Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/E7K29RGPw3CDQqKOT5v7_76Qh-c.roa
File:                     E7K29RGPw3CDQqKOT5v7_76Qh-c.roa (raw, json)
Hash identifier:          broOBEQoHKMCIEomqbf20l6lMDocDuY4MJn9Wq16Bvg=
Subject key identifier:   13:B2:B6:F5:11:8F:C3:70:83:42:A2:8E:4F:9B:FB:FF:BE:90:87:E7
Certificate issuer:       /CN=fc6dee2cd62f95cebea791270412463d539885fe
Certificate serial:       02A66EA7
Authority key identifier: FC:6D:EE:2C:D6:2F:95:CE:BE:A7:91:27:04:12:46:3D:53:98:85:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_G3uLNYvlc6-p5EnBBJGPVOYhf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/E7K29RGPw3CDQqKOT5v7_76Qh-c.roa
Signing time:             Thu 03 Mar 2022 07:04:02 +0000
ROA not before:           Thu 03 Mar 2022 07:04:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.187.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44461735 (0x2a66ea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6dee2cd62f95cebea791270412463d539885fe
        Validity
            Not Before: Mar  3 07:04:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13b2b6f5118fc3708342a28e4f9bfbffbe9087e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:72:f7:25:97:a5:a5:b9:93:8e:eb:59:a3:
                    c8:b0:9d:37:29:ff:73:4a:a9:3a:70:2a:72:f4:9a:
                    99:2c:eb:f9:41:50:b4:70:23:30:69:a5:cf:cb:8f:
                    4c:b7:2a:7b:a0:a4:5f:0b:44:85:01:72:33:57:68:
                    f8:ac:7c:47:a0:99:1d:72:4b:40:65:51:f3:ab:3e:
                    9b:05:6e:ef:f3:88:58:3d:d8:0b:d8:d1:08:1b:7b:
                    86:fb:ee:56:02:96:ef:5a:8e:e5:f6:ef:72:9a:f3:
                    c6:37:43:30:bc:9a:06:73:0d:0b:27:77:6e:7b:46:
                    71:d3:72:84:ef:b5:66:5a:9a:7b:55:28:46:28:17:
                    ad:87:61:21:2d:22:ca:31:0d:af:f5:3d:79:0d:ba:
                    89:37:0b:f2:88:fa:ca:f3:8a:bb:73:a4:13:62:13:
                    c1:56:16:60:9d:ce:a5:0b:75:33:55:df:03:9d:3d:
                    12:3f:17:8c:ff:f3:3a:d0:06:eb:95:16:c2:7d:89:
                    a5:e2:a7:c4:ca:8f:f9:64:0c:0e:c7:1b:42:8a:f3:
                    2c:82:f0:5e:08:07:02:60:da:60:48:ad:dd:66:11:
                    e3:5c:23:e2:60:ef:9b:d1:c6:3d:6e:bf:4b:ee:85:
                    5c:7e:03:99:28:39:67:39:3a:35:f1:72:57:e1:3e:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:B6:F5:11:8F:C3:70:83:42:A2:8E:4F:9B:FB:FF:BE:90:87:E7
            X509v3 Authority Key Identifier:
                keyid:FC:6D:EE:2C:D6:2F:95:CE:BE:A7:91:27:04:12:46:3D:53:98:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_G3uLNYvlc6-p5EnBBJGPVOYhf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/E7K29RGPw3CDQqKOT5v7_76Qh-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/_G3uLNYvlc6-p5EnBBJGPVOYhf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:c8:a7:74:fe:10:24:2d:aa:76:53:ca:76:68:75:dc:67:
         8c:90:c0:94:48:53:a2:09:e8:fd:38:92:cb:dc:6b:9d:45:0c:
         fe:42:8a:cc:48:23:4e:76:a0:ff:6d:57:81:72:a7:74:1c:13:
         b7:5e:73:84:08:05:b4:24:b7:68:fc:44:84:d3:33:c8:d4:62:
         a1:90:62:84:3d:0c:ee:d5:88:88:ed:df:1e:28:4b:e9:4a:8f:
         11:42:21:32:76:1f:99:c0:55:ab:6f:b4:6e:6b:6e:55:c4:27:
         cb:37:aa:a8:42:ea:93:3c:94:f5:ca:64:f8:13:61:3d:f5:68:
         49:f7:11:12:00:ba:88:8f:d8:98:9b:d7:6b:f1:97:40:f6:5f:
         de:31:72:c1:81:c3:83:08:58:24:13:38:df:c1:09:b4:37:3a:
         22:20:ce:46:a1:8e:a4:91:d5:83:b7:76:ad:2b:a5:a2:ae:16:
         dd:03:92:61:a7:31:cf:bd:f4:62:54:2c:3c:d6:da:de:09:3f:
         c1:f7:bc:d6:4e:d8:ed:0a:b1:38:95:e4:14:d4:1c:c7:56:15:
         a4:bd:49:44:42:df:1c:5d:a9:c9:48:71:ff:a3:76:49:c7:36:
         40:03:f4:06:0a:a1:9a:77:41:4c:80:3f:ef:43:b5:7c:e8:d1:
         d0:1d:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net