Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/sLQqVyoGUQsygsOUB_jn0GVYRDw.roa
File:                     sLQqVyoGUQsygsOUB_jn0GVYRDw.roa (raw, json)
Hash identifier:          NdCcv7NoTiHIOQe1HU1yXfF5VQOSTfG6UyLbBl88Plg=
Subject key identifier:   B0:B4:2A:57:2A:06:51:0B:32:82:C3:94:07:F8:E7:D0:65:58:44:3C
Certificate issuer:       /CN=267c70e6375e2b2c58c28cce844558cc9b4edf56
Certificate serial:       0772F075
Authority key identifier: 26:7C:70:E6:37:5E:2B:2C:58:C2:8C:CE:84:45:58:CC:9B:4E:DF:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jnxw5jdeKyxYwozOhEVYzJtO31Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/sLQqVyoGUQsygsOUB_jn0GVYRDw.roa
Signing time:             Sat 01 Jan 2022 11:53:58 +0000
ROA not before:           Sat 01 Jan 2022 11:53:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.150.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124973173 (0x772f075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267c70e6375e2b2c58c28cce844558cc9b4edf56
        Validity
            Not Before: Jan  1 11:53:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0b42a572a06510b3282c39407f8e7d06558443c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:fd:e6:f4:8b:7a:36:d4:02:0e:ba:14:56:
                    24:8b:57:a0:60:e3:04:90:2e:bc:f8:b1:4f:e3:1c:
                    82:dc:1d:3d:e5:f7:88:08:9b:59:db:d4:56:cd:a0:
                    97:57:67:c0:fa:d6:05:79:90:35:78:51:70:72:77:
                    b1:79:fa:fe:15:eb:f5:b7:28:4e:fc:2b:bb:1e:63:
                    cb:40:8c:1f:57:2a:71:c4:d5:1f:9f:a0:00:2d:b9:
                    84:de:f5:38:c6:77:4d:5f:a5:e4:71:e3:fb:2e:b6:
                    e3:1c:bb:14:92:70:11:08:01:50:eb:aa:33:88:93:
                    1c:19:ec:52:9d:b1:f6:66:60:3a:2b:e3:63:35:a1:
                    68:2f:4b:46:23:66:15:e2:b3:62:2a:86:5d:e1:01:
                    07:6e:8a:b6:0a:eb:17:51:72:80:c2:32:2c:b5:dc:
                    40:ab:ea:11:53:83:f5:95:6c:02:2c:cc:32:53:9b:
                    f2:ce:ce:83:d2:24:90:a1:24:4b:19:f2:73:71:66:
                    ee:a4:a7:26:16:48:b5:5a:a7:c3:c6:24:26:d6:77:
                    12:17:e3:3b:3c:fd:6f:32:d7:8f:08:89:23:b0:46:
                    15:9e:f9:ae:05:3a:ad:bc:da:b7:6b:11:e3:b2:e2:
                    98:97:46:68:7a:a8:1a:81:c7:45:4c:27:d8:d9:99:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:2A:57:2A:06:51:0B:32:82:C3:94:07:F8:E7:D0:65:58:44:3C
            X509v3 Authority Key Identifier:
                keyid:26:7C:70:E6:37:5E:2B:2C:58:C2:8C:CE:84:45:58:CC:9B:4E:DF:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnxw5jdeKyxYwozOhEVYzJtO31Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/sLQqVyoGUQsygsOUB_jn0GVYRDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ce416b-6e01-4492-9817-4858f08ad8a5/1/Jnxw5jdeKyxYwozOhEVYzJtO31Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:57:bc:36:03:4d:5c:77:84:79:c2:db:9a:5b:9c:8c:c5:a8:
         f4:d1:6a:bb:f9:c0:ca:67:12:51:fd:e1:89:2a:d4:4c:b4:67:
         fb:2f:a1:31:18:b4:75:0a:b8:4a:2a:15:3a:43:80:70:77:9b:
         7f:bf:0e:4f:83:47:87:80:d3:31:22:6f:ad:da:67:05:4e:cf:
         6b:e5:cd:6a:86:1a:d2:fb:61:0f:bf:61:7c:4f:7e:74:bd:71:
         ad:14:a7:c9:82:42:ca:36:22:d7:96:6f:ff:0e:b0:43:cf:ea:
         b7:87:f6:aa:18:0d:c0:de:b9:97:cb:12:b4:27:3a:c5:fb:b3:
         00:5e:a6:1a:2d:1d:86:35:85:78:07:08:3a:61:43:d0:51:49:
         8d:3f:4d:df:dd:f5:0a:9c:0b:5b:df:db:ed:42:30:9e:2c:9b:
         0a:71:e0:5f:91:7e:05:25:79:0e:2b:9f:97:3c:87:49:b1:cd:
         b0:7c:8a:3e:bc:44:62:9e:68:b1:d6:5c:91:9b:66:d5:2c:49:
         95:51:e6:2e:63:83:54:26:c5:fd:14:c0:0c:a3:c1:44:09:39:
         fb:5e:66:75:73:87:24:77:26:79:85:43:d9:7a:a5:2d:b8:51:
         e6:3b:51:46:fd:2a:59:23:4a:67:e1:90:2d:01:5f:3c:d7:b5:
         8f:9f:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:07 2023 by rpki-client on console-ams.rpki-client.org