Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1-86-OMdXYRVstTcWyCZqJ_1pksw.roa
File:                     1-86-OMdXYRVstTcWyCZqJ_1pksw.roa (raw, json)
Hash identifier:          HajPvtfq2EMTCWTNIv9Ebs3lO+KijEqZBESZGRdoh74=
Subject key identifier:   FB:CE:BE:38:C7:57:61:15:6C:B5:37:16:C8:26:6A:27:FD:69:92:CC
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0184E6F7A7BD0D883C92072BCFD552C693B4
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1-86-OMdXYRVstTcWyCZqJ_1pksw.roa
Signing time:             Tue 06 Dec 2022 10:25:00 +0000
ROA not before:           Tue 06 Dec 2022 10:25:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24875
IP address blocks:        45.148.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e6:f7:a7:bd:0d:88:3c:92:07:2b:cf:d5:52:c6:93:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Dec  6 10:25:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fbcebe38c75761156cb53716c8266a27fd6992cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:46:e4:74:38:a5:44:e6:51:07:31:85:f5:
                    23:7c:2c:e4:c6:9a:85:c6:6f:d3:48:5e:c0:63:65:
                    c4:92:a4:ea:c3:ea:14:89:7f:49:ad:97:8c:59:5e:
                    b2:31:47:5d:e9:92:43:a4:da:83:c6:c9:98:c4:8d:
                    49:8a:b5:eb:54:4f:49:93:fc:c7:73:e1:6e:21:ce:
                    67:01:46:27:bd:63:f2:9b:49:10:ed:19:c9:22:70:
                    97:eb:0d:13:49:29:3b:8d:74:04:c3:1d:19:7b:08:
                    05:a6:1c:1c:0e:d3:42:31:aa:3f:db:38:5d:e7:97:
                    ba:fd:88:04:e7:fa:dc:f7:e7:60:24:3d:cc:c5:ca:
                    25:3f:4f:58:e7:8a:0e:f7:c0:82:1d:1f:21:b5:c5:
                    09:30:35:cf:a8:5a:0e:e3:89:e1:ce:0f:0b:62:1c:
                    4b:b0:98:f5:99:33:a2:aa:17:86:84:75:16:58:69:
                    b4:b0:d7:5a:93:42:e7:3e:0f:0d:be:d6:6b:56:04:
                    80:38:e6:ec:8d:31:a5:a5:d7:3f:a1:63:61:dd:3c:
                    06:6f:ac:d0:13:7c:03:54:da:d0:5e:4a:c2:15:5a:
                    6e:da:ae:fb:2b:01:65:45:57:4e:73:db:30:9a:2e:
                    8d:47:0f:14:5c:35:01:ed:c6:d2:7f:77:8a:fb:94:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CE:BE:38:C7:57:61:15:6C:B5:37:16:C8:26:6A:27:FD:69:92:CC
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1-86-OMdXYRVstTcWyCZqJ_1pksw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:cd:69:ab:62:84:28:0f:b4:ba:85:ce:b6:c0:f4:49:46:28:
         f3:45:50:99:aa:db:56:99:75:2b:b2:ad:bd:35:2f:d6:df:87:
         02:4e:bd:c3:ed:b7:fe:4d:22:4e:f3:80:53:22:fc:2c:c2:ec:
         4a:43:e9:0a:68:69:fe:3c:b2:c7:1b:ea:c3:00:ad:40:d6:2e:
         71:3f:ad:b1:0e:b9:b5:bc:35:48:f1:9f:1a:dd:f9:e5:0a:a6:
         b9:5a:54:c3:7c:1a:e6:1c:fd:21:8d:e9:d3:57:96:c6:80:14:
         24:01:a9:1e:6a:cc:57:5f:7a:cb:b0:9f:c3:2f:39:42:7f:bb:
         11:d9:b6:cf:cb:fd:af:aa:d2:3c:80:4b:e3:03:87:42:5d:12:
         2e:5e:8c:96:af:2d:45:67:5a:27:b0:89:e7:a2:e9:02:27:62:
         60:b3:0d:91:0a:61:7e:e0:5a:cf:f8:3c:46:69:bf:cc:37:06:
         86:72:7a:f3:0a:1b:6d:70:c6:fd:03:54:44:ed:6c:73:ab:da:
         6a:46:d9:96:54:68:9b:c2:c6:e2:91:c6:b2:15:96:e6:25:4e:
         19:f0:dd:6c:58:57:32:37:c7:14:18:83:f0:f0:4f:2b:a5:10:
         1c:4e:a8:8e:d3:27:3c:90:09:a5:f5:87:77:be:f4:b7:d0:36:
         f1:78:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org