Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/IXrzY7_cItfC3NnZ-3-LJhN19o4.roa
File:                     IXrzY7_cItfC3NnZ-3-LJhN19o4.roa (raw, json)
Hash identifier:          oIhCyAkPruNO071wWhe7+LYX2OHhLbaOxzsVc46cJy8=
Subject key identifier:   21:7A:F3:63:BF:DC:22:D7:C2:DC:D9:D9:FB:7F:8B:26:13:75:F6:8E
Certificate issuer:       /CN=6a5694cf43356ce41722733e80dfc38887f46554
Certificate serial:       121757
Authority key identifier: 6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/IXrzY7_cItfC3NnZ-3-LJhN19o4.roa
Signing time:             Wed 27 Apr 2022 09:46:55 +0000
ROA not before:           Wed 27 Apr 2022 09:46:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        193.150.88.0/23 maxlen: 23
                          193.150.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185623 (0x121757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5694cf43356ce41722733e80dfc38887f46554
        Validity
            Not Before: Apr 27 09:46:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=217af363bfdc22d7c2dcd9d9fb7f8b261375f68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:88:26:02:28:f5:db:28:02:a8:76:2b:49:
                    43:87:ed:2e:fd:92:92:6d:9d:94:85:82:3c:ab:72:
                    2d:3d:5c:d3:95:ee:84:e0:eb:9f:fe:84:8f:34:96:
                    e4:57:cb:0f:ac:5c:0e:2e:bc:e3:d5:80:24:4b:6d:
                    11:c5:55:b6:3f:0c:65:a6:fe:02:06:23:a6:47:db:
                    83:ed:23:c7:c8:fa:cc:97:80:73:73:d3:b0:bb:61:
                    7e:42:6f:da:fc:0a:97:71:b1:3f:86:d3:2f:6d:2f:
                    bd:07:54:77:77:82:25:68:6f:19:6c:fd:6c:aa:fc:
                    22:45:c8:0c:68:18:95:a5:f6:a5:85:ed:8a:27:1b:
                    7e:ee:64:c1:87:8f:f5:99:44:31:61:46:4b:29:ce:
                    d5:32:3f:89:0f:dc:b4:4a:65:3c:2a:3d:59:80:5e:
                    e0:fa:b8:e7:77:01:4b:2b:af:2f:82:b2:21:55:e4:
                    bb:93:c1:34:48:ba:b7:40:58:9d:81:6b:61:01:1b:
                    2c:aa:71:a8:c0:bc:8a:dc:88:2f:39:dc:cc:db:f3:
                    63:99:30:55:bb:e3:e7:c5:5b:c7:c7:db:fc:86:a6:
                    e1:2d:06:34:d0:da:f0:de:16:2e:59:a1:ba:83:c3:
                    b6:c1:98:50:1f:61:85:97:22:c2:bd:59:2d:ce:28:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7A:F3:63:BF:DC:22:D7:C2:DC:D9:D9:FB:7F:8B:26:13:75:F6:8E
            X509v3 Authority Key Identifier:
                keyid:6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/IXrzY7_cItfC3NnZ-3-LJhN19o4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:01:d1:eb:c3:96:8d:b6:a5:c1:f5:84:70:da:64:2c:fa:90:
         14:4e:61:77:a9:b7:0b:ce:0d:51:e4:5a:68:8f:7f:7d:e6:55:
         47:32:35:04:b6:72:00:33:f4:73:c9:7d:1a:e1:a9:cd:cf:47:
         55:48:4b:48:70:f2:f0:12:d2:9d:8a:4a:10:e4:64:48:ea:c6:
         76:94:83:0f:7e:2c:55:4d:48:19:9a:f7:13:17:ca:23:fb:ab:
         73:f8:35:eb:3e:1b:d4:55:9c:3f:c4:37:98:89:16:95:26:a5:
         cd:35:07:57:79:69:8c:10:fa:75:97:ee:ef:aa:8c:e1:b6:e3:
         87:f4:c0:b6:7c:e7:5b:96:24:72:c0:f8:9c:7f:d5:80:c0:cf:
         07:01:d7:72:da:52:a5:1f:8e:98:e0:74:fd:eb:3b:7f:31:00:
         5a:45:29:7a:ef:e4:b6:eb:5c:80:34:a6:da:5b:e7:05:c0:26:
         c6:56:3e:cf:de:b5:e7:a9:e7:3c:8b:d2:7e:55:a1:1b:32:ea:
         c5:35:b5:2f:fa:ea:3a:66:d8:b2:1b:49:2c:30:c3:9f:3e:70:
         6f:48:dd:c7:a0:9d:ed:b7:f2:d4:28:08:26:1b:59:b8:a1:6c:
         57:61:6b:70:0c:e0:c4:86:98:07:c8:de:47:94:e8:1f:94:2a:
         40:fc:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net