Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/4hTl8tkJ7D_yhWKlRFlTr9GVOfY.roa
File:                     4hTl8tkJ7D_yhWKlRFlTr9GVOfY.roa (raw, json)
Hash identifier:          48gv19EGo74H5u/ocY7R4rvKSF8ZCfbkUro7hn659J8=
Subject key identifier:   E2:14:E5:F2:D9:09:EC:3F:F2:85:62:A5:44:59:53:AF:D1:95:39:F6
Certificate issuer:       /CN=84808b8234181ff48d3210ddfc87090ed67d02bf
Certificate serial:       0616F729
Authority key identifier: 84:80:8B:82:34:18:1F:F4:8D:32:10:DD:FC:87:09:0E:D6:7D:02:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/4hTl8tkJ7D_yhWKlRFlTr9GVOfY.roa
Signing time:             Sat 01 Jan 2022 10:05:29 +0000
ROA not before:           Sat 01 Jan 2022 10:05:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57335
IP address blocks:        45.146.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102168361 (0x616f729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84808b8234181ff48d3210ddfc87090ed67d02bf
        Validity
            Not Before: Jan  1 10:05:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e214e5f2d909ec3ff28562a5445953afd19539f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b6:85:1b:48:d6:83:eb:e1:16:9b:f5:9e:b3:
                    c3:da:69:0b:05:23:4e:52:bb:93:b2:f0:a4:35:7e:
                    ff:08:0e:03:3a:f0:d6:91:4b:99:31:b0:4d:cc:3d:
                    4d:2e:a8:10:e7:9d:66:7e:ef:72:3a:4d:6b:31:85:
                    4f:d7:ad:f9:b7:91:ea:f2:68:1c:c6:c5:a0:1e:f3:
                    84:fc:ac:7b:3d:b4:ad:65:87:19:e8:8f:17:c2:9c:
                    7b:c8:84:75:b5:6f:2c:1a:21:ab:ad:ff:9b:9f:31:
                    d5:a8:2a:6b:35:86:23:ff:7a:31:e3:1c:11:c2:6e:
                    ca:52:a9:28:2c:19:3c:66:04:1e:24:06:c1:bd:30:
                    60:d7:7f:19:1f:59:1a:c1:8f:98:1a:dd:8c:07:d5:
                    0a:17:b2:6c:29:36:12:33:d4:a4:cc:a0:b1:1f:9e:
                    67:e7:f8:9d:63:36:86:cf:f7:c0:de:67:bc:d0:49:
                    28:58:62:02:92:76:d2:50:d4:b2:c9:22:e1:eb:f9:
                    45:ff:8e:57:27:df:b2:77:ac:8b:a1:03:6c:92:31:
                    0a:33:06:9e:ef:24:f1:b4:42:5a:de:63:21:99:7f:
                    cc:95:51:64:76:67:9c:2e:32:d3:4e:23:84:ba:b6:
                    68:1d:68:aa:85:2f:8e:b5:9c:39:2c:8a:17:6e:1c:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:14:E5:F2:D9:09:EC:3F:F2:85:62:A5:44:59:53:AF:D1:95:39:F6
            X509v3 Authority Key Identifier:
                keyid:84:80:8B:82:34:18:1F:F4:8D:32:10:DD:FC:87:09:0E:D6:7D:02:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/4hTl8tkJ7D_yhWKlRFlTr9GVOfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:46:19:5f:d7:f2:ad:6f:a5:62:ba:13:f1:af:78:b6:cf:
         b6:53:5b:f2:10:05:99:9c:44:2b:cb:a5:7a:a4:38:8c:47:c7:
         31:7b:9c:64:43:7a:dc:70:a7:19:9c:36:4a:4f:b7:0b:64:bc:
         f9:53:5b:f3:51:1d:75:ca:39:e1:ac:56:fb:51:d6:fa:5e:8e:
         19:ef:d2:af:a0:e9:85:a5:e9:a9:12:46:a1:7c:72:2b:4b:07:
         1f:c0:fb:0e:ce:a0:2c:94:75:80:a5:1a:6d:f9:e5:ba:ea:ea:
         94:7b:42:2f:ec:10:83:53:3e:8d:57:51:40:aa:72:57:87:d7:
         7c:53:e4:1f:13:c5:ca:93:31:1e:1e:80:7c:01:26:26:8f:4c:
         ff:99:47:bb:26:6b:c5:6e:06:f4:d6:84:23:ce:df:31:b3:fa:
         bd:d0:01:f9:71:34:92:a8:c8:c4:0a:e2:ee:23:72:cf:ee:51:
         91:c9:96:d5:8b:7b:e8:87:c9:95:d7:11:58:8b:26:cd:45:f6:
         e6:5b:72:d8:65:f5:3f:08:57:ce:b9:62:36:21:40:19:dc:0d:
         ff:a3:04:e0:11:ce:2d:d9:03:bd:f7:74:77:b8:71:f5:79:82:
         a8:80:1f:1a:c0:ba:57:4e:2d:5b:84:b0:90:a6:7c:ba:0c:9c:
         06:1c:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org