67:1b:75:0b:92:3c:fb:f2:2b:d0:a6:f1:09:c0:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:95:92:D7:3A:2B:05:7E:F3:16:80:B5:D2:03:8D:38:27:50:F5
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/qjWVktc6KwV-8xaAtdIDjTgnUPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.33.0/24
                IPv6:
                  2a13:ef41:e000::/35
                  2a13:ef44:b00b::/48
                  2a13:ef45::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:f1:e9:b6:c2:57:48:c0:a2:29:f5:ea:15:0c:ea:cc:0e:
         62:6d:c8:bd:d1:bb:c8:74:bf:43:f0:47:9d:3d:47:e9:08:25:
         9a:84:03:58:84:74:13:1d:28:ee:8b:fa:cc:13:69:d8:c8:c0:
         e4:6e:6a:86:b6:da:23:46:f8:9a:e6:9c:71:aa:31:7f:3e:42:
         92:5c:a0:a0:d3:3d:91:58:73:dc:91:1b:13:08:db:85:2f:42:
         32:0e:a6:2c:72:d2:b3:94:97:d8:75:91:66:02:bb:4f:8e:31:
         29:8f:8f:6e:14:93:0d:ef:d3:96:15:f1:d4:7d:ee:25:99:9c:
         ef:19:85:de:83:85:72:54:4a:cd:d3:89:55:11:38:41:a6:c8:
         8b:48:34:36:d0:78:31:9e:fe:30:61:ef:85:44:2b:03:e0:64:
         ca:36:a2:a2:7d:5f:2c:a0:01:ae:f2:55:49:3d:d4:d1:4c:7f:
         22:5e:7f:47:6d:ea:e7:e6:26:8a:90:54:56:43:fa:32:2e:28:
         9c:3b:3d:f5:4b:0e:fa:92:af:c2:0b:41:2a:a9:eb:9f:1d:48:
         73:9f:94:7a:6f:cc:5f:f0:83:59:8d:8c:6c:d3:52:60:6b:c3:
         48:ad:4e:12:a4:e5:be:be:5c:32:3c:71:19:c8:8a:db:ba:b5:
         63:c7:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----