Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/_Hv2OLzuSQX4KEOt6Z1faEXuH-w.roa
File:                     _Hv2OLzuSQX4KEOt6Z1faEXuH-w.roa (raw, json)
Hash identifier:          5BEaIwD3wwj/ZjJkIU2/oiSpg96W2+7yAzwlFVmjwNI=
Subject key identifier:   FC:7B:F6:38:BC:EE:49:05:F8:28:43:AD:E9:9D:5F:68:45:EE:1F:EC
Certificate issuer:       /CN=b92c2d51d1e47a42cff8f46f136775e2de289dde
Certificate serial:       01857139CFDD3A82A60CF2384ADCB894E273
Authority key identifier: B9:2C:2D:51:D1:E4:7A:42:CF:F8:F4:6F:13:67:75:E2:DE:28:9D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSwtUdHkekLP-PRvE2d14t4ond4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/_Hv2OLzuSQX4KEOt6Z1faEXuH-w.roa
Signing time:             Mon 02 Jan 2023 06:44:52 +0000
ROA not before:           Mon 02 Jan 2023 06:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212913
IP address blocks:        94.103.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:cf:dd:3a:82:a6:0c:f2:38:4a:dc:b8:94:e2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b92c2d51d1e47a42cff8f46f136775e2de289dde
        Validity
            Not Before: Jan  2 06:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc7bf638bcee4905f82843ade99d5f6845ee1fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:40:b4:00:9c:73:67:ec:fd:03:e6:51:81:
                    ae:5d:2c:90:32:9b:57:4a:03:2a:9a:e1:20:fd:60:
                    6a:54:17:d4:d3:90:40:b0:ba:62:58:22:2c:fc:0f:
                    8f:9c:f3:8e:3e:07:f0:c4:51:88:74:06:72:c6:48:
                    70:ad:53:44:5d:da:a3:ba:33:1b:2e:40:9e:a6:7f:
                    61:f1:a8:03:01:c9:55:85:1f:f7:a6:d7:b5:36:b8:
                    7c:e0:67:a7:07:05:91:42:a2:0f:9d:51:88:35:45:
                    6f:c2:a6:5d:46:bc:50:e7:e1:e7:f1:9d:bd:9d:54:
                    57:41:87:99:03:77:cd:b5:3a:15:9a:3f:92:61:d7:
                    45:f1:cf:0a:bc:a5:d2:84:f6:21:05:59:9f:ef:ae:
                    51:ae:68:18:d4:97:ff:49:11:23:cc:53:b6:ad:16:
                    ba:ff:ec:2f:d9:b2:81:8b:e1:fb:7a:6f:22:9a:c6:
                    4c:c7:32:95:01:4b:d2:3b:10:01:64:fc:e7:27:0b:
                    48:46:67:86:d0:95:58:dc:17:48:7e:4b:78:a7:8b:
                    44:12:cc:e2:51:9e:b0:52:02:03:9d:5d:7d:9a:85:
                    8b:21:52:27:9e:9c:c7:a7:af:93:49:f3:07:23:2d:
                    60:50:7c:f0:9b:6e:d3:2f:d1:41:63:3b:44:6f:21:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:F6:38:BC:EE:49:05:F8:28:43:AD:E9:9D:5F:68:45:EE:1F:EC
            X509v3 Authority Key Identifier:
                keyid:B9:2C:2D:51:D1:E4:7A:42:CF:F8:F4:6F:13:67:75:E2:DE:28:9D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSwtUdHkekLP-PRvE2d14t4ond4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/_Hv2OLzuSQX4KEOt6Z1faEXuH-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/894b62-f655-48ae-8a57-7f4205aba191/1/uSwtUdHkekLP-PRvE2d14t4ond4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:05:d3:dc:30:41:4f:48:78:0c:41:d9:f7:e9:53:be:b7:2f:
         a0:b9:97:ae:f8:40:74:ee:c8:df:ba:da:2c:4f:e2:ad:50:98:
         4b:e0:c9:7b:a9:fa:78:8a:77:8c:c0:c1:e3:82:96:aa:2f:84:
         1a:20:0f:b4:ed:95:14:f5:ac:b6:12:3e:1d:57:84:36:1c:65:
         71:3b:26:95:fb:7b:5d:fe:92:a8:16:91:75:0f:c0:03:ec:07:
         b7:55:a9:08:13:9c:1e:a4:27:fb:9c:72:73:8f:d4:13:b0:a0:
         63:0f:8e:46:9a:fb:95:bd:e2:59:c5:5f:48:43:75:f3:96:ea:
         46:98:c6:8b:df:1e:bb:4b:cd:f6:a6:15:a4:3c:65:5e:01:09:
         37:01:cb:bf:44:96:5f:b6:81:1f:3b:3a:1b:cc:7f:7d:e1:26:
         52:02:cc:0c:43:d3:19:0c:4a:ff:3e:11:02:9c:44:75:46:6e:
         e9:c0:09:bd:af:19:3e:23:f1:6c:32:1a:4a:49:b8:2e:66:0c:
         05:3d:2b:08:62:6b:8d:6a:aa:1b:84:16:26:50:8d:4f:5b:1c:
         e8:0d:33:64:bb:b2:df:e9:c8:db:ee:76:c9:3a:64:e3:27:85:
         77:90:8c:da:97:84:b1:4e:08:fe:11:3b:3a:20:ee:04:18:5d:
         a9:bf:0d:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOc/dOoKmDPI4Sty4lOJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MmMyZDUxZDFlNDdhNDJjZmY4ZjQ2ZjEzNjc3NWUyZGUy
ODlkZGUwHhcNMjMwMTAyMDY0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzdiZjYzOGJjZWU0OTA1ZjgyODQzYWRlOTlkNWY2ODQ1ZWUxZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/JAtACcc2fs/QPmUYGuXSyQMptX
SgMqmuEg/WBqVBfU05BAsLpiWCIs/A+PnPOOPgfwxFGIdAZyxkhwrVNEXdqjujMb
LkCepn9h8agDAclVhR/3pte1Nrh84GenBwWRQqIPnVGINUVvwqZdRrxQ5+Hn8Z29
nVRXQYeZA3fNtToVmj+SYddF8c8KvKXShPYhBVmf765RrmgY1Jf/SREjzFO2rRa6
/+wv2bKBi+H7em8imsZMxzKVAUvSOxABZPznJwtIRmeG0JVY3BdIfkt4p4tEEszi
UZ6wUgIDnV19moWLIVInnpzHp6+TSfMHIy1gUHzwm27TL9FBYztEbyFHYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPx79ji87kkF+ChDremdX2hF7h/sMB8GA1UdIwQY
MBaAFLksLVHR5HpCz/j0bxNndeLeKJ3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVN3dFVkSGtla0xQLVBSdkUyZDE0dDRvbmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84OTRiNjItZjY1NS00OGFlLThhNTct
N2Y0MjA1YWJhMTkxLzEvX0h2Mk9MenVTUVg0S0VPdDZaMWZhRVh1SC13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84OTRiNjItZjY1NS00OGFlLThhNTctN2Y0MjA1YWJhMTkx
LzEvdVN3dFVkSGtla0xQLVBSdkUyZDE0dDRvbmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXme3MA0G
CSqGSIb3DQEBCwUAA4IBAQAyBdPcMEFPSHgMQdn36VO+ty+guZeu+EB07sjfutos
T+KtUJhL4Ml7qfp4ineMwMHjgpaqL4QaIA+07ZUU9ay2Ej4dV4Q2HGVxOyaV+3td
/pKoFpF1D8AD7Ae3VakIE5wepCf7nHJzj9QTsKBjD45GmvuVveJZxV9IQ3XzlupG
mMaL3x67S832phWkPGVeAQk3Acu/RJZftoEfOzobzH994SZSAswMQ9MZDEr/PhEC
nER1Rm7pwAm9rxk+I/FsMhpKSbguZgwFPSsIYmuNaqobhBYmUI1PWxzoDTNku7Lf
6cjb7nbJOmTjJ4V3kIzal4SxTgj+ETs6IO4EGF2pvw0g
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net