Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397032.roa
File:                     AS397032.roa (raw, json)
Hash identifier:          /KH+5IZabq+ogGMZpJzoVFycOpWdTIlRdOe3EeQ2v+s=
Subject key identifier:   DD:72:66:F7:14:1E:D5:83:29:D0:05:BA:19:67:90:CC:7A:54:B8:DA
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       4670761995763986A135C245FDA71B3DC1C8AD5E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397032.roa
Signing time:             Mon 26 Oct 2026 15:21:57 +0000
ROA not before:           Mon 26 Oct 2026 15:16:57 +0000
ROA not after:            Mon 25 Oct 2027 15:21:57 +0000
asID:                     397032
IP address blocks:        82.22.19.0/24 maxlen: 24
                          2a13:9500:1e9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:70:76:19:95:76:39:86:a1:35:c2:45:fd:a7:1b:3d:c1:c8:ad:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 26 15:16:57 2026 GMT
            Not After : Oct 25 15:21:57 2027 GMT
        Subject: CN=DD7266F7141ED58329D005BA196790CC7A54B8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:ec:c3:48:f5:77:81:0e:c5:7d:28:3c:c0:
                    9a:4a:27:7a:64:4b:5c:22:b0:8d:4c:14:05:45:d4:
                    e4:a5:84:7a:e9:a3:7d:8b:36:b6:56:4d:f9:69:33:
                    26:0d:f7:96:16:48:1b:00:7d:c0:d3:2a:5c:2c:16:
                    7f:95:a1:c5:98:4e:ea:51:d8:ac:77:75:20:01:74:
                    ec:2d:1c:13:65:b9:90:05:97:23:a5:fe:6f:e4:86:
                    ab:ea:80:2d:3c:5e:7a:16:fc:25:0d:b5:d1:e8:fd:
                    15:2c:54:e3:28:60:65:94:91:b9:22:89:9c:b8:31:
                    5d:8b:f0:d0:4c:5f:b7:df:fe:ff:73:4f:dd:ee:47:
                    ce:34:1c:a1:6a:e1:ea:c4:8f:18:88:3a:60:06:a9:
                    28:bc:47:a8:14:a4:5e:67:6e:8d:f5:73:ff:16:54:
                    17:01:91:6c:f4:bd:3b:51:48:9a:67:fd:40:4b:5d:
                    0a:ac:8d:00:dc:1a:da:99:65:af:6a:90:ef:04:8c:
                    fa:07:f9:f6:2d:e9:ec:c0:71:24:69:4d:0b:07:8f:
                    c0:19:54:6c:af:83:60:4e:5f:89:4e:26:82:75:81:
                    50:c0:a7:ac:0e:8e:4c:48:b7:83:da:3c:df:88:05:
                    15:f1:c2:69:07:87:b2:10:8b:8e:c5:0e:fa:b3:7d:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:66:F7:14:1E:D5:83:29:D0:05:BA:19:67:90:CC:7A:54:B8:DA
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.19.0/24
                IPv6:
                  2a13:9500:1e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:a0:99:d9:34:a6:ac:37:30:b7:67:0c:55:5b:8d:1b:3f:
         b4:1b:1d:a4:6d:9b:02:49:3a:e3:a0:a2:ba:5f:38:00:3a:87:
         f3:9b:ed:56:eb:d9:81:81:8c:77:41:1f:6a:a4:80:a2:7e:15:
         7b:a6:59:30:11:9f:a9:a3:a4:80:4c:7d:e8:6c:72:bf:e8:26:
         03:02:18:5f:e2:d1:f1:b1:e5:f0:a1:2c:ac:c5:ee:9b:b0:22:
         85:8b:9f:d5:74:7d:a5:29:23:77:34:d4:fe:7f:bd:f9:6c:ec:
         e5:7a:c9:12:ec:00:ea:db:6e:90:08:b9:a4:6c:2b:6a:db:59:
         71:e2:f0:2b:72:1c:94:c6:6d:3e:92:c0:2f:89:fb:ce:70:58:
         57:90:bd:fd:9a:4d:44:14:8a:b1:bc:14:4c:25:ec:b5:13:81:
         f2:85:16:b3:dc:c2:bc:eb:31:14:cd:0b:28:ab:e3:55:b0:dc:
         f4:37:b4:b0:1a:2a:29:e6:de:89:b3:49:0e:55:dd:45:4d:8d:
         92:59:0f:54:82:93:28:09:85:f3:62:01:71:1a:fa:36:06:16:
         23:87:7c:31:7f:30:69:99:d8:d1:49:ce:ae:ca:ce:80:43:52:
         0b:bc:a9:1e:e6:d1:d3:6e:4c:15:37:25:d7:cb:1e:d1:ae:3a:
         ba:80:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----