Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/klEEJjJwn3lRgFfyAsOwia2ztds.roa
File:                     klEEJjJwn3lRgFfyAsOwia2ztds.roa (raw, json)
Hash identifier:          ze8ev3Ooi67/2Xkr7n30Mi+Fi0r4/9Z8vXAEkJhGMSk=
Subject key identifier:   92:51:04:26:32:70:9F:79:51:80:57:F2:02:C3:B0:89:AD:B3:B5:DB
Certificate issuer:       /CN=7d0bfea689016becf89a3638667cce7ddf70d9d7
Certificate serial:       0188303D77F04D1205A2B91417E2699772A7
Authority key identifier: 7D:0B:FE:A6:89:01:6B:EC:F8:9A:36:38:66:7C:CE:7D:DF:70:D9:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQv-pokBa-z4mjY4ZnzOfd9w2dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/klEEJjJwn3lRgFfyAsOwia2ztds.roa
Signing time:             Thu 18 May 2023 19:01:54 +0000
ROA not before:           Thu 18 May 2023 19:01:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202656
IP address blocks:        176.116.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:30:3d:77:f0:4d:12:05:a2:b9:14:17:e2:69:97:72:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0bfea689016becf89a3638667cce7ddf70d9d7
        Validity
            Not Before: May 18 19:01:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9251042632709f79518057f202c3b089adb3b5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:f2:0d:6f:0a:49:a6:66:75:0a:08:a6:e9:
                    ee:4a:fb:73:44:73:6a:79:6e:29:df:4e:e9:9c:57:
                    a6:48:82:7c:3f:b0:9c:27:b8:c2:74:18:a6:c9:f7:
                    89:09:51:0c:6b:2c:52:1e:1e:8d:93:86:9f:42:d1:
                    2e:cf:c8:22:34:57:7b:68:fe:3b:88:9a:40:f7:f3:
                    ab:73:5e:1f:14:33:24:56:4b:88:46:b7:07:11:87:
                    74:6b:ca:21:a9:19:4f:95:c2:9a:f1:f0:2f:50:8a:
                    c7:ad:d0:fd:1e:22:e4:e3:27:9f:24:32:ad:24:3d:
                    59:24:f8:8f:51:da:e3:7f:9f:92:1b:be:05:85:fb:
                    fa:34:83:fb:1c:c9:89:0b:ae:2b:c2:44:2c:0a:e0:
                    4f:d4:1a:a0:08:12:24:33:65:4b:5b:1d:bc:b5:50:
                    f5:6e:a4:84:5d:94:48:0d:d4:8a:01:8f:d6:c1:d0:
                    af:e3:d8:0d:d8:23:71:c2:55:22:c1:9c:47:ed:bf:
                    04:d9:25:72:2c:84:fd:ec:5a:3f:be:3b:8b:d8:61:
                    14:aa:3b:01:fd:10:22:f4:24:ee:12:d6:03:54:4a:
                    be:a8:81:fb:c6:c8:8d:f3:c5:dd:03:42:91:43:b3:
                    0a:52:a1:5e:05:f0:ba:03:95:25:48:ad:19:fd:94:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:04:26:32:70:9F:79:51:80:57:F2:02:C3:B0:89:AD:B3:B5:DB
            X509v3 Authority Key Identifier:
                keyid:7D:0B:FE:A6:89:01:6B:EC:F8:9A:36:38:66:7C:CE:7D:DF:70:D9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQv-pokBa-z4mjY4ZnzOfd9w2dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/klEEJjJwn3lRgFfyAsOwia2ztds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/fQv-pokBa-z4mjY4ZnzOfd9w2dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:5b:41:34:03:91:0a:05:c0:76:5f:10:1b:4f:63:01:70:54:
         78:7b:47:59:78:14:ab:aa:c0:50:42:e2:48:ed:46:f5:52:2e:
         29:d7:2b:94:02:28:2a:3f:50:fd:92:3a:56:75:f8:4d:3a:fa:
         f1:39:89:c0:86:d5:a4:7b:0e:d6:e0:6f:da:1d:41:a8:25:80:
         e5:f9:22:ea:84:ed:66:b4:b4:0a:52:ad:3f:00:ff:9d:99:fe:
         b7:20:08:13:b6:74:2b:f6:a1:ba:3b:8a:66:6c:95:e0:1c:16:
         e8:96:b6:56:b2:90:d3:a3:7c:b3:b0:5f:a4:ea:d1:60:89:95:
         9c:64:87:26:bb:31:85:64:d7:4b:97:7c:31:26:17:d0:c4:4f:
         b1:b7:6c:3d:52:96:a6:b6:9a:59:95:2b:7e:24:1f:b3:57:e1:
         eb:fd:82:97:ed:2b:85:1b:ea:b9:b0:dc:ff:70:2a:cd:a8:dc:
         54:44:d1:66:c7:03:92:e2:54:16:08:56:80:de:e1:89:44:5e:
         d7:9e:17:04:a6:07:1f:37:02:7e:8d:0c:7d:65:5b:ca:4b:f3:
         a2:59:73:5e:5c:ee:24:d5:e0:c2:aa:3a:3c:d5:62:e6:de:8e:
         5c:63:b1:55:d5:8f:ab:78:ad:9d:e1:60:1b:c1:a8:d3:17:9e:
         ba:08:03:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgwPXfwTRIForkUF+Jpl3KnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGJmZWE2ODkwMTZiZWNmODlhMzYzODY2N2NjZTdkZGY3
MGQ5ZDcwHhcNMjMwNTE4MTkwMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjUxMDQyNjMyNzA5Zjc5NTE4MDU3ZjIwMmMzYjA4OWFkYjNiNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizbyDW8KSaZmdQoIpunuSvtzRHNq
eW4p307pnFemSIJ8P7CcJ7jCdBimyfeJCVEMayxSHh6Nk4afQtEuz8giNFd7aP47
iJpA9/Orc14fFDMkVkuIRrcHEYd0a8ohqRlPlcKa8fAvUIrHrdD9HiLk4yefJDKt
JD1ZJPiPUdrjf5+SG74Fhfv6NIP7HMmJC64rwkQsCuBP1BqgCBIkM2VLWx28tVD1
bqSEXZRIDdSKAY/WwdCv49gN2CNxwlUiwZxH7b8E2SVyLIT97Fo/vjuL2GEUqjsB
/RAi9CTuEtYDVEq+qIH7xsiN88XdA0KRQ7MKUqFeBfC6A5UlSK0Z/ZQ6EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJRBCYycJ95UYBX8gLDsImts7XbMB8GA1UdIwQY
MBaAFH0L/qaJAWvs+Jo2OGZ8zn3fcNnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF2LXBva0JhLXo0bWpZNFpuek9mZDl3MmRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iOWM1NjEtNzU2Yy00OTYzLWJiYTUt
YzVkOWM2YWIwNDNmLzEva2xFRUpqSnduM2xSZ0ZmeUFzT3dpYTJ6dGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iOWM1NjEtNzU2Yy00OTYzLWJiYTUtYzVkOWM2YWIwNDNm
LzEvZlF2LXBva0JhLXo0bWpZNFpuek9mZDl3MmRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQCMA0G
CSqGSIb3DQEBCwUAA4IBAQCtW0E0A5EKBcB2XxAbT2MBcFR4e0dZeBSrqsBQQuJI
7Ub1Ui4p1yuUAigqP1D9kjpWdfhNOvrxOYnAhtWkew7W4G/aHUGoJYDl+SLqhO1m
tLQKUq0/AP+dmf63IAgTtnQr9qG6O4pmbJXgHBbolrZWspDTo3yzsF+k6tFgiZWc
ZIcmuzGFZNdLl3wxJhfQxE+xt2w9UpamtppZlSt+JB+zV+Hr/YKX7SuFG+q5sNz/
cCrNqNxURNFmxwOS4lQWCFaA3uGJRF7XnhcEpgcfNwJ+jQx9ZVvKS/OiWXNeXO4k
1eDCqjo81WLm3o5cY7FV1Y+reK2d4WAbwajTF566CAN9
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net