Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/Mj31BExCVtuYryNafmi3YQK6SXA.roa
File:                     Mj31BExCVtuYryNafmi3YQK6SXA.roa (raw, json)
Hash identifier:          yUBSJSSym9VoPqujAV2lkOyn8Ani+4RYudqbM6XIgyg=
Subject key identifier:   32:3D:F5:04:4C:42:56:DB:98:AF:23:5A:7E:68:B7:61:02:BA:49:70
Certificate issuer:       /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial:       053754D0
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/Mj31BExCVtuYryNafmi3YQK6SXA.roa
Signing time:             Thu 19 May 2022 15:55:29 +0000
ROA not before:           Thu 19 May 2022 15:55:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.155.157.0/24 maxlen: 24
                          45.155.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87512272 (0x53754d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
        Validity
            Not Before: May 19 15:55:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=323df5044c4256db98af235a7e68b76102ba4970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:2a:ff:27:db:f0:a6:2e:b3:2d:df:de:a0:
                    83:d8:73:88:7b:18:9d:23:30:8c:d4:c2:f8:bb:ab:
                    c9:30:0f:74:5a:95:01:00:f2:ef:00:0c:b0:55:66:
                    49:c3:9a:30:30:19:09:53:d8:0b:59:fd:ce:bf:96:
                    9c:cd:f1:9d:0c:a2:5a:7d:93:7a:28:ac:42:4e:b6:
                    af:62:cc:be:ea:b6:a7:fd:47:34:68:42:be:3d:16:
                    51:1a:23:9c:39:07:c1:ab:1f:60:67:0c:bd:79:e5:
                    ae:e4:b1:57:ff:75:fd:65:9f:2e:bc:d5:2c:25:7f:
                    4a:88:d6:99:14:7f:e1:4d:7e:df:a3:67:10:d9:48:
                    4c:7f:6c:29:7c:e6:fc:7a:f8:2f:6a:1b:55:49:c0:
                    bf:81:2d:f1:e4:47:8d:62:42:f9:aa:74:63:00:a7:
                    62:8b:2f:42:3b:77:bf:e1:0e:67:74:0e:24:b0:ee:
                    f5:12:67:e7:1f:2b:2c:6f:52:df:33:e8:8e:05:36:
                    49:18:fd:22:95:0d:df:5e:0d:75:0b:5f:eb:9e:2b:
                    61:61:b3:96:4d:1f:73:31:77:13:0b:52:b0:5b:80:
                    6d:ba:62:ad:3b:cd:7a:65:3c:6d:a8:81:88:59:83:
                    db:43:4d:09:78:df:85:fa:a1:4c:0b:77:11:01:cf:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3D:F5:04:4C:42:56:DB:98:AF:23:5A:7E:68:B7:61:02:BA:49:70
            X509v3 Authority Key Identifier:
                keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/Mj31BExCVtuYryNafmi3YQK6SXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:9d:de:e7:15:82:a1:d0:ba:ca:89:6b:53:fb:9a:6a:5c:5a:
         6e:fb:31:c1:96:fd:45:4f:6d:dd:71:48:7a:cd:96:7c:7e:ec:
         78:a2:cb:24:25:61:89:4e:94:30:10:a8:fe:3e:df:99:8f:98:
         bd:86:23:93:39:80:e4:bd:f8:4e:67:de:51:41:a6:5d:ba:be:
         5e:99:97:db:79:15:01:2b:ec:b2:33:df:5a:61:c9:2c:64:00:
         9e:60:95:17:14:df:2b:d5:56:3f:1e:f9:32:36:66:3c:d9:b1:
         0c:62:62:fc:ca:b7:dd:77:17:8a:04:15:b2:c6:d4:87:1b:7f:
         47:a7:68:d0:6d:d0:7c:61:36:de:75:df:11:1d:12:87:8a:a5:
         32:53:97:e9:2a:26:d2:60:0a:80:07:5a:7b:1b:da:7e:35:56:
         d5:52:1e:ee:67:c7:9f:82:3b:83:bf:e6:2a:6a:90:4a:49:24:
         93:bc:bc:ea:48:d7:1a:c1:cc:89:00:55:92:7e:ae:57:b0:d7:
         65:64:e1:96:b1:26:06:1c:e4:63:57:bf:8c:93:ba:00:3a:83:
         7e:04:c1:4d:55:95:2a:bb:23:91:91:23:d7:af:0e:42:b8:d8:
         50:ab:54:74:fc:17:2f:f9:90:d9:bc:cc:e6:eb:86:cd:26:3d:
         9e:1e:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org