Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa
File:                     6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa (raw, json)
Hash identifier:          aJ7Zk4fgFvZ/HPBpfrVxeBU5dyfrplanROrkY9++h04=
Subject key identifier:   E9:E4:64:3A:32:7F:6C:3D:63:38:B6:04:67:BF:47:34:76:6C:39:FD
Certificate issuer:       /CN=d136b1b31512d94294e20b15238c203c6e3cd9dc
Certificate serial:       081C6F74
Authority key identifier: D1:36:B1:B3:15:12:D9:42:94:E2:0B:15:23:8C:20:3C:6E:3C:D9:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0TaxsxUS2UKU4gsVI4wgPG482dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa
Signing time:             Sat 01 Jan 2022 14:06:59 +0000
ROA not before:           Sat 01 Jan 2022 14:06:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40065
IP address blocks:        45.87.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136081268 (0x81c6f74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d136b1b31512d94294e20b15238c203c6e3cd9dc
        Validity
            Not Before: Jan  1 14:06:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9e4643a327f6c3d6338b60467bf4734766c39fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:7a:12:df:38:66:84:9f:52:b5:3d:42:9f:
                    a0:13:41:1c:8e:1c:67:cc:a8:78:ad:c9:67:ff:f9:
                    14:8b:c2:22:9a:22:ca:6d:25:46:57:87:f3:1a:e1:
                    1f:ad:5b:64:2f:78:dc:f8:b2:c6:91:c6:cb:a0:cf:
                    fb:3d:62:21:49:76:8a:27:2f:89:b5:e0:12:fd:62:
                    4f:76:cb:2c:e6:b7:5b:f8:8b:73:a8:05:a1:2a:07:
                    5b:9b:1c:d6:4a:15:f9:85:06:0d:2f:e1:2e:26:61:
                    b4:e5:e1:1c:6d:5e:a6:e0:3d:8d:c5:2e:14:f1:7d:
                    3b:a3:77:97:24:75:61:e4:e3:69:87:63:16:2c:50:
                    c4:f0:b3:a2:4c:af:46:43:6b:f9:9e:28:05:88:0b:
                    04:ff:9b:37:6a:a5:08:11:60:2f:f1:75:51:46:e6:
                    35:6f:d2:98:7f:8f:32:33:04:a2:43:d1:e0:97:77:
                    64:7e:c3:94:a1:f5:b6:14:6e:c7:72:8f:31:b2:c1:
                    1b:b8:e2:21:f1:ce:e7:15:56:a1:ab:33:8e:bb:3e:
                    cc:d0:02:ee:a3:30:6c:73:04:11:a9:3f:48:38:77:
                    b9:61:cc:62:3b:a9:30:a3:db:95:b8:34:b7:4f:0d:
                    fb:97:9b:c0:0b:65:a0:63:a2:ea:2b:5e:90:7e:07:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:64:3A:32:7F:6C:3D:63:38:B6:04:67:BF:47:34:76:6C:39:FD
            X509v3 Authority Key Identifier:
                keyid:D1:36:B1:B3:15:12:D9:42:94:E2:0B:15:23:8C:20:3C:6E:3C:D9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TaxsxUS2UKU4gsVI4wgPG482dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/6eRkOjJ_bD1jOLYEZ79HNHZsOf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/0TaxsxUS2UKU4gsVI4wgPG482dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:f2:c0:22:30:75:ba:96:0d:0b:82:a1:49:12:61:6d:b7:
         43:dc:1d:bd:71:94:56:7d:91:fd:bc:67:42:63:5b:f8:f4:75:
         ce:84:8a:df:23:16:74:94:a3:5c:35:33:f2:65:f4:90:df:74:
         f5:3f:fd:25:25:f2:5c:3b:a6:d0:95:59:29:07:f9:90:b6:17:
         47:ec:c7:10:81:28:22:62:b5:5f:cb:55:e0:0e:36:b2:4c:50:
         c2:26:da:30:f4:1b:ad:6c:6c:8a:e8:39:78:22:18:a7:e5:c3:
         20:62:e4:b4:81:87:2c:cf:1a:6f:ea:73:2b:eb:a5:ce:0d:9d:
         d3:0f:1d:75:4a:5a:b6:39:e8:a0:cb:38:92:34:7f:85:61:ff:
         5e:12:55:bf:0e:8b:fe:1b:11:09:18:85:a9:ae:69:89:58:ff:
         c4:69:f6:0d:b6:d5:82:15:88:28:1b:98:9d:a9:c3:27:6a:2e:
         84:f7:d0:ef:db:87:c3:31:9b:c9:77:f3:77:d1:dc:a4:54:bf:
         4f:77:02:15:8a:ce:01:e1:9b:93:f5:4a:9c:87:f1:30:31:c6:
         72:70:3d:21:53:7e:d3:9f:1b:9f:db:ca:60:3f:4c:20:1c:32:
         76:54:86:42:ad:7b:b6:e7:26:78:72:83:4b:33:4d:e0:25:6a:
         28:af:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:10 2023 by rpki-client on console-fra.rpki-client.org