Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Bxy0v6w4AduVjg0Fc_FWW33sqy0.roa
File:                     Bxy0v6w4AduVjg0Fc_FWW33sqy0.roa (raw, json)
Hash identifier:          wAKEY/9GwilVLlp8oAOy/xsUjus6TiXX+Ucgr0BgdwU=
Subject key identifier:   07:1C:B4:BF:AC:38:01:DB:95:8E:0D:05:73:F1:56:5B:7D:EC:AB:2D
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0183FF95D212F2C3C1BFFBC856965FA5FAD5
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Bxy0v6w4AduVjg0Fc_FWW33sqy0.roa
Signing time:             Sat 22 Oct 2022 12:05:52 +0000
ROA not before:           Sat 22 Oct 2022 12:05:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.88.9.0/24 maxlen: 24
                          45.95.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ff:95:d2:12:f2:c3:c1:bf:fb:c8:56:96:5f:a5:fa:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Oct 22 12:05:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=071cb4bfac3801db958e0d0573f1565b7decab2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:56:79:a7:9d:7f:da:07:ba:cd:0f:a4:d4:
                    c0:fc:8b:15:3e:47:0a:fc:d1:6a:58:e3:36:a2:53:
                    97:7f:d8:83:af:41:14:de:fc:07:4d:9f:b8:21:7c:
                    e0:35:55:45:09:90:cb:1b:10:1c:a7:24:d0:3b:ff:
                    c9:f2:e5:bc:c4:79:cc:70:d4:d6:72:1a:fb:c7:0e:
                    a8:4e:da:99:fd:d2:fe:85:12:23:1f:ba:25:e6:27:
                    63:69:11:d9:af:9a:54:f2:05:a5:ac:87:e8:bb:32:
                    1c:96:4c:03:ce:69:1a:69:0d:b0:f4:7f:be:2a:a6:
                    2d:f0:c6:cd:e4:91:f6:d1:5e:00:19:31:ae:5e:ab:
                    0b:86:8e:8a:97:d5:75:f0:37:91:a2:85:55:fb:22:
                    86:f5:ee:cc:80:0e:53:e5:39:96:a3:9c:7b:5c:12:
                    01:29:75:d0:ea:bb:ec:4f:ab:83:56:26:95:60:5d:
                    c4:d6:2c:3e:f0:02:ab:3f:94:6c:7e:70:85:4b:04:
                    56:f7:35:b7:c8:d3:1d:8a:c0:ec:e9:3b:c4:2d:ee:
                    74:48:88:c3:52:8b:73:d8:2f:81:b6:ac:8d:ef:bf:
                    4a:00:4b:c3:8e:e3:91:da:40:f2:87:3b:2e:b7:2f:
                    aa:33:e6:c9:a3:1b:67:ce:e9:bd:fe:4f:aa:3b:78:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:B4:BF:AC:38:01:DB:95:8E:0D:05:73:F1:56:5B:7D:EC:AB:2D
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Bxy0v6w4AduVjg0Fc_FWW33sqy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.9.0/24
                  45.95.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:1f:7d:37:9b:90:87:ea:c6:41:26:8c:4a:41:b1:00:25:07:
         6b:26:cf:2c:ec:09:5d:22:63:b5:c4:f0:8a:92:a4:38:fb:9c:
         e1:59:63:64:2b:d1:2a:d6:8d:9a:8b:82:47:5f:38:35:87:c3:
         95:c8:82:f4:30:2e:1b:c5:30:c9:de:a9:76:a4:66:1e:65:6d:
         59:5f:4c:61:59:fa:97:de:16:ff:d1:95:37:ee:a3:40:46:b0:
         b2:87:ee:26:57:cf:9d:92:a5:c6:6e:95:68:94:b6:c9:3d:d1:
         b4:96:8b:01:92:6a:c4:c1:17:a9:16:c8:5d:2b:5f:66:7f:9a:
         c9:2e:0e:79:2c:f5:ac:ea:19:ad:cf:5a:56:15:c8:3d:d9:dc:
         8d:e2:b9:f6:0d:37:4c:ac:ac:cd:08:8c:b1:7f:fb:53:a2:86:
         d0:d0:35:b7:4c:e8:6f:27:7a:d7:14:41:44:49:f8:d1:38:ce:
         e5:aa:4b:47:5b:c1:1d:65:32:2b:e3:5d:21:85:10:b7:e4:e7:
         46:9a:a5:31:7e:c3:0d:da:a1:c9:18:71:fa:ab:a1:6b:11:9a:
         e7:5d:58:2e:a1:7b:ac:c1:56:f2:aa:39:7c:08:42:04:3e:79:
         6d:34:37:b1:ca:5b:f1:7f:6f:3f:7a:8c:bd:49:55:94:3d:1f:
         6a:4e:36:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYP/ldIS8sPBv/vIVpZfpfrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIxMDIyMTIwNTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzFjYjRiZmFjMzgwMWRiOTU4ZTBkMDU3M2YxNTY1YjdkZWNhYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRlWeaedf9oHus0PpNTA/IsVPkcK
/NFqWOM2olOXf9iDr0EU3vwHTZ+4IXzgNVVFCZDLGxAcpyTQO//J8uW8xHnMcNTW
chr7xw6oTtqZ/dL+hRIjH7ol5idjaRHZr5pU8gWlrIfouzIclkwDzmkaaQ2w9H++
KqYt8MbN5JH20V4AGTGuXqsLho6Kl9V18DeRooVV+yKG9e7MgA5T5TmWo5x7XBIB
KXXQ6rvsT6uDViaVYF3E1iw+8AKrP5RsfnCFSwRW9zW3yNMdisDs6TvELe50SIjD
Uotz2C+BtqyN779KAEvDjuOR2kDyhzsuty+qM+bJoxtnzum9/k+qO3hMDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAcctL+sOAHblY4NBXPxVlt97KstMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvQnh5MHY2dzRBZHVWamcwRmNfRldXMzNzcXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgJAwQA
LV9BMA0GCSqGSIb3DQEBCwUAA4IBAQC8H303m5CH6sZBJoxKQbEAJQdrJs8s7Ald
ImO1xPCKkqQ4+5zhWWNkK9Eq1o2ai4JHXzg1h8OVyIL0MC4bxTDJ3ql2pGYeZW1Z
X0xhWfqX3hb/0ZU37qNARrCyh+4mV8+dkqXGbpVolLbJPdG0losBkmrEwRepFshd
K19mf5rJLg55LPWs6hmtz1pWFcg92dyN4rn2DTdMrKzNCIyxf/tToobQ0DW3TOhv
J3rXFEFESfjROM7lqktHW8EdZTIr410hhRC35OdGmqUxfsMN2qHJGHH6q6FrEZrn
XVguoXuswVbyqjl8CEIEPnltNDexylvxf28/eoy9SVWUPR9qTjYt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org