Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/c80_QwqzXxyF3hQ0-hk6RtrzuxA.roa
File:                     c80_QwqzXxyF3hQ0-hk6RtrzuxA.roa (raw, json)
Hash identifier:          F1+obYKU9MRNpdYxqz8Yj8nzQzsm7XeH7gMvmFQPEi8=
Subject key identifier:   73:CD:3F:43:0A:B3:5F:1C:85:DE:14:34:FA:19:3A:46:DA:F3:BB:10
Certificate issuer:       /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial:       0182E9B2CF8F97F131FAD68759BBCF942A8C
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/c80_QwqzXxyF3hQ0-hk6RtrzuxA.roa
Signing time:             Mon 29 Aug 2022 13:03:05 +0000
ROA not before:           Mon 29 Aug 2022 13:03:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.66.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e9:b2:cf:8f:97:f1:31:fa:d6:87:59:bb:cf:94:2a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
        Validity
            Not Before: Aug 29 13:03:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73cd3f430ab35f1c85de1434fa193a46daf3bb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:cd:80:5a:16:39:c3:08:3b:60:4b:5a:9e:
                    3a:ec:8d:74:bb:7e:ba:64:31:dd:9b:22:43:f6:84:
                    57:ec:d4:81:92:2a:aa:1f:f5:e2:ef:b1:17:60:cc:
                    c6:97:6e:b5:e2:1d:01:03:44:43:43:f2:b4:bf:99:
                    6e:8a:f8:df:16:1e:ea:00:8a:3b:0e:0a:9e:fe:2f:
                    31:9d:33:20:1e:9a:6a:10:2d:05:39:fe:ab:b8:c0:
                    64:18:35:6b:20:d7:d0:e6:cd:4e:4c:8e:32:f2:4d:
                    91:04:c0:2f:01:d9:ba:02:15:9d:f8:43:bc:c7:90:
                    c6:93:24:53:87:3f:6f:fd:5f:34:4f:41:a8:a7:37:
                    6e:cf:84:fb:96:b3:5e:70:cf:0a:5c:3e:3c:91:26:
                    5c:08:52:1f:28:71:f3:fc:88:16:a5:4a:14:cd:ec:
                    cf:ee:1f:2d:cc:84:30:77:fe:28:b3:9c:08:6b:16:
                    a1:e2:30:28:6a:38:ed:ba:37:c4:1d:a1:e5:f4:d5:
                    a4:c2:f9:ee:0c:e9:bd:6b:32:55:3f:17:d8:29:6f:
                    e7:63:44:d4:1d:db:42:e3:b7:7c:5d:cf:df:56:20:
                    45:d2:7c:60:6b:1a:f1:5a:39:b4:76:43:d9:ad:2b:
                    db:6e:58:ff:ac:f2:d0:95:c6:7a:2a:47:b2:d5:23:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:3F:43:0A:B3:5F:1C:85:DE:14:34:FA:19:3A:46:DA:F3:BB:10
            X509v3 Authority Key Identifier:
                keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/c80_QwqzXxyF3hQ0-hk6RtrzuxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:b8:5d:03:fc:b3:86:1f:8e:26:0c:dd:65:02:32:67:d6:
         d4:94:8c:91:4c:cf:6d:9f:32:70:4f:86:e4:20:35:8e:d4:7e:
         a1:4b:ef:19:1f:2c:67:32:6d:17:df:25:2d:16:1d:75:2f:ca:
         cf:da:b7:15:a8:63:30:ab:5b:26:b6:b1:6e:f7:7b:5f:7b:ba:
         d5:a7:e6:db:5d:77:94:c0:26:e7:ad:f7:ed:05:fd:4e:46:dc:
         b7:01:59:cc:3c:a5:07:2b:f5:e1:05:a3:f8:8c:77:c2:60:13:
         68:18:f7:14:42:32:a8:18:f8:86:09:22:71:b7:65:8f:f0:22:
         27:4d:4d:f8:cb:ac:92:5f:56:50:c4:a8:5b:72:8e:0a:f0:aa:
         52:2c:1d:85:17:1c:2f:c2:ee:25:83:09:dc:9d:bf:fe:54:ab:
         89:4d:96:01:74:76:68:75:ab:1a:60:8e:7a:40:5a:97:52:6b:
         72:f8:54:4e:8d:33:91:0b:7b:e7:48:f8:e7:d5:6e:55:1f:67:
         b2:0a:a3:1c:22:a4:0f:19:1b:43:c3:96:ed:6d:ca:89:ec:20:
         a7:47:8d:38:10:a0:84:ba:6a:27:c0:03:13:e0:d6:c4:95:82:
         0c:4e:f9:60:62:b5:5a:6f:73:98:a8:d9:31:2c:45:dc:c4:45:
         cd:ce:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org