Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/8jCshwK2vzp56ICAV8QZpa949Aw.roa
File:                     8jCshwK2vzp56ICAV8QZpa949Aw.roa (raw, json)
Hash identifier:          QAVhs4nYUkpUwYi8pEp6F5b3dI9p+dB6HHYi0Y54ewI=
Subject key identifier:   F2:30:AC:87:02:B6:BF:3A:79:E8:80:80:57:C4:19:A5:AF:78:F4:0C
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       0182FAA3F191547927EB5D2162BB0D48804F
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/8jCshwK2vzp56ICAV8QZpa949Aw.roa
Signing time:             Thu 01 Sep 2022 20:00:24 +0000
ROA not before:           Thu 01 Sep 2022 20:00:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        89.23.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:fa:a3:f1:91:54:79:27:eb:5d:21:62:bb:0d:48:80:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Sep  1 20:00:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f230ac8702b6bf3a79e8808057c419a5af78f40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:9d:9b:8d:52:57:d1:f4:d9:69:96:e9:c2:
                    44:1b:0e:05:6e:20:86:a4:8d:e1:97:1f:4f:4b:0e:
                    b9:d8:d6:9a:d7:45:bf:96:20:ec:ba:fd:2e:d9:52:
                    c3:a9:a7:4c:28:ac:d2:d6:d1:1c:c4:16:b1:ac:cd:
                    9a:3d:c0:07:c4:6f:97:2f:86:05:7d:32:f7:9b:47:
                    08:c0:47:6c:54:cd:38:ec:c6:4f:76:3c:0f:45:b3:
                    88:59:e2:bb:1d:b1:d1:b1:90:4e:a0:e3:d8:32:fd:
                    79:1b:33:35:12:d1:04:b5:8f:a3:20:43:75:c4:7f:
                    14:44:ef:3b:b2:e7:e1:d7:24:9e:31:26:f3:37:af:
                    bf:0e:7f:e4:38:bc:90:fb:b0:c7:78:93:41:bd:ed:
                    ac:f9:14:02:12:db:f5:2d:e1:04:3e:d0:44:5f:ba:
                    66:f1:e8:05:93:e4:38:88:cb:f9:6c:d9:b9:f8:b5:
                    49:68:70:aa:64:97:d9:93:8c:0b:ed:69:83:80:d2:
                    d7:40:b0:d7:e8:71:2d:d5:e8:9c:93:a4:1e:15:5b:
                    1a:7a:a8:31:5f:51:bc:73:95:77:a1:da:ad:51:a0:
                    cd:fb:bf:f5:ee:ff:da:0d:f3:98:7b:b6:75:71:78:
                    20:69:18:3d:99:cc:4c:79:48:de:1e:d2:8b:92:7a:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:30:AC:87:02:B6:BF:3A:79:E8:80:80:57:C4:19:A5:AF:78:F4:0C
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/8jCshwK2vzp56ICAV8QZpa949Aw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:61:27:77:48:1c:fc:9f:d5:ab:e9:08:10:b7:c7:b4:d9:8e:
         15:54:5d:f9:96:2b:35:98:8a:9f:04:9e:2a:8e:e9:e4:39:e6:
         0d:dd:87:67:47:03:61:2c:bb:32:cb:31:dc:b1:84:37:71:64:
         0c:f0:d3:a0:d5:f5:7e:4f:eb:86:7b:2d:9a:d8:80:c5:72:5f:
         5b:eb:1c:0c:70:cb:6b:e9:3e:b0:c9:7a:1b:2e:c2:fa:f6:2d:
         64:23:21:d8:f5:9e:3f:5f:c9:bf:b4:9a:5b:47:4b:28:fa:0b:
         a3:4a:02:b8:f1:09:8c:fa:46:30:1f:a2:49:91:29:a4:e5:0e:
         9d:38:b9:77:99:4b:89:f9:7d:8f:5b:a0:70:ef:49:d4:28:b6:
         5d:37:f3:cc:3a:c5:ea:59:3f:f8:d3:f3:b1:71:2d:b8:c8:39:
         50:b7:c9:f6:31:d6:fc:45:cc:d8:4f:8e:5f:cb:e4:bc:7d:f2:
         7d:67:0d:4f:4f:fc:de:60:df:fc:f4:ff:ef:d9:38:95:92:13:
         58:30:a0:3f:23:83:cc:f6:5e:f4:2b:af:70:d8:19:6a:f1:53:
         22:4a:ab:96:74:fd:96:f8:ea:9d:83:3c:92:8b:09:07:a6:9a:
         63:69:38:74:b2:18:6a:44:d5:76:6b:78:51:aa:05:ae:b2:35:
         c6:6b:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net