Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/wVCS0IogmmYoXovWU_xVzsvQXq8.roa
File:                     wVCS0IogmmYoXovWU_xVzsvQXq8.roa (raw, json)
Hash identifier:          c60Tu0XsOovy/mNUtV9x9bFD19HoY8LLAsxAByibZnU=
Subject key identifier:   C1:50:92:D0:8A:20:9A:66:28:5E:8B:D6:53:FC:55:CE:CB:D0:5E:AF
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01856D11D7CB9C771D4A4A097872467EDB75
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/wVCS0IogmmYoXovWU_xVzsvQXq8.roa
Signing time:             Sun 01 Jan 2023 11:22:44 +0000
ROA not before:           Sun 01 Jan 2023 11:22:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        89.23.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:11:d7:cb:9c:77:1d:4a:4a:09:78:72:46:7e:db:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 11:22:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c15092d08a209a66285e8bd653fc55cecbd05eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:0e:8e:88:c9:18:65:fc:fa:e7:88:55:5b:
                    e4:85:f2:9f:b8:d8:ed:3c:c0:02:05:a3:77:e9:a8:
                    19:c0:63:2f:ad:52:43:aa:90:e7:64:c6:44:2d:03:
                    b6:a6:7a:9f:f5:a4:af:96:c3:15:de:75:5e:43:bc:
                    3c:30:ab:c9:f2:19:c4:92:55:c2:f2:7c:ba:be:cd:
                    a6:85:71:90:97:98:53:ad:c5:a1:f4:b7:5c:2b:b4:
                    5f:d8:26:12:6a:ac:e9:ff:7d:59:be:63:2f:8f:74:
                    45:ae:60:e1:d7:76:31:37:f6:11:40:98:53:87:0e:
                    18:6e:77:c6:63:48:fb:4c:d7:10:73:4f:a1:98:c9:
                    42:f7:86:f1:8d:26:fe:ec:ae:bb:01:34:2d:12:a6:
                    06:91:e1:70:d7:0b:01:8c:03:7a:33:38:fe:6d:c5:
                    69:3a:ad:41:73:b0:4f:c2:28:5a:8b:89:fc:c6:3f:
                    ab:e1:a9:e3:36:f9:40:c8:a8:b7:54:c8:81:ff:98:
                    d4:3f:3e:0a:2b:40:5a:38:53:75:c7:2d:f1:05:fd:
                    8e:10:58:bd:a4:fc:c4:1c:84:36:a0:c7:a3:f5:c2:
                    31:f7:11:49:13:02:1a:ee:6f:c8:da:b0:6f:ac:a6:
                    67:11:b8:90:c5:ed:bd:53:76:dd:4d:40:31:c3:ce:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:92:D0:8A:20:9A:66:28:5E:8B:D6:53:FC:55:CE:CB:D0:5E:AF
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/wVCS0IogmmYoXovWU_xVzsvQXq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:77:20:cf:42:08:6c:04:49:a8:af:7b:87:d6:5d:db:e5:53:
         d1:fb:cf:8e:1a:04:12:9f:dc:99:85:14:43:cb:82:52:5b:99:
         25:2f:50:9a:f8:80:fe:7e:dd:6d:7b:0d:06:87:bf:bb:f8:6b:
         c4:f4:89:77:9b:11:bb:9e:45:71:9a:44:47:df:ce:41:17:7a:
         2b:33:57:a7:5d:53:31:84:9d:83:51:2b:45:fc:73:9e:97:42:
         6d:91:b3:81:79:d1:d7:16:f2:09:d2:e3:b9:44:f3:53:c8:cb:
         94:30:a7:67:f2:0f:f3:dd:ea:79:d1:cd:0d:ef:55:da:2f:27:
         c4:be:11:c3:1c:93:78:3c:c7:6a:8c:c4:8c:88:47:00:49:6f:
         9b:38:bf:7f:a2:28:ed:c2:56:98:f4:f2:cd:dc:2b:c9:27:d6:
         72:97:f7:39:2d:4f:25:32:e7:7d:b8:26:26:d9:c9:ae:d2:7a:
         cd:52:2f:5f:5a:01:7a:cc:dc:9d:7e:35:b7:1f:72:d7:04:aa:
         bd:2b:6e:64:0e:54:50:95:00:3d:72:49:1f:47:28:51:cb:7a:
         6b:36:1d:22:97:47:dc:53:8b:e9:33:50:b1:11:cd:42:0d:b4:
         2c:34:29:39:2f:1f:9e:14:10:3c:b0:d2:1e:df:b9:f4:86:39:
         75:34:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net