Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FrHpZe2E3yQDjVWAK9LSompaxIU.roa
File:                     FrHpZe2E3yQDjVWAK9LSompaxIU.roa (raw, json)
Hash identifier:          jW5hyIlyoJabu9j4TJeU3pLj9MNwdjwYvh0kazKqeB8=
Subject key identifier:   16:B1:E9:65:ED:84:DF:24:03:8D:55:80:2B:D2:D2:A2:6A:5A:C4:85
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0182C7452CFADB2518D3ECA827B76B0F864C
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FrHpZe2E3yQDjVWAK9LSompaxIU.roa
Signing time:             Mon 22 Aug 2022 20:36:15 +0000
ROA not before:           Mon 22 Aug 2022 20:36:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        45.80.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c7:45:2c:fa:db:25:18:d3:ec:a8:27:b7:6b:0f:86:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Aug 22 20:36:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16b1e965ed84df24038d55802bd2d2a26a5ac485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:40:6f:bf:44:86:eb:df:0b:bc:61:19:dd:
                    02:fc:fb:1f:be:1a:04:39:38:68:4e:e2:27:32:35:
                    52:8f:1b:9b:33:a2:5c:3a:bc:71:fe:15:6a:4a:a3:
                    07:55:09:8e:81:68:26:63:0a:dd:e8:8d:36:e2:cc:
                    fb:52:82:77:e5:34:d6:fc:78:02:37:be:ac:18:dd:
                    48:a9:89:43:40:c3:39:1e:f8:c7:0e:aa:9f:2e:dc:
                    1a:d3:e0:2c:93:65:9a:d6:ec:3c:77:28:6c:ff:20:
                    a0:84:85:af:0c:1d:01:e7:57:84:8f:0a:c8:53:9e:
                    ff:f3:e4:9f:c2:8e:d4:0b:95:27:00:6c:73:19:77:
                    2c:cb:24:c3:83:32:f1:e3:88:56:a4:63:62:29:4a:
                    dd:bf:51:21:22:45:c2:9d:01:79:1e:b1:cd:7b:2d:
                    08:e6:a1:a1:ab:2f:a6:e0:cb:b1:3a:7a:db:22:0c:
                    8d:6e:d8:1a:7d:32:36:33:46:f4:ab:8e:26:c3:86:
                    1a:cf:1f:1e:8b:d9:98:15:bc:97:5a:32:28:69:91:
                    74:8a:c0:d9:ef:01:49:49:e4:b0:c9:99:f9:88:ef:
                    62:74:c2:2e:8b:dc:3f:d2:30:b5:46:05:87:53:ca:
                    83:54:41:3d:35:69:79:d6:3f:d4:b5:de:e6:9a:fd:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B1:E9:65:ED:84:DF:24:03:8D:55:80:2B:D2:D2:A2:6A:5A:C4:85
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FrHpZe2E3yQDjVWAK9LSompaxIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:02:7c:87:b7:e0:91:95:48:45:2c:27:8b:c6:c1:18:fd:40:
         e2:18:74:f5:31:ca:1d:77:36:e3:83:f2:82:ce:77:5b:ba:68:
         23:44:8b:ed:79:f6:95:a3:f6:d7:69:00:20:8b:9f:61:f4:db:
         5a:9f:70:c4:86:80:d2:8c:b9:59:d9:d0:ec:1b:c5:74:99:d3:
         7c:cf:3b:5d:fe:5e:b5:25:3c:78:1d:b7:24:87:98:f9:cb:c0:
         a2:fa:18:9e:15:a1:fd:1e:0c:7f:e7:1b:ae:f2:46:a7:bb:36:
         8b:cb:c1:01:cb:0e:c8:d0:d4:54:ef:b5:97:09:9a:32:96:08:
         25:61:68:aa:b9:58:94:0a:a1:22:50:8a:d8:b6:37:98:33:11:
         b4:0e:d8:2e:2d:ac:5e:82:96:06:c6:9a:b7:86:01:f6:f4:9d:
         32:ab:92:c8:2a:5a:95:cf:c5:7b:0b:03:8a:7c:ad:1b:d5:0f:
         3d:9f:7d:ff:5c:58:01:6e:1e:a2:54:f6:b6:92:c5:74:06:40:
         00:9b:41:49:55:31:ef:99:c0:e9:c9:c9:e6:d2:9d:3f:93:ad:
         0b:b2:49:63:fc:b4:76:18:61:ae:3a:77:a2:aa:9c:b6:1c:cf:
         87:63:af:e4:3c:3e:d3:d2:8c:c7:6f:5a:f4:88:ff:a4:17:b5:
         c2:ee:4d:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLHRSz62yUY0+yoJ7drD4ZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIwODIyMjAzNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmIxZTk2NWVkODRkZjI0MDM4ZDU1ODAyYmQyZDJhMjZhNWFjNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRJAb79EhuvfC7xhGd0C/PsfvhoE
OThoTuInMjVSjxubM6JcOrxx/hVqSqMHVQmOgWgmYwrd6I024sz7UoJ35TTW/HgC
N76sGN1IqYlDQMM5HvjHDqqfLtwa0+Ask2Wa1uw8dyhs/yCghIWvDB0B51eEjwrI
U57/8+Sfwo7UC5UnAGxzGXcsyyTDgzLx44hWpGNiKUrdv1EhIkXCnQF5HrHNey0I
5qGhqy+m4MuxOnrbIgyNbtgafTI2M0b0q44mw4Yazx8ei9mYFbyXWjIoaZF0isDZ
7wFJSeSwyZn5iO9idMIui9w/0jC1RgWHU8qDVEE9NWl51j/Utd7mmv0irQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBax6WXthN8kA41VgCvS0qJqWsSFMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvRnJIcFplMkUzeVFEalZXQUs5TFNvbXBheElVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVAHMA0G
CSqGSIb3DQEBCwUAA4IBAQCUAnyHt+CRlUhFLCeLxsEY/UDiGHT1Mcoddzbjg/KC
zndbumgjRIvtefaVo/bXaQAgi59h9Ntan3DEhoDSjLlZ2dDsG8V0mdN8zztd/l61
JTx4Hbckh5j5y8Ci+hieFaH9Hgx/5xuu8kanuzaLy8EByw7I0NRU77WXCZoylggl
YWiquViUCqEiUIrYtjeYMxG0DtguLaxegpYGxpq3hgH29J0yq5LIKlqVz8V7CwOK
fK0b1Q89n33/XFgBbh6iVPa2ksV0BkAAm0FJVTHvmcDpycnm0p0/k60Lsklj/LR2
GGGuOneiqpy2HM+HY6/kPD7T0ozHb1r0iP+kF7XC7k3j
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org