Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/uddPk-JQu9b9hzzbarsyU35N4f0.roa
File:                     uddPk-JQu9b9hzzbarsyU35N4f0.roa (raw, json)
Hash identifier:          4hGwYCMdhrmOsZnxH2+XkvupHcuKX5YHv9XubE0ixRI=
Subject key identifier:   B9:D7:4F:93:E2:50:BB:D6:FD:87:3C:DB:6A:BB:32:53:7E:4D:E1:FD
Certificate issuer:       /CN=e3c7c19f8d9b50ea60cce7498af0fd8c3908119e
Certificate serial:       D6A6F1
Authority key identifier: E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48fBn42bUOpgzOdJivD9jDkIEZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/uddPk-JQu9b9hzzbarsyU35N4f0.roa
Signing time:             Tue 08 Mar 2022 08:52:07 +0000
ROA not before:           Tue 08 Mar 2022 08:52:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        185.234.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14067441 (0xd6a6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3c7c19f8d9b50ea60cce7498af0fd8c3908119e
        Validity
            Not Before: Mar  8 08:52:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9d74f93e250bbd6fd873cdb6abb32537e4de1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:ee:e2:93:92:3e:fb:15:32:a6:78:79:a4:
                    4a:1e:c0:89:43:24:ab:42:57:20:65:2e:ac:6d:d1:
                    07:b1:cf:47:ae:96:1c:73:1d:0f:b7:73:57:a7:78:
                    18:da:c3:72:85:2a:57:30:91:04:3f:76:aa:41:66:
                    47:f8:31:56:54:49:27:b4:5f:d4:73:b2:fd:71:8f:
                    72:32:6a:27:8c:a3:0b:80:aa:96:f0:4f:ce:e8:3a:
                    0a:77:60:99:d6:38:24:ed:17:48:33:23:ad:07:99:
                    a6:3a:17:e4:26:67:40:f4:1c:7a:b1:37:4e:5c:11:
                    6a:12:7b:37:1d:5f:b3:f2:00:32:a4:52:6a:55:29:
                    5b:7c:56:3d:76:e2:59:e3:80:f4:5a:b5:ef:74:99:
                    15:97:f1:7a:a1:73:56:88:e2:e4:9a:f8:f8:32:00:
                    e8:01:5e:23:fb:fe:4e:09:d2:c0:f6:fd:46:a0:46:
                    64:49:67:cc:8b:69:3f:e5:6f:74:ba:b0:aa:3a:71:
                    20:a3:eb:53:41:aa:d4:dc:61:c2:ee:4e:fb:0e:d5:
                    6a:bf:d8:68:0b:ec:02:74:10:0f:a9:8f:bf:31:fe:
                    d6:26:10:3b:65:17:1f:c6:f5:29:65:af:e0:01:75:
                    2a:a7:88:dd:35:4f:44:13:13:33:e7:a4:5e:67:f5:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D7:4F:93:E2:50:BB:D6:FD:87:3C:DB:6A:BB:32:53:7E:4D:E1:FD
            X509v3 Authority Key Identifier:
                keyid:E3:C7:C1:9F:8D:9B:50:EA:60:CC:E7:49:8A:F0:FD:8C:39:08:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48fBn42bUOpgzOdJivD9jDkIEZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/uddPk-JQu9b9hzzbarsyU35N4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23929a-b247-4f3b-9cd1-8b1f5becdda2/1/48fBn42bUOpgzOdJivD9jDkIEZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:9c:ce:58:23:ed:2f:f2:55:17:15:e5:94:fb:68:2f:87:
         e1:fa:10:54:2b:7e:e9:76:86:5f:90:36:2e:78:2a:ea:af:ec:
         f3:cc:46:3e:ec:c0:e9:c4:c9:59:04:95:e0:5d:17:ff:0b:2d:
         e6:62:5d:f6:79:16:b8:9d:85:ca:8a:0c:20:c8:2b:8a:9a:4f:
         3f:59:3e:61:a0:1f:6a:6b:bd:69:47:a6:37:dd:80:0c:aa:4c:
         ca:f4:6e:af:20:bb:98:19:17:8b:05:84:57:94:59:06:5a:8e:
         2c:31:b5:c9:be:4e:44:d5:13:1a:82:02:af:67:14:5a:77:2b:
         d7:5a:25:ab:f3:a1:35:a6:58:ba:43:83:55:2d:da:9a:ab:4e:
         1f:74:23:72:2a:33:ba:67:aa:4f:9e:48:e3:a6:12:de:54:64:
         f0:75:fc:1b:ef:78:f2:ca:cf:b6:01:e2:b0:13:42:54:1c:e2:
         78:8b:fd:f7:1c:83:e3:17:b2:3d:e3:ce:1b:87:f6:a3:87:39:
         94:41:a2:5d:f5:a6:97:16:be:d8:ec:fd:9a:24:5f:79:cc:23:
         ae:82:61:77:0b:a7:ca:14:86:e0:3d:c7:7e:5d:b5:f7:1d:eb:
         39:cc:24:4b:89:00:2f:5f:ff:f0:6d:78:be:c6:bc:b9:33:8c:
         d3:79:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net