Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/URvRlUa7S70drSABulWScQarWeo.roa
File:                     URvRlUa7S70drSABulWScQarWeo.roa (raw, json)
Hash identifier:          0W30clPPPMI2vDO4BB1UQgQyjAS5K5i+9HCTXZ8YGR8=
Subject key identifier:   51:1B:D1:95:46:BB:4B:BD:1D:AD:20:01:BA:55:92:71:06:AB:59:EA
Certificate issuer:       /CN=c1a11ca059e44d410e37861eb6040aa26e687903
Certificate serial:       017797
Authority key identifier: C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waEcoFnkTUEON4YetgQKom5oeQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/URvRlUa7S70drSABulWScQarWeo.roa
Signing time:             Tue 24 May 2022 07:25:15 +0000
ROA not before:           Tue 24 May 2022 07:25:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46918
IP address blocks:        193.169.200.0/23 maxlen: 23
                          193.169.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96151 (0x17797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1a11ca059e44d410e37861eb6040aa26e687903
        Validity
            Not Before: May 24 07:25:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=511bd19546bb4bbd1dad2001ba55927106ab59ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:df:ab:6c:65:1a:5c:93:c7:3f:a0:d9:a5:
                    34:22:63:35:d8:10:58:78:e8:3a:fd:2e:58:7b:13:
                    bc:02:77:27:c8:11:60:ef:75:13:2b:f5:e3:2b:85:
                    9e:e0:75:aa:87:4a:be:22:16:1e:38:f5:e7:45:3c:
                    39:a0:d7:2f:d6:1d:b4:03:82:1f:a9:fb:99:71:e9:
                    cf:16:7e:54:5e:a9:88:86:9e:ad:b1:77:15:43:0b:
                    d3:17:09:56:f6:10:e4:b9:83:1d:38:80:73:69:f7:
                    28:93:e4:87:51:0a:31:32:97:7e:c1:81:7b:0a:95:
                    8b:73:97:5e:d7:5d:0a:af:53:0e:79:38:26:8b:5f:
                    85:23:8c:05:a6:fe:2a:9b:e3:53:ca:2c:d8:9d:af:
                    a8:5a:7b:e8:8e:96:d0:c5:b5:57:cb:2d:2f:ba:66:
                    6f:81:5d:a7:b6:2e:e9:c3:26:65:0b:c6:3d:8f:86:
                    87:bb:a7:bb:66:82:dc:91:ec:71:9a:d4:81:dc:08:
                    7b:5a:91:9f:a5:13:70:66:97:d9:09:a7:14:09:6b:
                    92:08:d2:60:c1:31:75:e7:65:83:99:c6:50:2e:88:
                    66:d5:73:c6:cc:19:f5:9a:18:79:34:5b:63:7a:7a:
                    f8:62:35:e8:bb:98:12:81:2b:1f:4b:5d:9a:3d:8d:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1B:D1:95:46:BB:4B:BD:1D:AD:20:01:BA:55:92:71:06:AB:59:EA
            X509v3 Authority Key Identifier:
                keyid:C1:A1:1C:A0:59:E4:4D:41:0E:37:86:1E:B6:04:0A:A2:6E:68:79:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waEcoFnkTUEON4YetgQKom5oeQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/URvRlUa7S70drSABulWScQarWeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/890848-1c71-4cf1-bc75-06e1e399b894/1/waEcoFnkTUEON4YetgQKom5oeQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.200.0/23
                  193.169.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:4a:08:12:cf:0f:6c:e1:77:92:02:e1:32:81:67:7f:bf:
         56:54:fc:83:40:65:d3:f7:98:c6:9c:80:d4:a2:6a:28:3b:c6:
         a0:65:35:b6:a8:91:9e:f7:d0:d9:05:f3:a4:68:e1:87:b0:ca:
         74:49:55:e0:23:95:97:13:67:0a:58:c5:98:b3:d8:3f:cb:29:
         cf:0d:3d:09:1b:f6:25:e3:4c:c0:98:9e:43:92:25:04:45:7e:
         93:5d:c6:21:b9:af:17:13:ec:0f:0c:a9:5a:b1:2b:0a:83:36:
         76:e7:be:c7:03:37:c7:c9:b8:4f:b3:cd:63:0d:53:8d:4a:e7:
         ad:b8:77:b9:d1:d5:62:32:e2:bd:b9:be:7a:a1:18:d7:6c:0b:
         3a:48:81:66:d1:a5:d9:9d:7e:18:de:c4:51:d8:db:8b:df:d3:
         62:eb:54:09:eb:4d:2f:0e:79:42:0f:c2:ef:7c:d0:4e:41:de:
         d5:87:46:d6:a7:eb:94:e4:5f:5e:53:4d:2d:88:90:b7:3f:0a:
         73:00:b7:f4:a0:1a:0e:f2:45:f7:8e:91:8f:08:75:58:bc:52:
         d2:79:7e:2b:9e:77:73:50:bd:ba:b8:72:21:21:6a:78:49:fa:
         c7:2c:31:87:93:85:94:d0:b7:59:44:23:3a:83:b9:6c:76:fa:
         07:59:ca:ed
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 27 18:43:02 2023 by rpki-client on console.sobornost.net