Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa
File:                     1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa (raw, json)
Hash identifier:          NPO08lVLHiJSXm3V8V/QMhiHIlVTsNNsr4ZjcrlwHmA=
Subject key identifier:   FB:4B:BF:83:E4:56:3B:E8:96:5A:A0:48:DE:85:23:40:1E:6B:17:BC
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0183C070CF174FDE5A6317A7B02F2B2B216B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa
Signing time:             Mon 10 Oct 2022 05:49:22 +0000
ROA not before:           Mon 10 Oct 2022 05:49:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212335
IP address blocks:        45.142.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c0:70:cf:17:4f:de:5a:63:17:a7:b0:2f:2b:2b:21:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Oct 10 05:49:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb4bbf83e4563be8965aa048de8523401e6b17bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:5c:5e:15:ee:48:f3:8c:36:1d:10:98:48:
                    e3:6f:4d:35:ae:5a:5e:52:82:55:d0:f2:35:61:0e:
                    db:c0:10:a8:5e:bd:10:3e:bf:4b:8d:c1:fc:e2:9c:
                    c2:8d:9f:b8:ef:52:ee:c1:7d:19:16:f7:13:64:2a:
                    1a:e4:f1:7d:89:7c:79:f7:3d:61:65:39:e0:33:8a:
                    1a:1f:ef:48:6a:ab:2e:20:a4:af:20:4d:68:77:4c:
                    0c:3e:a6:85:ff:3b:34:b5:ce:b5:c4:de:b0:79:3c:
                    52:ac:8b:5a:77:a9:99:ea:5f:27:67:21:8a:a9:f3:
                    e3:80:de:4f:49:e1:03:60:30:2f:ef:62:b6:f6:06:
                    66:c3:4a:5e:13:98:6f:64:61:2e:d4:50:c8:bd:02:
                    ec:1e:08:14:61:40:99:51:81:40:71:ab:0c:76:1b:
                    c2:23:f7:73:71:41:1b:c4:3c:de:9f:ac:f5:61:08:
                    41:3d:45:e0:7f:21:a4:87:7a:64:d3:f3:2c:6f:80:
                    fa:9e:68:d9:b0:ea:21:65:f2:76:ab:90:c6:e6:e1:
                    8f:62:c1:f3:71:f5:bb:82:fd:68:87:8c:bd:86:0b:
                    d6:f7:f9:76:e5:00:a2:64:6b:27:db:88:96:44:f9:
                    d5:66:3b:ce:c3:01:20:16:9d:f0:fe:c7:d9:f6:2a:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4B:BF:83:E4:56:3B:E8:96:5A:A0:48:DE:85:23:40:1E:6B:17:BC
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-0u_g-RWO-iWWqBI3oUjQB5rF7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:1b:17:5f:83:84:2d:d6:2b:84:53:2e:03:6d:de:cf:df:62:
         76:69:b5:66:ec:a4:49:58:23:1b:a7:a8:3b:9f:d4:53:c8:60:
         97:ba:ec:79:37:e3:af:e5:d8:91:ee:1a:b9:40:cf:c4:0a:39:
         a9:44:45:9c:b3:2f:c1:b1:1e:eb:80:46:56:da:ce:f8:8b:82:
         75:d2:26:0a:c9:6d:db:4e:a5:81:8a:03:ad:13:65:39:72:8a:
         d2:a9:c4:44:e1:2e:b0:4d:59:55:2e:db:64:3b:ef:02:1d:cb:
         46:04:d4:52:4a:f2:a7:34:50:25:93:00:e5:6e:90:a7:73:ad:
         7d:ee:3b:a7:d8:53:17:6f:c6:87:d4:62:c4:47:35:14:91:27:
         9a:9a:52:40:07:a7:2f:f2:95:89:94:5b:01:3c:03:b1:06:f2:
         d4:93:45:e8:94:84:7a:b2:54:66:58:db:19:65:bd:46:e3:c7:
         b9:57:3c:68:fd:08:4d:77:48:89:f1:b0:93:64:c5:2a:cd:f1:
         bf:c2:b8:2f:ac:b4:04:3d:15:d9:91:8e:3d:85:19:dc:b7:82:
         15:09:cc:b8:55:83:69:c3:db:b8:a1:b6:3e:a8:6e:4a:77:fb:
         5a:82:58:6d:c0:66:15:78:a9:0c:b7:51:f9:0b:af:9d:8d:6e:
         ed:11:1b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org