Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/DpzMDfltHG0i-rPmjHmVARVZ42Q.roa
File:                     DpzMDfltHG0i-rPmjHmVARVZ42Q.roa (raw, json)
Hash identifier:          jeqyFn8aBe5neZCl/xkF4Qa7WTSSDXk47tzMl7HKGFU=
Subject key identifier:   0E:9C:CC:0D:F9:6D:1C:6D:22:FA:B3:E6:8C:79:95:01:15:59:E3:64
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01856D11DBFF17EBB3010AEB2535FC81577C
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/DpzMDfltHG0i-rPmjHmVARVZ42Q.roa
Signing time:             Sun 01 Jan 2023 11:22:45 +0000
ROA not before:           Sun 01 Jan 2023 11:22:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209260
IP address blocks:        89.23.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:11:db:ff:17:eb:b3:01:0a:eb:25:35:fc:81:57:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 11:22:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e9ccc0df96d1c6d22fab3e68c7995011559e364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:d7:98:bf:3f:95:75:ac:b0:e0:d3:72:c1:
                    64:58:44:f0:05:56:81:25:48:f6:ca:e5:2c:59:31:
                    ed:37:b1:56:cf:fb:25:7e:e0:db:a6:ac:f6:68:01:
                    f3:da:a5:61:5b:30:31:c3:df:a5:62:c9:3a:94:a8:
                    ba:b4:f0:de:71:f3:d5:1a:50:1c:d1:97:69:d0:60:
                    a0:4b:a2:76:ad:03:d5:89:aa:b6:13:b6:38:6f:2a:
                    07:41:91:7b:17:0f:5a:1a:97:87:a8:8f:57:25:04:
                    f3:e2:c5:1c:3a:e8:ac:83:71:b4:12:05:32:b2:61:
                    33:e0:ac:4b:ee:e8:5b:af:12:d5:46:6b:cb:e2:d7:
                    9f:bc:de:f6:ef:7f:6b:c2:3c:70:34:fb:c5:c5:98:
                    d5:ae:00:e3:b8:5e:93:7f:a4:58:45:6f:11:c1:1d:
                    60:e7:47:4a:04:d8:96:cc:5f:fe:d0:20:96:19:e1:
                    3b:4a:c3:12:19:3e:58:d8:42:15:97:e6:cf:11:bc:
                    84:0e:1d:e5:bc:50:f0:d0:25:69:9f:c6:32:02:eb:
                    0b:80:b7:78:2d:ee:83:9d:f6:8f:6d:f6:80:3f:23:
                    61:40:ed:ff:07:5d:6e:19:1a:69:dd:04:3a:6d:08:
                    b5:af:1f:19:04:a1:e7:4b:16:73:dc:7b:54:e8:31:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:CC:0D:F9:6D:1C:6D:22:FA:B3:E6:8C:79:95:01:15:59:E3:64
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/DpzMDfltHG0i-rPmjHmVARVZ42Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:16:9e:00:96:17:f7:6a:50:9c:2a:aa:44:ec:18:b7:12:5e:
         aa:b1:ab:3d:54:11:c7:ee:e3:1a:39:f0:dd:cc:57:44:2f:0c:
         be:35:c2:4b:57:b8:08:29:9b:5d:6a:92:a0:7b:6d:92:96:a5:
         e3:bd:c1:0d:0f:26:2b:d4:8c:5f:1f:ba:f7:7c:36:95:c4:37:
         17:e8:8c:4c:17:6b:a2:91:ce:9b:5c:9c:25:1c:c4:ce:2a:2c:
         6e:e2:fa:ea:5a:f0:75:2a:b8:10:bd:5f:a6:d5:b5:ec:ee:ec:
         30:eb:dd:f3:69:6b:ff:95:c9:3a:47:f6:db:ee:f8:46:a1:26:
         ea:93:95:e9:0f:8f:37:c2:02:31:28:77:65:a4:79:46:d1:64:
         d6:f5:df:22:2e:af:6e:06:7e:15:e7:8e:9d:1e:5b:07:db:8b:
         77:b9:27:f4:bb:66:85:84:70:e9:ff:99:a8:ff:97:1f:84:da:
         af:f0:33:59:e9:a9:23:e3:04:9d:38:5f:e7:35:47:0b:8b:74:
         de:0b:64:06:b9:15:bd:50:0b:49:aa:1d:e1:78:c8:d5:31:f6:
         4f:51:6d:c2:c6:7e:cb:72:ad:b0:44:54:bd:69:c7:bb:de:f9:
         67:f1:e7:05:ab:8c:c9:f5:b4:a4:1e:60:4d:c2:e1:53:ec:c7:
         2f:de:10:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtEdv/F+uzAQrrJTX8gVd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwMTAxMTEyMjQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTljY2MwZGY5NmQxYzZkMjJmYWIzZTY4Yzc5OTUwMTE1NTllMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5bXmL8/lXWssODTcsFkWETwBVaB
JUj2yuUsWTHtN7FWz/slfuDbpqz2aAHz2qVhWzAxw9+lYsk6lKi6tPDecfPVGlAc
0Zdp0GCgS6J2rQPViaq2E7Y4byoHQZF7Fw9aGpeHqI9XJQTz4sUcOuisg3G0EgUy
smEz4KxL7uhbrxLVRmvL4tefvN72739rwjxwNPvFxZjVrgDjuF6Tf6RYRW8RwR1g
50dKBNiWzF/+0CCWGeE7SsMSGT5Y2EIVl+bPEbyEDh3lvFDw0CVpn8YyAusLgLd4
Le6DnfaPbfaAPyNhQO3/B11uGRpp3QQ6bQi1rx8ZBKHnSxZz3HtU6DGXSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA6czA35bRxtIvqz5ox5lQEVWeNkMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvRHB6TURmbHRIRzBpLXJQbWpIbVZBUlZaNDJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdOMA0G
CSqGSIb3DQEBCwUAA4IBAQBGFp4Alhf3alCcKqpE7Bi3El6qsas9VBHH7uMaOfDd
zFdELwy+NcJLV7gIKZtdapKge22SlqXjvcENDyYr1IxfH7r3fDaVxDcX6IxMF2ui
kc6bXJwlHMTOKixu4vrqWvB1KrgQvV+m1bXs7uww693zaWv/lck6R/bb7vhGoSbq
k5XpD483wgIxKHdlpHlG0WTW9d8iLq9uBn4V546dHlsH24t3uSf0u2aFhHDp/5mo
/5cfhNqv8DNZ6akj4wSdOF/nNUcLi3TeC2QGuRW9UAtJqh3heMjVMfZPUW3Cxn7L
cq2wRFS9ace73vln8ecFq4zJ9bSkHmBNwuFT7Mcv3hD4
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net