Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/7bxaLvnyC0kv24wBAAaAPYQnVTA.roa
File:                     7bxaLvnyC0kv24wBAAaAPYQnVTA.roa (raw, json)
Hash identifier:          rm9pvlhzAj+a49T/6HshOwtUgcYbV9DKGGvAtb905P4=
Subject key identifier:   ED:BC:5A:2E:F9:F2:0B:49:2F:DB:8C:01:00:06:80:3D:84:27:55:30
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       057A084D
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/7bxaLvnyC0kv24wBAAaAPYQnVTA.roa
Signing time:             Mon 20 Jun 2022 06:45:44 +0000
ROA not before:           Mon 20 Jun 2022 06:45:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43043
IP address blocks:        45.148.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91883597 (0x57a084d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun 20 06:45:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edbc5a2ef9f20b492fdb8c010006803d84275530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:3c:98:ee:6c:8d:ee:8e:84:29:eb:d8:e4:
                    95:b1:3b:d5:0f:f6:0d:3f:9a:bf:ee:e4:ea:3b:9e:
                    76:9b:34:15:cc:5c:26:f4:e5:e2:23:53:ae:69:2e:
                    59:eb:3a:e0:99:dc:2f:cb:60:bb:74:8c:2c:e3:33:
                    5c:a6:a7:4f:60:0e:2b:ff:e3:56:64:77:55:a6:9e:
                    cb:29:95:e3:9d:e5:a6:49:fc:1c:64:a9:74:94:49:
                    c8:10:2b:3e:88:4d:69:61:46:47:67:e1:34:53:90:
                    9b:75:c2:93:f2:8a:8a:78:9d:fe:b5:d3:bd:08:e8:
                    55:ec:31:0d:1c:99:26:41:05:86:53:30:7f:f4:55:
                    1e:74:23:2e:46:dc:ca:e2:30:b1:b6:a8:9e:c5:6d:
                    6a:31:5e:99:d6:0d:8c:8d:e0:7b:bd:09:17:e9:9f:
                    47:29:d2:9a:8f:b4:f4:a5:1f:81:6d:2f:a0:33:e4:
                    d0:d2:81:54:de:18:05:0b:a6:2f:09:97:04:a5:43:
                    08:9a:52:d9:0b:54:30:4f:43:ac:69:43:0a:af:84:
                    0e:c8:6b:c1:59:77:76:7d:5b:97:76:1e:bf:5e:c5:
                    9f:66:76:e4:85:41:04:49:bd:0a:17:21:27:40:6a:
                    96:f4:72:0c:ec:71:29:77:b3:09:41:5e:b6:0a:ad:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BC:5A:2E:F9:F2:0B:49:2F:DB:8C:01:00:06:80:3D:84:27:55:30
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/7bxaLvnyC0kv24wBAAaAPYQnVTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:63:1f:f7:f5:e7:f4:ef:8e:61:35:5e:40:bc:2b:31:43:
         fa:a0:22:9a:55:04:fd:75:8b:91:52:e8:49:70:48:2d:e3:ac:
         60:07:de:1a:ed:6e:df:e4:03:c1:19:a4:86:d7:e6:64:be:d9:
         78:0d:80:64:c2:82:1b:a8:22:65:0f:aa:13:79:0d:bd:1b:68:
         4b:2c:1d:31:73:c6:90:11:6d:64:c6:15:00:5a:48:e9:22:45:
         7d:af:30:69:0f:7a:00:8b:a1:b9:e6:e0:95:f5:b3:60:1b:c7:
         5d:d1:91:27:2e:ef:0d:02:09:cc:88:18:f4:46:e4:f8:95:de:
         01:f7:e4:3c:d2:ed:30:cb:90:7a:bd:7d:62:11:d0:4a:61:16:
         c6:a2:4c:d7:26:8a:d7:fc:ae:b2:fc:8d:4c:8e:6b:18:dc:ce:
         f8:d0:5b:67:4d:42:58:b9:8c:64:01:97:22:07:f2:3c:f8:21:
         1b:a6:80:4b:64:6d:94:10:71:b0:c7:92:d1:75:ce:12:85:24:
         24:7a:34:d2:bb:f2:ec:12:db:b6:e5:a5:4e:a1:72:75:97:1b:
         1f:38:fa:b1:3b:e1:6a:9d:17:a5:c1:da:28:b1:d2:eb:11:64:
         56:ea:af:c3:3b:8f:12:03:84:0e:c5:64:3e:ba:25:37:16:58:
         d3:e6:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org