Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8m-F2bGFlnelR2XU4jOgtG9K8mk.roa
File:                     8m-F2bGFlnelR2XU4jOgtG9K8mk.roa (raw, json)
Hash identifier:          18sP4dMV8mZPKpr8LtF6zzrBPftRCpgQOdTKOU9v9tk=
Subject key identifier:   F2:6F:85:D9:B1:85:96:77:A5:47:65:D4:E2:33:A0:B4:6F:4A:F2:69
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0181ED55CC2A47FE591D0DD57CCA94D0AF66
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8m-F2bGFlnelR2XU4jOgtG9K8mk.roa
Signing time:             Mon 11 Jul 2022 12:57:11 +0000
ROA not before:           Mon 11 Jul 2022 12:57:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204115
IP address blocks:        45.146.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ed:55:cc:2a:47:fe:59:1d:0d:d5:7c:ca:94:d0:af:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jul 11 12:57:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f26f85d9b1859677a54765d4e233a0b46f4af269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ce:a3:53:fd:c8:2c:d8:b1:3e:96:30:b8:24:
                    32:ee:33:36:6c:1f:e3:40:a1:43:47:03:cd:21:72:
                    6e:6b:b5:de:ed:cd:d5:41:cf:d5:aa:f9:18:d5:ae:
                    22:77:61:05:12:c3:38:76:67:8c:31:be:a6:c3:80:
                    56:65:5d:12:3e:c5:02:1b:d0:1c:22:e6:e5:a6:93:
                    92:a9:43:93:85:f8:fc:3e:73:d8:5f:15:e5:f3:20:
                    6d:93:67:4e:40:da:2b:33:69:ca:a0:92:1c:4b:d4:
                    c0:4d:ed:03:c7:fa:97:9a:fe:ae:95:87:74:97:d5:
                    65:0b:c6:6e:46:26:76:6b:db:82:80:db:9e:49:b8:
                    da:01:96:e7:b4:f4:2e:44:db:87:87:09:bd:4a:cb:
                    e6:b9:d7:98:35:5d:3f:b2:e1:73:d6:49:1f:bf:18:
                    87:49:37:df:c4:0c:4b:e9:52:97:f9:d7:91:48:59:
                    01:73:2d:a9:a4:41:0f:e9:55:3e:ab:6f:c9:e8:b5:
                    70:09:aa:82:d7:c6:4c:d1:a6:32:b6:02:d7:73:50:
                    2c:50:cc:65:fa:a8:5c:92:69:a5:ca:e8:de:59:51:
                    a2:ce:ef:b3:6e:63:59:9b:c3:05:95:3f:e8:d4:20:
                    c3:ac:4c:4a:de:14:02:5b:bd:f8:73:fe:23:fc:91:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:85:D9:B1:85:96:77:A5:47:65:D4:E2:33:A0:B4:6F:4A:F2:69
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8m-F2bGFlnelR2XU4jOgtG9K8mk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:51:2e:91:28:7a:99:aa:50:29:cc:be:fd:fd:c1:ff:75:70:
         dd:ba:da:f9:8d:26:67:fc:dc:4b:c7:43:9c:57:01:21:31:68:
         0f:dd:31:35:49:8e:fa:da:46:96:5c:74:83:b4:f9:d3:0e:30:
         09:92:9d:e2:2e:41:33:d3:04:67:47:51:c0:d8:35:67:17:d8:
         bf:b0:8a:76:d9:df:86:83:57:87:44:00:da:78:af:5a:62:ce:
         f0:ee:1d:b1:e5:7e:73:e4:20:31:a7:3e:07:bb:f1:a2:5f:e0:
         70:c9:96:a2:72:a3:8a:39:c8:5f:98:28:d9:54:e0:f9:0b:96:
         ed:03:cf:34:ba:f1:6d:62:c1:10:b0:2c:19:25:b4:25:c2:47:
         3f:89:08:b1:ac:26:3e:af:37:6a:c9:aa:f2:35:1c:5e:29:48:
         1c:3b:f2:76:59:b5:6a:dc:05:9a:36:3d:4f:33:b7:51:71:7c:
         0c:59:01:0a:86:7a:51:57:31:7b:12:b7:11:1c:66:f5:cf:33:
         9a:e2:61:f1:c2:89:a5:94:87:a4:ce:9b:5e:28:38:9d:0e:ed:
         58:68:16:f9:92:5f:7b:7f:53:b7:a9:58:c5:dd:e2:56:2e:c0:
         ef:1c:9d:41:f0:a3:e3:06:91:07:3e:1c:5a:07:6d:1c:47:00:
         1a:2e:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org