Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/eLwMC4qrOpeI3zkSMgow96Leb5I.roa
File:                     eLwMC4qrOpeI3zkSMgow96Leb5I.roa (raw, json)
Hash identifier:          McyTMO2ZbmCdncILUxAYs6lQMcq5nZxd66a5LgOYB64=
Subject key identifier:   78:BC:0C:0B:8A:AB:3A:97:88:DF:39:12:32:0A:30:F7:A2:DE:6F:92
Certificate issuer:       /CN=932c08f7241106d94cd7bc9029c3e588b802215b
Certificate serial:       01856B4A1696E2E9FD24FA3E2B75139C1BE3
Authority key identifier: 93:2C:08:F7:24:11:06:D9:4C:D7:BC:90:29:C3:E5:88:B8:02:21:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kywI9yQRBtlM17yQKcPliLgCIVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/eLwMC4qrOpeI3zkSMgow96Leb5I.roa
Signing time:             Sun 01 Jan 2023 03:04:55 +0000
ROA not before:           Sun 01 Jan 2023 03:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212913
IP address blocks:        193.3.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:4a:16:96:e2:e9:fd:24:fa:3e:2b:75:13:9c:1b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932c08f7241106d94cd7bc9029c3e588b802215b
        Validity
            Not Before: Jan  1 03:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78bc0c0b8aab3a9788df3912320a30f7a2de6f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3d:ce:90:e9:c7:db:ee:78:51:ff:4a:21:b3:
                    18:86:60:b3:0d:d9:60:c3:63:8e:fe:3a:05:1c:92:
                    da:ec:70:9a:6f:00:26:82:27:23:c0:58:bb:de:50:
                    bd:57:3a:b5:d3:a2:39:0e:c8:45:90:01:57:44:0a:
                    2a:15:5d:44:dc:ad:62:50:51:ff:b6:18:05:d0:2b:
                    e0:23:c8:15:c9:2c:b7:f9:7a:7d:fb:17:ec:49:13:
                    7d:22:e7:5d:65:f0:64:b1:69:1b:4e:ea:b2:95:17:
                    09:b4:17:ee:ab:78:28:a5:47:97:38:35:b3:97:13:
                    cd:0e:d3:6a:52:9d:26:8c:e7:97:82:80:92:9f:ae:
                    ff:a1:da:91:04:1e:ed:dc:e2:53:8c:00:eb:40:f8:
                    3e:ab:bd:08:ea:fb:f1:5c:dd:93:20:40:cb:99:25:
                    f8:6a:7e:d3:5d:f0:b2:a1:e1:ac:a3:41:7f:e3:f4:
                    2b:12:52:a2:9c:9b:45:c9:43:04:47:0e:50:dd:fd:
                    c9:9d:7b:50:bd:c5:68:9e:d8:96:c5:0d:ed:b9:be:
                    34:6a:b4:ba:f9:57:f2:6a:87:0d:a0:82:5d:b6:66:
                    d1:2c:35:8c:b1:6b:84:4b:a4:5b:99:d0:0b:ce:41:
                    f0:7b:0f:c9:b8:94:11:49:35:2f:d9:f0:5e:32:5a:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BC:0C:0B:8A:AB:3A:97:88:DF:39:12:32:0A:30:F7:A2:DE:6F:92
            X509v3 Authority Key Identifier:
                keyid:93:2C:08:F7:24:11:06:D9:4C:D7:BC:90:29:C3:E5:88:B8:02:21:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kywI9yQRBtlM17yQKcPliLgCIVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/eLwMC4qrOpeI3zkSMgow96Leb5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/kywI9yQRBtlM17yQKcPliLgCIVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:53:fa:a8:6b:e8:fb:be:a4:8d:2d:c4:ac:de:05:5f:e6:
         b4:2b:6e:14:b0:d9:39:6f:bb:70:9f:77:a7:e9:7d:c7:76:93:
         82:83:9c:37:4f:b7:38:d1:9a:87:75:d8:52:8a:9c:25:a5:23:
         42:d3:07:0a:ec:b2:cc:e7:e0:b0:61:aa:3d:6a:e5:1c:16:19:
         c5:e9:e9:e2:4a:ed:31:9a:ad:13:3d:98:37:55:2e:6e:f6:0b:
         26:7e:3c:92:ef:8b:6f:0e:d0:ac:e2:11:33:2a:23:14:13:73:
         8e:44:e8:eb:65:fd:fe:77:08:1b:dd:63:91:49:bb:69:9e:39:
         9c:27:f0:be:74:a6:b4:81:73:f9:00:bb:ec:90:6a:4e:13:11:
         8c:04:3f:ec:e1:52:34:90:33:04:12:05:ee:60:70:ef:8e:8a:
         e1:01:77:7d:54:49:ee:61:53:9d:a6:e7:c6:74:7f:a1:36:15:
         9e:90:aa:ec:2f:36:99:f7:7f:1b:67:2f:73:89:72:d2:c6:b2:
         7a:5c:43:8e:71:62:9f:d5:fa:cc:2b:4c:7d:52:b6:ea:a5:ff:
         7a:ec:75:18:77:45:66:a2:40:13:cd:58:ef:24:01:4b:78:aa:
         17:17:96:ee:2c:cd:ab:7e:76:e9:52:fd:1b:d3:b3:0c:6c:56:
         cb:38:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net