Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/kQxRJQlhpL4WF3LTUF95dTRofX8.roa
File:                     kQxRJQlhpL4WF3LTUF95dTRofX8.roa (raw, json)
Hash identifier:          eKuHcAoP1XGklXCEx7Kb5TUjtw5kU4ZJ+0RBrQTs+zg=
Subject key identifier:   91:0C:51:25:09:61:A4:BE:16:17:72:D3:50:5F:79:75:34:68:7D:7F
Certificate issuer:       /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial:       060B7A65
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/kQxRJQlhpL4WF3LTUF95dTRofX8.roa
Signing time:             Fri 17 Jun 2022 08:02:44 +0000
ROA not before:           Fri 17 Jun 2022 08:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43043
IP address blocks:        45.154.4.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101415525 (0x60b7a65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
        Validity
            Not Before: Jun 17 08:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=910c51250961a4be161772d3505f797534687d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:aa:a0:a2:50:8b:1e:4d:05:33:c4:36:e2:
                    75:63:12:79:cf:5d:8d:86:64:c5:bb:8d:1d:6f:49:
                    65:6f:d4:d0:bd:5e:c3:65:72:22:df:96:fe:91:d1:
                    2f:94:90:0f:b9:a1:c9:31:33:8d:e0:82:b2:08:08:
                    0b:72:f6:90:8f:69:c6:bb:14:2b:79:d0:15:3d:49:
                    b5:d5:27:4c:14:e7:e1:d1:8e:6e:17:49:5e:d7:c1:
                    83:c1:57:f0:f9:f8:d7:0a:ad:33:25:51:6f:89:1d:
                    6d:15:5f:c3:86:7c:5c:27:45:ff:4a:4b:92:93:5f:
                    be:a8:fa:a2:ac:a5:6e:07:62:32:08:1e:ba:58:48:
                    9a:ff:de:14:33:31:6a:18:9c:b9:ea:4f:06:2e:27:
                    6d:8d:27:a9:87:eb:d9:0f:ad:3f:3f:50:3c:c4:38:
                    50:1f:55:a2:d0:ef:be:3c:3c:ac:b2:94:53:d6:59:
                    a5:35:1e:ff:85:f8:62:4a:69:a0:7e:eb:d3:3b:b6:
                    bf:dc:00:8f:88:60:bb:2b:59:06:a3:64:b0:ca:59:
                    02:b2:47:7a:3d:1a:64:5e:65:d9:1c:e2:16:f4:cf:
                    25:a4:e9:9d:4b:9a:6a:51:d0:74:77:1f:4e:6a:0a:
                    5a:7a:8d:ee:dc:09:6a:ae:53:2d:2b:85:8f:3e:c9:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0C:51:25:09:61:A4:BE:16:17:72:D3:50:5F:79:75:34:68:7D:7F
            X509v3 Authority Key Identifier:
                keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/kQxRJQlhpL4WF3LTUF95dTRofX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:38:95:d7:3e:9e:fd:19:7e:99:e3:89:ef:1f:98:fb:e0:4f:
         92:df:2d:4a:d4:f0:26:b0:85:8c:91:66:66:ae:dc:f7:ec:5c:
         d4:ce:71:9b:03:71:a3:61:24:de:7c:4b:8b:15:e9:82:09:83:
         f6:7f:d0:34:64:1a:07:80:f5:7e:6e:f0:fb:5b:05:d1:89:a4:
         31:43:5d:3b:4f:fc:c4:64:cd:8a:04:15:a9:a8:36:74:8c:89:
         07:80:dd:37:e4:26:1d:51:7b:11:22:ab:35:4b:0c:fb:77:95:
         dd:3d:f5:f2:50:cc:4b:50:df:16:06:cd:93:c6:a1:a3:32:fa:
         32:f0:01:d9:a9:84:48:5b:c8:e5:46:98:98:ac:18:9f:7c:bf:
         84:af:25:5c:4e:35:97:c0:fd:10:c8:ce:3c:ed:d8:48:1d:9a:
         85:1b:26:80:23:4e:7e:a1:8e:91:e5:e5:15:98:cc:1d:b5:20:
         62:99:1d:2c:39:00:4d:f1:34:83:42:7e:9b:09:f8:25:b8:8d:
         fa:ee:70:ba:58:ab:ae:c0:aa:7c:38:fc:8d:6c:41:9d:b8:e9:
         11:fa:31:61:3f:e2:06:f2:19:5a:26:8a:89:fc:be:32:37:15:
         24:e9:b8:2f:d9:c8:cd:b6:26:40:95:44:a9:87:8b:14:65:06:
         a0:6a:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org