Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/FdMUSKWmVUkymwkbOOlti2kDFqA.roa
File:                     FdMUSKWmVUkymwkbOOlti2kDFqA.roa (raw, json)
Hash identifier:          +ClDDR97IaVisSZjWOGgyZAMz0x7wbGa2lZR3FtTPjs=
Subject key identifier:   15:D3:14:48:A5:A6:55:49:32:9B:09:1B:38:E9:6D:8B:69:03:16:A0
Certificate issuer:       /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial:       0184CC989FCD78FA268D84FFC6A35FEFD469
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/FdMUSKWmVUkymwkbOOlti2kDFqA.roa
Signing time:             Thu 01 Dec 2022 07:31:05 +0000
ROA not before:           Thu 01 Dec 2022 07:31:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50225
IP address blocks:        45.84.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cc:98:9f:cd:78:fa:26:8d:84:ff:c6:a3:5f:ef:d4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
        Validity
            Not Before: Dec  1 07:31:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15d31448a5a65549329b091b38e96d8b690316a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:08:7a:7a:53:ea:59:fb:c0:61:5b:8a:0b:
                    ae:32:51:fc:94:c1:2c:ae:98:4f:4e:f0:7b:a7:88:
                    9d:21:70:c2:00:f8:a7:8e:53:86:43:cd:d5:06:0a:
                    d7:36:f9:5f:75:44:26:38:8f:68:7d:5c:61:86:62:
                    c7:07:92:12:d2:07:5d:5e:28:a5:4c:ef:6c:b5:65:
                    35:09:c2:fc:b6:84:15:83:9b:5f:eb:86:6d:b5:bb:
                    9e:1c:ed:7e:e0:57:4d:6b:72:37:66:c8:b0:08:e6:
                    63:06:b0:70:91:57:d7:59:6f:4b:fa:db:aa:0f:c3:
                    67:c2:44:05:78:85:ae:4f:90:bc:03:8d:e8:5a:75:
                    1a:21:3f:0e:c5:76:f4:81:7e:1b:f5:98:d2:bd:12:
                    f5:1e:5b:a0:2d:5a:0e:87:13:94:a4:83:99:6d:85:
                    ed:b1:78:89:d6:0d:9a:12:20:48:0d:f3:c4:8f:42:
                    77:b4:2d:72:2e:7b:68:e1:54:a8:35:c0:a7:77:5a:
                    db:37:fd:f0:c5:48:60:c3:d5:35:d0:bf:05:31:62:
                    b6:bc:b8:e3:ec:76:8f:a7:8a:9a:7f:23:26:ca:9f:
                    55:2d:1d:e2:f9:f3:6f:05:34:9e:6e:fb:58:91:79:
                    4b:05:01:a8:ea:eb:b7:8f:e0:c4:d6:37:48:04:99:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D3:14:48:A5:A6:55:49:32:9B:09:1B:38:E9:6D:8B:69:03:16:A0
            X509v3 Authority Key Identifier:
                keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/FdMUSKWmVUkymwkbOOlti2kDFqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:6f:ce:14:73:de:cf:7c:3c:5f:3d:ca:12:3d:c8:fb:c3:
         10:8e:2d:7d:88:27:e3:5e:c1:ea:e8:60:af:05:9d:b7:4a:32:
         8f:35:13:d0:b3:c5:69:b8:cd:58:3a:3b:94:45:e9:6b:da:b4:
         19:df:f5:d7:d4:71:1d:ba:be:cf:8b:2c:1e:23:79:4d:f2:4b:
         ba:4a:61:2b:f2:7b:b3:8c:d1:6d:3c:4b:cf:24:d2:0c:61:bc:
         a2:9c:50:b4:10:16:43:b3:4d:16:32:97:c1:a9:a8:be:4a:e6:
         e3:f0:c5:52:6d:a7:2c:62:a1:51:55:45:11:52:e9:29:23:bf:
         bf:86:00:55:45:79:00:e1:dd:33:6e:b2:d7:77:48:11:cb:19:
         96:eb:80:fa:74:ee:e3:8a:c7:c7:c4:98:a3:51:25:b3:ce:d6:
         b2:6b:4b:7e:0e:c5:65:96:b4:23:3d:b5:6d:fb:a0:3f:3f:73:
         18:93:15:c8:67:44:c3:53:c0:d9:49:25:3b:44:e0:25:e8:df:
         2b:4f:3a:8e:d3:b0:34:6b:9d:20:4f:a7:02:27:19:06:94:80:
         6a:cf:5a:1c:93:84:a2:ae:4e:39:24:18:9a:0a:a8:4f:c2:c2:
         bb:83:6a:b6:be:20:78:cf:3a:a7:0f:4c:cc:be:51:e1:86:7e:
         f3:3c:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-fra.rpki-client.org