Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/EVnUPVwAtpypl7WyGCL8NYtbcig.roa
File:                     EVnUPVwAtpypl7WyGCL8NYtbcig.roa (raw, json)
Hash identifier:          enl/RvF60fj5JsdmWvMhI6uUTeBgW1A7C1frBXwjC7w=
Subject key identifier:   11:59:D4:3D:5C:00:B6:9C:A9:97:B5:B2:18:22:FC:35:8B:5B:72:28
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0185714C15BEF48C17D42F798E1CDFA59136
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/EVnUPVwAtpypl7WyGCL8NYtbcig.roa
Signing time:             Mon 02 Jan 2023 07:04:49 +0000
ROA not before:           Mon 02 Jan 2023 07:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202358
IP address blocks:        45.148.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:15:be:f4:8c:17:d4:2f:79:8e:1c:df:a5:91:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jan  2 07:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1159d43d5c00b69ca997b5b21822fc358b5b7228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:ba:78:bc:b7:29:d2:db:f6:47:c4:52:cc:
                    dd:28:c3:c7:69:11:6c:36:e9:9e:8b:e2:af:b5:11:
                    a3:b2:76:b8:ca:06:d9:cf:2b:e8:ac:f4:7e:f4:18:
                    3f:34:d9:ab:96:fe:29:d7:36:72:41:cc:cf:79:c2:
                    f9:9d:13:79:97:f0:09:54:4e:15:88:ca:a1:3f:95:
                    33:41:69:27:76:08:5b:c7:68:67:de:d1:88:84:f9:
                    98:9b:02:fa:dc:3e:99:fd:ba:0b:ab:98:d9:05:36:
                    fe:09:6b:b2:39:da:10:7b:fa:eb:c0:54:10:4f:06:
                    35:a3:bf:ec:0f:1c:df:a5:32:01:d8:c0:e5:33:23:
                    6b:c6:dc:0e:b5:1a:cd:02:1c:e5:39:44:d6:bd:c1:
                    08:dc:eb:d8:9a:9b:6d:d8:62:22:c1:b5:a0:2b:e8:
                    80:16:50:d8:6b:01:be:3e:9a:70:9e:7d:ab:a6:98:
                    6c:81:da:ba:6e:c0:11:e6:f2:77:3a:41:4f:79:28:
                    10:8f:71:c8:0f:0e:fc:b1:f4:7c:60:db:44:8d:c1:
                    28:71:66:85:3f:44:cd:54:8a:aa:44:43:48:2b:29:
                    9d:cf:b0:b9:c8:8b:cd:89:23:7b:f7:7f:9d:58:9f:
                    29:8a:b4:8d:af:a6:f1:a2:eb:41:77:f5:ff:75:af:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:59:D4:3D:5C:00:B6:9C:A9:97:B5:B2:18:22:FC:35:8B:5B:72:28
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/EVnUPVwAtpypl7WyGCL8NYtbcig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:3c:eb:c8:b4:b8:a0:be:4e:a9:e7:ed:5f:2c:0a:d6:e9:bd:
         cb:16:67:16:f1:b2:2f:6d:78:9a:c5:b6:cd:d7:0a:43:5c:2b:
         28:28:9d:72:9d:95:af:d6:c1:54:9c:c0:2f:bc:94:55:5a:af:
         c4:75:e2:e0:ad:cb:8e:9b:d4:b7:a2:fe:70:a5:5e:22:a0:78:
         57:4f:ca:bf:7f:d1:ad:73:5b:b6:b2:05:be:69:91:bf:ad:a3:
         d3:01:cb:5f:b2:01:b0:73:5e:e4:2f:46:87:35:bc:05:86:43:
         0e:b2:fa:b8:08:d6:82:4f:c7:11:bd:ab:b0:d1:d3:03:63:67:
         cf:0b:06:f7:e9:75:74:f1:a1:e7:f4:f1:f8:d8:72:4e:ca:29:
         3c:94:8f:d8:69:08:43:5c:85:ad:80:9b:af:fc:21:05:02:93:
         24:90:c4:fb:27:3b:79:1b:c7:6d:cd:34:9f:04:71:1f:72:85:
         7e:d5:c5:00:98:99:c9:f3:a0:75:71:d9:16:d1:65:7a:7c:b2:
         97:c0:f7:22:34:08:90:68:0e:d7:84:7e:70:98:cd:71:b6:86:
         c3:c1:64:de:46:c0:d0:a0:13:b8:23:bf:68:9c:4f:27:11:6f:
         34:ba:e8:03:74:fb:20:1c:08:fe:95:a5:2b:4f:f0:ec:e1:c4:
         18:91:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org