Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/uPFVtVmSD5v4sotPhPea7k7hZ3c.roa
File:                     uPFVtVmSD5v4sotPhPea7k7hZ3c.roa (raw, json)
Hash identifier:          Xp4vzn0wqvz4TXJWwq0/Yv041pBBM6S9l9oGXJ596rk=
Subject key identifier:   B8:F1:55:B5:59:92:0F:9B:F8:B2:8B:4F:84:F7:9A:EE:4E:E1:67:77
Certificate issuer:       /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial:       01891FA6
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/uPFVtVmSD5v4sotPhPea7k7hZ3c.roa
Signing time:             Sun 30 Jan 2022 10:40:56 +0000
ROA not before:           Sun 30 Jan 2022 10:40:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        31.41.248.0/24 maxlen: 24
                          193.36.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25763750 (0x1891fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
        Validity
            Not Before: Jan 30 10:40:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8f155b559920f9bf8b28b4f84f79aee4ee16777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:71:38:42:b4:6e:0e:f4:c5:96:85:3a:78:
                    fa:47:a3:25:d6:ea:20:b3:c5:0d:27:54:c0:d8:70:
                    8e:61:ea:94:48:62:e3:10:16:7d:f4:b1:ee:3f:5b:
                    05:7f:cc:85:03:ae:66:16:68:0f:cf:d4:0d:c0:5c:
                    34:4b:13:df:d4:72:0d:23:ac:e0:b7:49:8b:f5:93:
                    73:a4:7e:2f:76:a9:91:91:75:e8:d6:67:50:cc:5b:
                    08:f1:86:6a:33:37:cc:87:49:9e:92:ef:34:2c:90:
                    21:a5:1a:94:54:51:d5:39:ae:67:ba:32:1b:33:34:
                    a1:60:5f:91:fb:f9:bf:db:58:98:99:ee:b9:37:c9:
                    00:36:d2:7d:3f:fe:80:0c:bc:d3:73:b0:92:9d:c1:
                    b2:de:5d:dc:2b:ce:d1:07:84:d9:31:9c:44:85:9d:
                    fe:de:8e:99:71:0a:dc:36:90:8f:13:22:ad:82:8b:
                    e9:72:0b:b8:65:a2:11:e9:88:ac:e8:e9:39:8b:d1:
                    6d:a9:0b:74:eb:52:00:63:ac:b3:90:99:84:28:d2:
                    a6:69:a0:fe:c6:4b:6a:37:f5:61:6e:39:42:35:62:
                    16:5d:92:3e:ad:c4:f2:6b:1d:f4:69:9c:10:d8:dc:
                    10:51:6d:34:78:13:7f:86:77:46:06:86:f9:be:16:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:55:B5:59:92:0F:9B:F8:B2:8B:4F:84:F7:9A:EE:4E:E1:67:77
            X509v3 Authority Key Identifier:
                keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/uPFVtVmSD5v4sotPhPea7k7hZ3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.248.0/24
                  193.36.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:95:d5:d2:00:e3:55:37:7d:fc:14:cd:0c:1c:93:36:14:a5:
         eb:6d:fb:84:55:e3:1d:56:99:f5:8d:79:6e:09:9a:e3:3b:14:
         fa:06:6c:1c:3a:21:ca:90:a9:f3:d0:af:19:30:52:d4:49:4d:
         cc:cf:09:f3:3c:15:c8:7c:85:8f:c6:92:5b:00:a1:1b:59:f0:
         7e:bf:b8:79:e1:bc:e2:99:b5:c8:f1:0c:26:f7:f4:96:24:1b:
         a6:6a:b1:2a:7e:d8:75:ab:e9:dd:14:1d:16:76:b1:8d:76:63:
         0c:3f:4a:b8:98:38:a8:e7:02:07:87:94:c3:31:18:55:8e:54:
         ae:ef:34:c3:4b:6f:f4:95:88:4b:95:e6:18:36:df:3d:52:df:
         e2:00:98:68:cb:75:b3:c1:89:66:0a:e0:4a:dc:ef:35:0a:02:
         b7:46:97:ae:03:fa:cd:75:63:e0:71:1a:66:08:21:03:6d:82:
         d7:ce:ca:d4:7e:27:e9:7e:d4:83:19:2c:65:ee:f3:7d:66:7c:
         f9:08:03:23:56:16:dd:58:d8:21:4f:a5:40:90:01:3a:ed:1e:
         ea:00:b8:9c:7e:5d:52:e9:b8:e3:c6:f3:19:db:ac:e8:24:00:
         d9:ba:cb:5d:e5:b0:27:f6:c9:32:98:37:26:c6:3d:76:f8:bd:
         b6:d7:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net