Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/GY9ciV49Zih8lR8sy-n0wdxAwb4.roa
File:                     GY9ciV49Zih8lR8sy-n0wdxAwb4.roa (raw, json)
Hash identifier:          /bx1bkCEenrUExymBCLizra11tW516w24UK/PlAizww=
Subject key identifier:   19:8F:5C:89:5E:3D:66:28:7C:95:1F:2C:CB:E9:F4:C1:DC:40:C1:BE
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01878132C880DC3BC86D0B1D604477ECB6D6
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/GY9ciV49Zih8lR8sy-n0wdxAwb4.roa
Signing time:             Fri 14 Apr 2023 19:16:41 +0000
ROA not before:           Fri 14 Apr 2023 19:16:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205570
IP address blocks:        178.254.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:81:32:c8:80:dc:3b:c8:6d:0b:1d:60:44:77:ec:b6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Apr 14 19:16:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=198f5c895e3d66287c951f2ccbe9f4c1dc40c1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:ef:30:18:5b:68:11:fa:c3:e6:b4:e0:2f:
                    f5:55:6b:48:19:78:4f:dd:f8:22:06:15:09:3e:1e:
                    98:29:d9:e6:4f:a0:12:34:f2:fb:98:49:41:80:31:
                    0f:b9:dd:2b:b3:67:52:4c:50:da:27:6e:42:bd:83:
                    49:7f:f6:34:25:dc:e1:a3:bb:6e:34:bc:5b:7a:f9:
                    f7:0a:6f:3b:ac:35:5a:d3:6f:a5:4a:46:be:98:05:
                    e0:43:89:f5:5d:ee:76:7c:75:94:29:9d:69:d7:70:
                    70:9a:74:00:61:11:ce:cc:c2:d5:3e:c9:43:4b:ec:
                    e4:b7:8e:1c:15:7d:7d:56:ef:cf:7d:3b:40:c9:17:
                    e7:b1:cc:49:5f:a7:71:3c:d3:32:c5:7e:f2:f9:50:
                    9f:6e:54:c9:d9:63:53:19:10:a8:5b:64:89:43:ad:
                    48:84:d8:fd:a0:07:43:a3:45:f4:2f:ec:f3:32:73:
                    28:0a:83:e9:a7:a3:1a:7f:42:61:6e:f1:65:ad:94:
                    2f:5a:35:78:cc:cc:af:10:ee:54:81:15:49:5e:c6:
                    4e:80:8f:18:96:11:55:a6:4d:31:b0:9c:7b:07:ac:
                    80:5d:f1:55:cf:a0:71:73:a8:4a:05:7a:e0:83:c3:
                    33:85:67:92:f9:5f:55:57:16:03:6a:e5:8c:03:9e:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:5C:89:5E:3D:66:28:7C:95:1F:2C:CB:E9:F4:C1:DC:40:C1:BE
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/GY9ciV49Zih8lR8sy-n0wdxAwb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:81:3b:24:2d:c3:81:98:e9:bf:51:45:c7:1b:bd:66:65:86:
         12:cb:be:eb:30:a2:db:70:4c:2f:a7:5f:96:ea:e1:f9:d7:71:
         45:01:ed:f8:83:80:51:b0:d6:9c:50:a5:c9:32:86:4d:ae:1c:
         1c:3c:88:99:ad:81:61:58:c6:70:32:a8:64:28:28:5d:42:a8:
         86:47:8b:9f:9c:41:26:76:ee:de:6d:7d:ac:ef:b5:17:f2:52:
         11:6c:a6:0b:e8:32:6e:63:41:c3:d8:a2:de:39:b5:8a:a7:e4:
         60:0c:d5:eb:6d:ce:68:31:81:d9:75:c0:be:56:cf:62:2e:c8:
         06:20:c1:55:bb:73:db:a7:64:bd:18:8e:a4:e3:e4:7b:0c:ab:
         08:35:82:fe:0f:39:3a:08:51:ef:a9:1f:35:e8:b7:c2:71:74:
         a5:e1:27:69:e1:e6:f7:d4:4e:20:1f:50:46:a5:12:76:62:95:
         b8:0d:e2:54:e7:42:8e:ef:2f:d3:44:17:3b:30:87:a6:17:06:
         a6:72:9a:24:0d:e8:b5:aa:11:18:07:d1:1f:1b:0d:f8:a8:5d:
         71:3a:b0:64:15:6e:49:24:04:0c:63:91:01:15:70:f7:ff:6e:
         c8:d9:7d:ee:fc:ca:c0:78:e5:b0:0f:e0:6a:28:cd:69:87:10:
         00:19:5c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net