Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4766.roa
File:                     AS4766.roa (raw, json)
Hash identifier:          PFKQDNKis71Vh/9Ixq4799uocjb+dyWLnVAU04oEiAk=
Subject key identifier:   EA:77:91:B1:5F:B3:8B:D0:C2:B9:5E:FB:B7:E6:A3:50:06:E0:46:73
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       32E3BB3BFF2355059B648FDD6C36BC3246B4E809
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4766.roa
Signing time:             Fri 23 Oct 2026 10:57:43 +0000
ROA not before:           Fri 23 Oct 2026 10:52:43 +0000
ROA not after:            Fri 22 Oct 2027 10:57:43 +0000
asID:                     4766
IP address blocks:        82.22.240.0/24 maxlen: 24
                          82.23.198.0/24 maxlen: 24
                          82.23.240.0/24 maxlen: 24
                          82.24.209.0/24 maxlen: 24
                          82.24.219.0/24 maxlen: 24
                          82.24.233.0/24 maxlen: 24
                          82.24.240.0/24 maxlen: 24
                          82.24.250.0/24 maxlen: 24
                          82.25.208.0/24 maxlen: 24
                          82.25.211.0/24 maxlen: 24
                          84.75.68.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e3:bb:3b:ff:23:55:05:9b:64:8f:dd:6c:36:bc:32:46:b4:e8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 23 10:52:43 2026 GMT
            Not After : Oct 22 10:57:43 2027 GMT
        Subject: CN=EA7791B15FB38BD0C2B95EFBB7E6A35006E04673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:06:2a:1d:25:e1:03:99:f5:bb:6d:5b:0b:
                    81:74:6a:2d:20:96:00:35:94:3f:d5:36:46:04:fa:
                    3b:57:54:54:e6:cd:c0:f4:bf:f2:c8:68:32:0d:8b:
                    ac:5c:44:c4:23:2f:36:af:3e:c6:b7:07:32:9c:28:
                    1d:5f:f8:e7:19:bf:bc:b5:16:c3:36:79:e2:1e:47:
                    06:61:65:4b:99:b4:91:d1:73:18:1f:7b:d5:8c:4e:
                    66:65:28:47:7e:b5:cf:da:64:ab:9e:d4:26:56:6e:
                    91:9e:28:05:c0:73:ee:f7:f5:fe:3a:df:ec:4b:73:
                    13:e6:1e:da:ef:60:3d:e7:50:a1:ff:3f:07:aa:60:
                    ec:10:4c:fd:30:37:48:70:2e:fc:b1:5f:a4:d4:5b:
                    91:d0:a5:2f:de:c1:d9:53:8f:43:cc:be:e1:e2:a5:
                    a5:28:6c:31:bf:61:30:4a:e1:a5:bd:e2:48:c3:66:
                    cf:18:70:29:88:c3:07:40:d7:87:38:e0:a7:aa:02:
                    e0:f1:3e:38:ba:47:e1:d9:13:d3:58:db:6d:df:54:
                    db:37:af:79:8f:15:09:08:ac:75:7c:a7:bb:6a:86:
                    09:25:0c:e6:c7:55:80:cb:af:a8:14:10:03:d2:0d:
                    4c:e6:3f:a3:e1:aa:ea:b6:36:f9:84:45:48:5e:dd:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:77:91:B1:5F:B3:8B:D0:C2:B9:5E:FB:B7:E6:A3:50:06:E0:46:73
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.240.0/24
                  82.23.198.0/24
                  82.23.240.0/24
                  82.24.209.0/24
                  82.24.219.0/24
                  82.24.233.0/24
                  82.24.240.0/24
                  82.24.250.0/24
                  82.25.208.0/24
                  82.25.211.0/24
                  84.75.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:62:03:cf:e5:67:6a:db:2d:79:25:f3:76:83:52:bc:82:b8:
         f7:a5:65:00:65:be:13:42:ec:20:bc:1a:9f:2b:ba:dd:08:9b:
         73:be:36:f9:ba:59:5e:a0:0e:77:53:94:88:60:a2:8f:7e:69:
         fd:56:03:74:38:47:76:27:63:f3:e0:78:56:d4:c4:a3:5f:7a:
         44:52:69:15:6a:f9:57:b8:8c:c5:53:32:7b:93:10:c2:2c:97:
         89:f1:dd:3a:a7:0d:9d:ae:db:e6:fb:7c:46:db:80:7c:c0:6d:
         e5:b6:a0:47:98:e2:1b:22:55:18:0f:65:f5:99:34:dd:18:6b:
         89:5f:90:ca:a1:8f:36:4c:9e:78:d4:e4:e9:e3:18:87:26:1e:
         41:a7:c5:a7:26:17:64:8e:76:83:be:50:50:05:83:3a:47:d6:
         8b:7f:25:25:cb:78:e5:87:d0:40:b0:5c:f3:91:0a:ea:d8:c6:
         0c:16:82:db:8b:c1:d5:14:d5:e9:7e:94:71:5b:e4:8b:db:e1:
         f8:d9:12:11:f0:c6:7a:cc:4b:0e:61:4e:ef:ea:f5:56:e0:7e:
         de:d1:64:e6:90:3f:10:26:1b:f2:c0:33:01:6d:af:26:c5:b6:
         fa:4e:15:f3:d5:c6:04:59:7b:68:08:89:0c:40:1d:0e:3d:a6:
         d9:4d:46:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----