Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/75rgD0soUkdZ5pYQ6buKw2_yuVE.roa
File:                     75rgD0soUkdZ5pYQ6buKw2_yuVE.roa (raw, json)
Hash identifier:          WVBvUrSjB1lDYGXVyOw5kFTMdE2J3VfzOK/gQxY7ccY=
Subject key identifier:   EF:9A:E0:0F:4B:28:52:47:59:E6:96:10:E9:BB:8A:C3:6F:F2:B9:51
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       0182255721B95C81FEA05F569A521B66D2F2
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/75rgD0soUkdZ5pYQ6buKw2_yuVE.roa
Signing time:             Fri 22 Jul 2022 09:57:23 +0000
ROA not before:           Fri 22 Jul 2022 09:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64267
IP address blocks:        89.23.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:25:57:21:b9:5c:81:fe:a0:5f:56:9a:52:1b:66:d2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jul 22 09:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef9ae00f4b28524759e69610e9bb8ac36ff2b951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:cd:bb:39:ec:2e:3e:9b:b8:e1:9b:e9:e8:
                    50:61:85:28:e9:38:89:25:10:43:7f:c2:20:3b:a2:
                    f9:fc:c9:7d:6c:0e:dc:03:41:75:02:d4:d9:27:76:
                    41:58:ff:53:af:8b:6c:91:b9:56:02:89:11:cb:a9:
                    b9:7e:09:5a:87:fd:0c:e5:a7:e9:f2:75:dd:d3:c4:
                    26:6c:5b:0d:5d:56:98:c6:41:d8:52:8d:2b:6e:28:
                    11:72:69:7a:ef:5a:59:bd:a4:c4:81:32:cd:e9:fa:
                    bb:f7:3d:ab:b9:50:9b:68:5d:e9:71:65:a2:30:a6:
                    fe:26:c6:03:00:8f:4a:66:af:00:76:b8:df:e4:e6:
                    e9:23:e7:15:b6:ef:c3:0b:4c:c1:be:77:38:b6:ef:
                    f2:80:bc:a7:19:16:b7:94:c6:2c:0e:ca:11:30:03:
                    94:d4:cf:12:44:cf:92:60:64:ad:30:97:b0:89:ee:
                    c8:8f:8d:6b:9a:8c:1c:f0:14:db:7f:ee:4f:00:9b:
                    7d:6b:3c:b4:87:a6:0a:ea:2e:e8:fc:e2:43:80:5f:
                    b3:33:19:3f:89:7e:6c:32:3b:86:d8:04:99:1a:95:
                    25:f5:71:49:01:6f:5f:95:8b:2d:a1:b4:0f:c7:06:
                    39:ff:b3:8d:d2:54:5f:61:28:bc:e2:f9:75:37:f2:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9A:E0:0F:4B:28:52:47:59:E6:96:10:E9:BB:8A:C3:6F:F2:B9:51
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/75rgD0soUkdZ5pYQ6buKw2_yuVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c2:b7:d3:5e:82:ab:65:97:ea:ac:43:19:ae:94:0b:ed:dc:
         49:ca:e8:a7:f0:ca:69:b1:f4:0e:c9:d2:96:9a:01:90:19:97:
         42:c6:57:45:6c:13:2d:c1:d2:36:0b:15:c0:b9:1b:ac:1f:17:
         95:19:87:8d:9e:e9:c7:fd:d6:ef:46:5c:e9:85:de:02:6b:6c:
         c6:6f:09:6b:34:18:34:a4:8d:9e:77:34:04:8d:a9:22:fc:f4:
         4b:08:25:5f:ae:84:9f:db:1e:8f:0a:6d:ee:b1:18:62:b0:d4:
         f0:19:6b:9c:26:d1:f3:18:26:e8:1c:8c:07:be:28:e1:54:74:
         59:c0:d8:d5:88:af:2d:35:3a:0a:18:fd:92:24:dd:2a:1e:1b:
         e1:61:e8:69:d1:9e:7b:42:b8:b5:c2:3f:a9:80:4a:18:6a:8c:
         85:a2:9c:32:3a:50:ee:83:10:ec:29:2b:99:09:5b:e1:38:4e:
         ae:1d:c9:18:6d:c8:98:d5:6f:84:48:c9:08:5f:d6:9f:9b:f2:
         05:c3:9f:07:e2:92:5e:93:2c:27:e2:84:63:9a:8f:4c:e5:ab:
         ca:10:6f:73:95:4b:c8:e9:d1:69:11:cf:b0:e3:f3:a0:ae:6e:
         3b:71:3a:15:09:15:f9:7a:1a:79:7e:05:46:e0:68:17:89:ad:
         1c:50:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net