Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/wSIBF-HzvOsL2yIwM7cVqnc2vy8.roa
File:                     wSIBF-HzvOsL2yIwM7cVqnc2vy8.roa (raw, json)
Hash identifier:          D7QBOQzvO8sEIOwPgFaE82DpiYgMwTeNnrfiRBAS/xI=
Subject key identifier:   C1:22:01:17:E1:F3:BC:EB:0B:DB:22:30:33:B7:15:AA:77:36:BF:2F
Certificate issuer:       /CN=932c08f7241106d94cd7bc9029c3e588b802215b
Certificate serial:       EEF8B4
Authority key identifier: 93:2C:08:F7:24:11:06:D9:4C:D7:BC:90:29:C3:E5:88:B8:02:21:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kywI9yQRBtlM17yQKcPliLgCIVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/wSIBF-HzvOsL2yIwM7cVqnc2vy8.roa
Signing time:             Sat 01 Jan 2022 06:57:09 +0000
ROA not before:           Sat 01 Jan 2022 06:57:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212913
IP address blocks:        193.3.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15661236 (0xeef8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932c08f7241106d94cd7bc9029c3e588b802215b
        Validity
            Not Before: Jan  1 06:57:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1220117e1f3bceb0bdb223033b715aa7736bf2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:03:34:39:9c:46:77:f1:f1:02:5d:a7:4b:
                    cd:42:54:35:8d:c2:63:86:21:35:d7:1f:3f:73:be:
                    0f:cb:f5:1f:0b:69:94:5a:b3:7a:e7:d7:4b:ba:68:
                    de:01:5d:d7:74:6b:c2:66:fa:4e:bb:0a:8f:32:be:
                    a6:f3:79:b8:36:2c:60:a5:b8:e7:a4:eb:e2:ae:40:
                    fe:63:4f:50:d3:d5:32:f1:24:2b:10:5b:b9:b2:a8:
                    f3:16:c6:67:61:71:97:b3:c8:71:9e:3c:8a:b9:b2:
                    98:cf:f2:fa:ab:00:b0:c3:30:9c:b4:b3:57:c1:c5:
                    e3:9d:f9:56:2b:14:96:18:82:06:de:bc:76:7f:df:
                    8b:2b:65:6d:36:99:94:4b:d4:f1:d7:3b:5a:a9:be:
                    ec:fc:8e:1b:f1:12:41:a3:5c:50:68:03:e7:33:22:
                    84:60:98:f7:9c:1e:c8:59:52:6f:35:1e:33:04:f6:
                    e7:d8:98:bf:44:7a:6b:48:ea:b3:1a:ec:85:1c:6c:
                    d0:5d:42:c2:5f:50:a5:87:99:28:3a:99:04:18:fc:
                    71:6f:d7:ea:61:d7:0a:65:9b:1c:24:91:a0:da:90:
                    7d:ca:a2:41:f1:86:ed:0c:39:e7:05:a6:3e:05:0d:
                    dd:ba:2f:6f:a3:31:61:7c:31:85:7d:ee:b3:99:64:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:01:17:E1:F3:BC:EB:0B:DB:22:30:33:B7:15:AA:77:36:BF:2F
            X509v3 Authority Key Identifier:
                keyid:93:2C:08:F7:24:11:06:D9:4C:D7:BC:90:29:C3:E5:88:B8:02:21:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kywI9yQRBtlM17yQKcPliLgCIVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/wSIBF-HzvOsL2yIwM7cVqnc2vy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/kywI9yQRBtlM17yQKcPliLgCIVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:f9:09:33:0f:8b:ee:c5:e0:07:64:82:e7:4a:a6:e8:0b:
         db:5f:e4:d6:87:2a:12:3f:0b:96:1c:e5:b9:df:7c:46:e0:9f:
         50:0b:ee:d7:73:f3:1f:43:dd:17:af:a2:fc:32:12:6a:68:b1:
         a8:d1:bf:b1:9b:67:fe:12:f9:b6:12:83:1d:02:c3:86:0f:e2:
         02:21:7a:66:d8:69:9d:1b:de:0b:98:0b:48:e2:bb:4a:40:eb:
         c5:c1:70:62:55:49:c3:7b:2c:d3:e7:e0:d7:80:55:a3:d6:cc:
         9d:b1:a1:fa:67:6f:11:9d:2a:cc:8f:8d:72:0a:f7:d6:0e:68:
         6b:7d:4c:03:1b:c3:29:9c:70:c0:1d:33:0c:ae:4d:f4:84:03:
         fc:c8:63:99:57:1e:24:e2:0f:46:a8:4a:35:8f:2d:0b:cc:61:
         31:7d:2a:ba:a7:43:02:cf:a1:1c:a1:64:0d:bb:26:e6:0b:14:
         f3:2d:75:a9:9f:e6:67:a3:35:ba:7f:88:b5:cc:e4:ee:81:61:
         89:83:dc:a1:9b:0e:a2:3a:0f:71:d9:9f:97:5b:7c:47:15:ff:
         1a:b1:42:c4:48:41:27:97:73:e8:e7:9f:c0:68:6d:11:14:c5:
         6d:8f:b3:97:72:bb:85:6e:4b:d0:38:d7:ce:5c:cd:11:86:e7:
         27:46:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net