Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/E9pKpB9j9b3S51724FfjYGPQSvg.roa
File:                     E9pKpB9j9b3S51724FfjYGPQSvg.roa (raw, json)
Hash identifier:          +2bRqN9e+y/lwEi6nrhPglhb4ufJbf2+sd6mX1II3K4=
Subject key identifier:   13:DA:4A:A4:1F:63:F5:BD:D2:E7:5E:F6:E0:57:E3:60:63:D0:4A:F8
Certificate issuer:       /CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Certificate serial:       1CBBB2
Authority key identifier: 89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/E9pKpB9j9b3S51724FfjYGPQSvg.roa
Signing time:             Sat 01 Jan 2022 03:57:38 +0000
ROA not before:           Sat 01 Jan 2022 03:57:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49453
IP address blocks:        37.72.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883058 (0x1cbbb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
        Validity
            Not Before: Jan  1 03:57:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13da4aa41f63f5bdd2e75ef6e057e36063d04af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:67:8a:ea:f7:4a:15:40:51:12:98:90:08:
                    b6:75:fc:5c:b7:b2:a4:b8:d8:13:71:4d:7f:75:9e:
                    19:73:4d:ec:97:85:6f:8f:ec:e8:37:e7:af:bb:ee:
                    77:19:15:11:b3:6b:62:7d:2c:db:97:91:55:88:36:
                    1a:e3:b1:1b:d2:e3:ed:4f:ef:97:54:98:6a:f6:05:
                    d6:ad:98:b1:90:a1:2f:3d:f1:1e:0b:2d:6f:7c:af:
                    45:71:1a:2d:29:21:79:6a:b1:99:a8:b2:d5:64:b1:
                    b9:63:a2:00:92:75:85:d1:c4:14:27:1d:65:76:9e:
                    8d:07:c3:63:57:31:2f:3b:30:0a:59:7c:76:3e:50:
                    53:cd:97:af:68:cd:07:b7:da:c9:63:c8:96:f9:0c:
                    ff:68:e1:45:87:6a:d0:4e:58:1d:f5:e9:80:eb:04:
                    c1:40:03:90:0c:8b:4f:fc:28:02:84:87:c5:72:7b:
                    7c:c2:c4:17:1f:0a:ff:75:57:3b:67:22:85:76:cc:
                    12:3b:47:73:a5:7f:f6:8b:07:76:46:d9:a2:cd:49:
                    9b:78:73:9c:da:cd:1b:a8:3f:4b:3d:39:78:1e:91:
                    0c:15:6a:5f:df:12:fd:15:84:d8:5f:36:75:ba:bd:
                    36:47:f2:e9:b3:5e:13:6f:f2:a5:1d:7c:d6:ac:c5:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DA:4A:A4:1F:63:F5:BD:D2:E7:5E:F6:E0:57:E3:60:63:D0:4A:F8
            X509v3 Authority Key Identifier:
                keyid:89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/E9pKpB9j9b3S51724FfjYGPQSvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:42:32:ec:b1:cb:33:2c:0e:76:ed:97:fd:73:22:87:ae:22:
         2c:25:20:8c:79:f7:13:0e:00:04:63:43:9e:3a:e0:7a:c2:4a:
         ea:79:8a:9e:8d:b0:32:6a:71:e1:77:74:c2:e5:b4:74:b2:06:
         a5:13:46:5f:7a:42:63:3d:c1:7b:fd:ee:06:6c:9b:94:19:a5:
         29:1b:1c:a3:14:24:d9:3b:7e:85:65:d7:63:c0:b2:8c:68:d7:
         53:1f:a5:cb:74:19:1e:35:a1:35:36:4c:40:96:87:51:c6:4e:
         ab:49:cd:46:39:8c:1b:c4:45:e8:05:57:39:da:9e:09:f8:61:
         d5:da:b0:cc:75:58:f6:43:9f:32:54:95:90:bc:54:54:83:f8:
         4d:94:5e:6b:1d:43:96:f8:c5:97:8c:3d:e0:96:bf:c6:52:d6:
         97:dd:47:56:92:24:2d:82:bf:bc:e7:40:b4:12:c1:43:d3:36:
         a5:1b:b5:27:57:b9:cc:b2:fc:eb:83:b2:31:02:45:d3:c7:b7:
         87:c4:1f:ae:45:1b:89:57:3d:71:49:a9:86:a3:c2:ee:67:4d:
         b5:2f:cb:08:d6:67:b7:54:77:b0:fc:88:5a:39:c6:07:47:04:
         c5:26:a2:1f:24:d3:91:c8:d2:1c:39:41:16:59:39:af:fe:7f:
         9c:f4:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net