Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/VuTHCbEZtdt7oMZgNHu5ruW_aj8.roa
File:                     VuTHCbEZtdt7oMZgNHu5ruW_aj8.roa (raw, json)
Hash identifier:          tEy4P1QIMAm+NtiHp5EfhZMe1nePXu4JHuLZNC+kLEI=
Subject key identifier:   56:E4:C7:09:B1:19:B5:DB:7B:A0:C6:60:34:7B:B9:AE:E5:BF:6A:3F
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       018612B7A09B96E413DC08D95DC64FBEDB5A
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/VuTHCbEZtdt7oMZgNHu5ruW_aj8.roa
Signing time:             Thu 02 Feb 2023 15:21:09 +0000
ROA not before:           Thu 02 Feb 2023 15:21:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43486
IP address blocks:        81.93.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:12:b7:a0:9b:96:e4:13:dc:08:d9:5d:c6:4f:be:db:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Feb  2 15:21:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56e4c709b119b5db7ba0c660347bb9aee5bf6a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:7b:9a:6c:ed:f5:f9:5b:28:4c:97:3c:09:
                    74:97:7e:90:db:af:fa:5d:15:cd:94:e6:92:f8:64:
                    fd:4b:10:3b:7b:61:18:dc:ec:29:cb:16:bf:a2:39:
                    fd:03:68:c8:cd:bf:4e:38:34:97:a9:b1:bb:28:a3:
                    ec:22:f4:b1:49:7b:0f:2f:1a:e3:f0:fe:09:43:f2:
                    ec:76:1b:54:68:01:be:30:71:f6:eb:c3:65:14:91:
                    b9:17:c9:b6:46:96:8d:22:15:68:9f:23:e2:1d:bf:
                    a5:6d:7e:09:85:57:1e:89:85:3a:37:ac:0b:fb:7b:
                    5f:5a:90:c1:49:67:12:b7:3c:b5:5a:66:9e:05:1a:
                    59:7c:75:de:9e:9a:b9:53:42:25:7a:f0:c3:21:78:
                    39:d3:c4:19:fc:bd:37:51:34:1b:d9:6b:c3:59:fe:
                    2b:ef:03:70:f0:71:16:92:f4:e2:af:81:68:ce:d2:
                    52:82:da:a3:b0:a6:c9:fb:12:72:b7:fa:53:19:b0:
                    93:1b:88:a0:e7:b9:4e:3a:63:b4:25:eb:4d:8c:9b:
                    ed:04:11:59:b3:cd:bb:fd:ba:ea:a9:e6:9d:af:50:
                    67:ad:38:af:d0:46:56:64:6f:40:44:90:55:ac:10:
                    e4:e2:91:93:d1:00:b6:9c:93:15:12:05:00:1f:12:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:C7:09:B1:19:B5:DB:7B:A0:C6:60:34:7B:B9:AE:E5:BF:6A:3F
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/VuTHCbEZtdt7oMZgNHu5ruW_aj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.93.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:61:e6:2d:52:43:9b:f1:68:d1:a9:8f:43:80:25:7a:b3:a9:
         4e:40:7f:1a:59:6c:75:4f:d7:7e:35:a2:be:12:28:d0:fc:90:
         4f:ee:70:50:9d:be:6f:97:e1:9c:bf:48:b4:8c:d9:40:67:ab:
         e2:f3:0b:81:32:ae:77:2b:ac:01:03:8b:f4:a8:b1:ea:a1:dd:
         03:82:ee:31:07:a6:49:ca:b4:f0:cd:e0:01:97:8b:c9:0f:78:
         76:0a:1e:e4:6f:d4:55:f8:90:78:56:97:a4:6a:90:41:f7:6d:
         b4:47:f5:43:4d:fa:aa:67:72:a9:fc:23:df:9f:ca:36:98:2f:
         71:00:af:73:ca:d0:79:97:d3:18:03:b8:74:df:3d:c8:8d:7f:
         4d:c2:09:93:d5:70:3e:56:18:81:e1:59:e2:96:16:9c:7c:2e:
         1e:3a:ed:5e:df:a7:1f:33:ab:d6:ff:a6:48:f9:6d:35:18:bc:
         0a:f3:08:90:5e:5f:1c:9c:7a:98:d3:81:a5:4f:5b:d4:36:b1:
         71:07:a7:d4:b1:37:4a:f0:b1:a9:37:53:9e:83:f6:b7:50:41:
         f2:42:ad:7a:6d:a8:28:eb:e2:ca:23:b5:8f:de:a9:63:38:3e:
         a1:4a:c8:c3:ce:d0:55:13:77:16:84:f9:3c:98:07:d0:d7:a6:
         14:b7:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org