Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RlxwQiVONgg1cByieKAf7_A8sbk.roa
File:                     RlxwQiVONgg1cByieKAf7_A8sbk.roa (raw, json)
Hash identifier:          lpGxxvYYawyYs7f3j1Ba7W/8sd3Lecx8D8tor7Yg1zo=
Subject key identifier:   46:5C:70:42:25:4E:36:08:35:70:1C:A2:78:A0:1F:EF:F0:3C:B1:B9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182F86E2C0147C232AE9A6171966FEC3AF4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RlxwQiVONgg1cByieKAf7_A8sbk.roa
Signing time:             Thu 01 Sep 2022 09:42:25 +0000
ROA not before:           Thu 01 Sep 2022 09:42:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203913
IP address blocks:        2a06:1287:1600::/40 maxlen: 48
                          2a06:a005:a16::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f8:6e:2c:01:47:c2:32:ae:9a:61:71:96:6f:ec:3a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  1 09:42:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=465c7042254e360835701ca278a01feff03cb1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:a1:72:07:27:76:30:73:bd:73:e5:26:bf:
                    82:91:fa:c9:a1:17:a9:4a:c1:b1:9f:9c:ee:97:1d:
                    43:d6:dd:44:6e:37:71:a0:10:a5:db:63:55:4b:fb:
                    de:fb:d5:d6:c9:cb:69:d5:59:72:e4:47:40:f6:05:
                    b3:ee:6e:9d:78:97:d5:00:53:fe:20:02:58:c8:22:
                    26:76:03:77:f8:37:05:37:a1:d5:c2:2d:86:a1:05:
                    99:54:73:58:ca:33:65:5e:df:f3:22:af:38:66:16:
                    ae:ae:85:2b:07:89:a2:8b:ce:87:89:25:6e:82:b3:
                    41:e5:80:32:e8:af:9d:db:b6:29:6c:cf:49:fe:6e:
                    35:6f:83:d3:b4:74:02:f4:80:2b:30:3e:8f:34:87:
                    c3:d2:46:89:d7:ef:25:d6:66:0f:30:03:35:89:7b:
                    ac:06:8d:48:c6:53:c7:c1:36:48:f7:d3:f3:42:d7:
                    c4:b4:e8:78:fb:51:11:2c:3d:25:0f:32:5b:5c:5f:
                    1d:05:9d:f7:44:16:83:c7:cb:84:48:48:be:0c:e2:
                    79:73:2d:c0:97:68:d8:00:74:8e:92:fe:98:00:5e:
                    eb:a0:ef:ad:c0:78:39:6b:ee:4d:a2:eb:55:d7:7f:
                    62:66:5f:ab:5e:a2:92:73:a0:d0:ca:bb:ae:31:a8:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:70:42:25:4E:36:08:35:70:1C:A2:78:A0:1F:EF:F0:3C:B1:B9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RlxwQiVONgg1cByieKAf7_A8sbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1600::/40
                  2a06:a005:a16::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:87:d9:ce:f0:ea:5a:72:87:ec:f7:c3:ea:1a:14:7c:aa:7b:
         b8:21:58:c3:4e:78:94:cd:11:03:e0:da:80:9e:1d:f2:56:61:
         00:ae:d3:e4:2e:2d:b1:a6:4e:c5:35:db:b2:bd:66:5a:cc:c2:
         dc:a1:e7:2e:a8:f1:d0:fe:7e:75:a1:22:83:84:ac:ac:75:a0:
         51:7b:1f:f6:57:a6:34:40:76:1d:b2:b5:19:f1:a4:08:ec:77:
         d2:46:c5:4d:2a:ee:36:d3:9e:3b:ad:f3:9d:2e:12:e8:7e:23:
         55:13:dd:04:77:b8:8c:3a:63:bd:1e:0a:f1:6a:e3:5c:99:8b:
         21:8a:81:a2:70:a3:94:30:a3:3c:e8:40:32:43:13:ca:f6:f2:
         a1:c3:ab:7c:c1:35:65:76:f1:9a:18:c4:26:2d:a9:a9:77:0c:
         41:44:51:75:30:56:36:14:4f:2e:2b:57:78:72:e8:cf:72:84:
         b3:ad:aa:64:31:05:ad:1b:aa:c4:6c:a4:51:8c:a7:b5:23:94:
         4b:d0:28:8c:e1:a3:c7:9c:70:98:95:47:30:33:95:52:9c:e2:
         69:bb:67:60:cb:8e:71:ff:60:6e:97:21:e3:4e:26:b2:14:4e:
         fa:43:74:0e:93:9e:49:8f:91:e7:47:3a:53:a9:6d:15:74:3e:
         4d:13:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org