Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/nw1REGuZg07wm9yTNnGUk_-qOVI.roa
File:                     nw1REGuZg07wm9yTNnGUk_-qOVI.roa (raw, json)
Hash identifier:          qz6COOvZaP+BpYtlt4jLTQ3/0vFvWR8WO49H76cV+xw=
Subject key identifier:   9F:0D:51:10:6B:99:83:4E:F0:9B:DC:93:36:71:94:93:FF:AA:39:52
Certificate issuer:       /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial:       0183E9739E8EE71751D5FB873D0E4E4A378C
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/nw1REGuZg07wm9yTNnGUk_-qOVI.roa
Signing time:             Tue 18 Oct 2022 04:56:51 +0000
ROA not before:           Tue 18 Oct 2022 04:56:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        45.66.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e9:73:9e:8e:e7:17:51:d5:fb:87:3d:0e:4e:4a:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
        Validity
            Not Before: Oct 18 04:56:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f0d51106b99834ef09bdc9336719493ffaa3952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:0f:dc:6b:69:4b:92:48:5e:21:d5:f8:5f:
                    47:43:a7:41:3f:de:fe:1e:01:bc:90:79:79:13:16:
                    4b:8c:77:b9:27:69:17:63:12:ee:cc:b6:20:12:b4:
                    4a:df:10:3c:96:86:89:8d:b8:b8:32:75:91:44:b5:
                    b7:92:a3:2b:7f:dd:b8:87:42:d6:48:3d:4f:95:37:
                    0c:bb:3e:ea:fe:58:35:06:4e:a3:e8:d6:76:3f:15:
                    f0:14:2d:75:e9:3d:c0:cd:6d:d7:aa:b9:0c:ba:07:
                    10:1a:62:11:68:4c:97:88:c3:8d:9c:05:e6:a6:dc:
                    a7:87:b8:27:11:fb:a7:72:18:3e:c7:24:37:ab:80:
                    ef:57:57:3c:8c:4e:23:55:fe:96:57:43:9f:c9:aa:
                    da:b9:c4:a8:83:9b:03:31:d3:54:59:06:57:da:aa:
                    16:e3:2d:b9:f7:bc:ef:f0:79:bb:b3:d3:a2:88:57:
                    e5:8d:28:5c:df:fa:6c:ef:ee:42:59:92:77:69:17:
                    2c:4b:0a:3b:c7:23:de:6b:8b:d1:d0:b8:ff:8f:f4:
                    4f:61:c7:a2:ef:3a:ff:27:5b:ca:0e:87:82:99:f8:
                    a2:52:4e:80:4d:57:1a:29:26:6c:c3:1d:c5:50:3b:
                    cd:ee:31:62:1b:f3:1d:c1:0d:5f:d8:52:c2:0f:bb:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:51:10:6B:99:83:4E:F0:9B:DC:93:36:71:94:93:FF:AA:39:52
            X509v3 Authority Key Identifier:
                keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/nw1REGuZg07wm9yTNnGUk_-qOVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a3:f4:53:af:24:cb:dc:ac:ae:58:86:26:91:e1:0a:4f:12:
         e6:c6:6b:0b:f7:8c:86:2c:e2:27:c5:b3:5c:d2:cc:6c:98:40:
         42:0e:14:6b:ce:4b:12:3d:39:bf:6c:8d:93:36:9c:77:98:9c:
         60:d1:a2:39:22:bb:f5:8e:bb:05:a8:f4:e7:81:de:82:c4:3d:
         1b:cc:73:9b:88:c8:c0:17:a1:bc:ec:59:01:1e:88:fc:c9:76:
         cd:b5:5c:47:0f:9c:f4:2b:ba:88:12:7b:d3:5d:2f:f2:c9:f0:
         83:c3:bb:58:dd:09:07:18:60:09:53:0e:7d:4b:e8:82:1a:77:
         6d:aa:8a:81:ae:61:6f:90:32:4b:40:7b:0b:b7:87:91:b1:28:
         2e:d3:5c:f2:a5:43:13:74:5a:59:b2:39:b5:cf:a8:70:ec:7e:
         cf:94:54:0d:47:bc:d9:24:f3:04:7a:be:97:29:18:2d:8a:c2:
         13:da:9f:a8:00:92:48:84:da:11:a4:60:3a:fd:c2:b8:ed:1e:
         15:95:31:c5:e6:f8:44:a2:a2:49:1a:75:55:94:f9:be:32:88:
         64:4f:72:14:46:37:bf:9e:a6:0c:ed:6f:63:05:ee:7b:ae:b3:
         32:dd:45:84:62:98:d1:0d:26:a4:80:d7:8f:56:73:c0:ba:32:
         86:b6:a5:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPpc56O5xdR1fuHPQ5OSjeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNWQ3YzRkNTRlNGNkNWNkZGE4NzhjN2JiN2M2MTk2NGEz
MDI0NGYwHhcNMjIxMDE4MDQ1NjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjBkNTExMDZiOTk4MzRlZjA5YmRjOTMzNjcxOTQ5M2ZmYWEzOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgMP3GtpS5JIXiHV+F9HQ6dBP97+
HgG8kHl5ExZLjHe5J2kXYxLuzLYgErRK3xA8loaJjbi4MnWRRLW3kqMrf924h0LW
SD1PlTcMuz7q/lg1Bk6j6NZ2PxXwFC116T3AzW3XqrkMugcQGmIRaEyXiMONnAXm
ptynh7gnEfunchg+xyQ3q4DvV1c8jE4jVf6WV0OfyaraucSog5sDMdNUWQZX2qoW
4y2597zv8Hm7s9OiiFfljShc3/ps7+5CWZJ3aRcsSwo7xyPea4vR0Lj/j/RPYcei
7zr/J1vKDoeCmfiiUk6ATVcaKSZswx3FUDvN7jFiG/MdwQ1f2FLCD7vw1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8NURBrmYNO8JvckzZxlJP/qjlSMB8GA1UdIwQY
MBaAFG1dfE1U5M1c3ah4x7t8YZZKMCRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjIt
NTJmZmQ0MDk5OTczLzEvbncxUkVHdVpnMDd3bTl5VE5uR1VrXy1xT1ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YjY5ZWEtNWQ5YS00OWUxLWJhYjItNTJmZmQ0MDk5OTcz
LzEvYlYxOFRWVGt6VnpkcUhqSHUzeGhsa293SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALULnMA0G
CSqGSIb3DQEBCwUAA4IBAQBuo/RTryTL3KyuWIYmkeEKTxLmxmsL94yGLOInxbNc
0sxsmEBCDhRrzksSPTm/bI2TNpx3mJxg0aI5Irv1jrsFqPTngd6CxD0bzHObiMjA
F6G87FkBHoj8yXbNtVxHD5z0K7qIEnvTXS/yyfCDw7tY3QkHGGAJUw59S+iCGndt
qoqBrmFvkDJLQHsLt4eRsSgu01zypUMTdFpZsjm1z6hw7H7PlFQNR7zZJPMEer6X
KRgtisIT2p+oAJJIhNoRpGA6/cK47R4VlTHF5vhEoqJJGnVVlPm+MohkT3IURje/
nqYM7W9jBe57rrMy3UWEYpjRDSakgNePVnPAujKGtqXv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org