Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/lELiFczPNbwTYzdq6m9FfjLCFU0.roa
File:                     lELiFczPNbwTYzdq6m9FfjLCFU0.roa (raw, json)
Hash identifier:          uim5rZR00wklciNSoGpPr8NHGS/NhnzwCMl1rMfcafU=
Subject key identifier:   94:42:E2:15:CC:CF:35:BC:13:63:37:6A:EA:6F:45:7E:32:C2:15:4D
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       018456C640521375C682CF1E9E5283903EC2
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/lELiFczPNbwTYzdq6m9FfjLCFU0.roa
Signing time:             Tue 08 Nov 2022 10:25:43 +0000
ROA not before:           Tue 08 Nov 2022 10:25:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        195.178.110.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:56:c6:40:52:13:75:c6:82:cf:1e:9e:52:83:90:3e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Nov  8 10:25:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9442e215cccf35bc1363376aea6f457e32c2154d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:9d:83:cb:40:b0:94:7b:fc:be:24:97:be:
                    dd:23:7b:84:fc:71:39:51:ef:8b:92:b5:56:f9:20:
                    35:1e:71:e2:f7:bc:98:3b:18:10:b5:d4:93:77:8a:
                    be:f0:f7:25:bb:09:fe:90:97:7a:14:ba:a1:02:4d:
                    ee:77:13:8f:9c:65:f1:da:be:40:8e:67:da:c5:be:
                    b7:99:52:79:b1:12:6b:d8:f7:f9:ae:6a:64:de:c5:
                    f8:48:b5:4e:19:4a:32:0d:97:b2:b1:b1:0c:df:a0:
                    b0:55:f8:45:5d:72:ba:17:fd:a2:2c:80:7e:86:7f:
                    6e:11:e7:28:42:6b:c9:a5:c0:22:43:70:43:55:10:
                    6b:e6:3d:89:4b:43:45:7f:d4:44:3c:f8:3d:42:56:
                    64:98:08:cc:34:a5:b0:90:42:0b:7d:8b:a7:69:59:
                    00:1f:94:17:74:8e:40:5e:4d:fa:5e:95:99:c5:c8:
                    4b:9f:b4:29:fc:6a:ac:54:96:01:0d:73:77:4e:de:
                    69:71:3a:95:60:32:fd:60:6a:61:2d:aa:45:79:98:
                    54:42:70:c0:8d:2a:36:3a:e2:75:fd:fa:2b:de:e8:
                    db:1f:35:6f:5c:e1:bb:4a:36:ac:ef:6f:46:c4:04:
                    b0:b8:37:6f:2f:9e:1a:d1:1e:37:8e:af:9b:38:35:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:E2:15:CC:CF:35:BC:13:63:37:6A:EA:6F:45:7E:32:C2:15:4D
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/lELiFczPNbwTYzdq6m9FfjLCFU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:c1:7f:c1:a7:b0:23:3b:6e:d5:8d:77:03:e4:36:fc:d7:19:
         d6:5a:87:56:5c:6e:a2:7a:c0:b8:a6:a0:db:5e:5f:11:07:42:
         ea:05:7f:22:fd:28:2a:52:fb:5b:17:d3:7f:d2:9d:79:92:4c:
         3b:98:af:ea:30:9e:8f:55:3a:06:ed:31:ad:f5:bd:5e:20:95:
         4c:2a:a2:89:22:32:5d:1a:1a:f7:2e:a0:fb:9e:66:0a:bc:86:
         93:b3:92:d7:b6:63:79:d1:aa:f3:73:3b:f9:42:6a:59:9e:0c:
         6d:df:6a:8e:66:5f:f5:94:b4:24:f2:ce:20:8e:d0:ba:32:05:
         01:6d:b0:9c:75:ba:f2:bd:b7:b6:7b:b1:01:29:cb:38:03:98:
         d2:0b:d6:34:18:f3:f0:34:76:2b:87:a0:88:61:73:2c:99:c3:
         61:b1:c8:f5:98:b7:e8:31:dc:2a:f4:50:1c:d9:2e:b5:99:2f:
         46:37:50:b3:de:b4:27:97:cb:9d:b8:52:07:03:2c:9b:8f:80:
         87:6f:a9:8b:76:52:74:d2:3c:68:b0:c9:54:c2:8b:dd:5b:8b:
         93:ab:89:7c:e7:2d:ec:1a:2d:45:2a:25:7a:8e:36:eb:b1:35:
         c3:17:ac:e9:43:d5:c1:5a:1b:99:7a:51:9d:ed:81:a5:8b:bf:
         d5:cf:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:04 2023 by rpki-client on console-ams.rpki-client.org