Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1htdhZIfJd60z1wm_Xdh9tBJiUc.roa
File:                     1htdhZIfJd60z1wm_Xdh9tBJiUc.roa (raw, json)
Hash identifier:          h9YTcARzx5Xb7QDaD87CmWrQsApslj6qs2xWyGt7YXw=
Subject key identifier:   D6:1B:5D:85:92:1F:25:DE:B4:CF:5C:26:FD:77:61:F6:D0:49:89:47
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       01825A0219CFBF9BD631242D2B2B9FE1F891
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1htdhZIfJd60z1wm_Xdh9tBJiUc.roa
Signing time:             Mon 01 Aug 2022 15:24:23 +0000
ROA not before:           Mon 01 Aug 2022 15:24:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     4842
IP address blocks:        45.88.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5a:02:19:cf:bf:9b:d6:31:24:2d:2b:2b:9f:e1:f8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Aug  1 15:24:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d61b5d85921f25deb4cf5c26fd7761f6d0498947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:48:f0:77:39:c9:c8:43:74:64:fd:ba:e4:
                    e0:b9:14:96:14:13:5a:81:60:00:e9:31:01:bc:aa:
                    e1:ac:e5:9a:e4:cb:f7:e2:df:3b:ea:ae:f4:18:ac:
                    ad:08:bd:02:b7:c5:14:59:28:68:df:a2:a0:8e:fc:
                    2a:d0:c2:37:68:f6:ea:f7:66:12:1a:d8:17:02:58:
                    7f:c4:fa:91:c0:79:db:89:35:2a:77:66:71:f6:17:
                    02:be:01:82:9d:bf:75:e7:a5:af:3d:43:39:c8:a6:
                    1b:68:92:f7:13:16:bb:6d:cd:cb:4a:db:c2:49:17:
                    08:4e:39:0e:01:2c:44:51:ee:11:81:b0:12:ba:bd:
                    b8:8e:6d:ce:98:8d:6b:06:21:1f:7b:e6:1f:86:1a:
                    09:9e:4d:b3:0e:af:f1:ea:fb:f4:ea:30:b4:27:68:
                    a3:f7:d0:df:7b:df:3c:c5:50:66:73:2f:52:1d:aa:
                    9b:34:50:b9:da:da:58:9d:bb:53:17:53:b6:03:a2:
                    9f:42:41:d6:12:f4:27:68:79:5c:26:fc:df:67:bb:
                    6e:4c:78:02:77:65:d2:59:25:2a:1e:20:ad:ea:2d:
                    0c:be:84:e8:49:5a:73:13:84:5b:3e:b5:09:0f:e3:
                    b0:f7:2b:6c:cd:8d:28:d3:50:fc:34:2d:36:c2:bb:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1B:5D:85:92:1F:25:DE:B4:CF:5C:26:FD:77:61:F6:D0:49:89:47
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1htdhZIfJd60z1wm_Xdh9tBJiUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:e9:9c:9a:f6:09:19:e9:39:d4:22:0f:91:55:c9:54:43:
         b2:f0:14:da:40:49:33:b2:19:82:0b:87:9a:3b:3f:40:fa:c4:
         fb:d2:3c:5d:63:d8:ac:bd:c6:d9:54:0a:51:19:55:2b:06:96:
         60:fe:29:45:fd:7c:25:07:fb:b3:40:05:f7:54:fc:71:c5:51:
         ba:dc:7e:9f:cd:e4:c3:53:bb:eb:bd:f6:45:be:27:59:fe:39:
         35:0a:05:fe:0d:44:90:bf:b2:92:d9:9f:d1:cc:2a:d0:a5:6d:
         fe:7d:71:e9:3d:78:48:c9:c1:7f:df:99:42:5c:ef:1c:03:c9:
         98:84:ec:c8:a8:86:08:8d:81:68:d5:a0:09:1b:7d:51:87:bd:
         23:24:71:29:d4:71:38:54:36:95:b9:50:b9:01:02:57:6c:cd:
         20:fa:c6:c3:dc:1e:1b:b3:75:0d:22:0c:aa:5d:a5:a9:1e:d4:
         a5:1c:77:28:de:8d:1e:c9:12:2e:ea:ec:51:e5:18:82:74:1d:
         1e:64:62:0f:8b:80:14:8a:5f:e8:80:59:3c:a8:95:73:9d:0d:
         8f:c6:b2:ab:4b:c1:af:79:b7:22:11:8f:bd:9b:0c:78:df:5d:
         15:13:bd:07:86:3f:eb:70:ba:3d:4e:d0:3d:d8:55:4b:20:9d:
         5f:32:73:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJaAhnPv5vWMSQtKyuf4fiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIwODAxMTUyNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjFiNWQ4NTkyMWYyNWRlYjRjZjVjMjZmZDc3NjFmNmQwNDk4OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkctI8Hc5ychDdGT9uuTguRSWFBNa
gWAA6TEBvKrhrOWa5Mv34t876q70GKytCL0Ct8UUWSho36Kgjvwq0MI3aPbq92YS
GtgXAlh/xPqRwHnbiTUqd2Zx9hcCvgGCnb9156WvPUM5yKYbaJL3Exa7bc3LStvC
SRcITjkOASxEUe4RgbASur24jm3OmI1rBiEfe+YfhhoJnk2zDq/x6vv06jC0J2ij
99Dfe988xVBmcy9SHaqbNFC52tpYnbtTF1O2A6KfQkHWEvQnaHlcJvzfZ7tuTHgC
d2XSWSUqHiCt6i0MvoToSVpzE4RbPrUJD+Ow9ytszY0o01D8NC02wrvJqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYbXYWSHyXetM9cJv13YfbQSYlHMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvMWh0ZGhaSWZKZDYwejF3bV9YZGg5dEJKaVVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVgLMA0G
CSqGSIb3DQEBCwUAA4IBAQCRPOmcmvYJGek51CIPkVXJVEOy8BTaQEkzshmCC4ea
Oz9A+sT70jxdY9isvcbZVApRGVUrBpZg/ilF/XwlB/uzQAX3VPxxxVG63H6fzeTD
U7vrvfZFvidZ/jk1CgX+DUSQv7KS2Z/RzCrQpW3+fXHpPXhIycF/35lCXO8cA8mY
hOzIqIYIjYFo1aAJG31Rh70jJHEp1HE4VDaVuVC5AQJXbM0g+sbD3B4bs3UNIgyq
XaWpHtSlHHco3o0eyRIu6uxR5RiCdB0eZGIPi4AUil/ogFk8qJVznQ2PxrKrS8Gv
ebciEY+9mwx4310VE70Hhj/rcLo9TtA92FVLIJ1fMnM9
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org