Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/FASinYCjJlNBXu4w1F7rpdW9DdI.roa
File:                     FASinYCjJlNBXu4w1F7rpdW9DdI.roa (raw, json)
Hash identifier:          ib6FePbfDHwkM6lfg+syE7vcTDuZI60PvfirU5kUTLo=
Subject key identifier:   14:04:A2:9D:80:A3:26:53:41:5E:EE:30:D4:5E:EB:A5:D5:BD:0D:D2
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       051C2525
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/FASinYCjJlNBXu4w1F7rpdW9DdI.roa
Signing time:             Fri 20 May 2022 20:28:30 +0000
ROA not before:           Fri 20 May 2022 20:28:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210546
IP address blocks:        45.95.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85730597 (0x51c2525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: May 20 20:28:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1404a29d80a32653415eee30d45eeba5d5bd0dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:31:9d:15:75:20:2a:bd:4f:89:b6:ac:c6:
                    2a:d0:d9:d2:2e:04:3c:61:07:82:21:81:5d:e9:4a:
                    88:18:81:50:9a:65:ee:9b:17:b5:83:e6:8f:a8:e2:
                    5d:be:3c:70:b2:f3:c0:6c:b9:56:5e:b3:ab:6a:12:
                    58:6c:e3:3b:14:0f:b0:3e:b8:a3:d3:c8:fc:2c:b8:
                    d3:0b:ed:ac:1c:dc:de:4b:61:37:59:1b:2e:8b:35:
                    34:05:9d:92:ed:04:29:0a:52:e2:16:76:98:23:b0:
                    eb:6f:ea:15:f1:12:51:40:05:6d:dc:26:6a:71:a7:
                    17:22:1d:9a:7c:11:40:97:40:f0:76:1e:49:ad:60:
                    be:5e:9a:f9:0d:30:22:3d:ef:5d:74:b5:69:27:4d:
                    68:fa:32:43:93:4a:fe:d8:bb:8f:eb:c6:54:59:7f:
                    39:ab:3d:69:3e:da:c8:f2:b9:e8:4b:12:bc:60:27:
                    7f:49:e9:4e:1f:ed:b1:15:69:c8:48:b6:c8:d7:80:
                    21:f4:5a:bf:4f:c2:d5:1e:6e:c5:e0:f9:a6:f4:42:
                    cd:45:e5:7b:4a:56:42:c3:50:a2:c9:1e:e1:d1:94:
                    06:df:c9:0d:bf:77:b1:b0:68:ec:84:62:f0:a9:7d:
                    6a:cc:89:45:17:91:9c:5f:eb:05:f9:fe:3d:6f:37:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:04:A2:9D:80:A3:26:53:41:5E:EE:30:D4:5E:EB:A5:D5:BD:0D:D2
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/FASinYCjJlNBXu4w1F7rpdW9DdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:2d:0b:3f:a8:8a:cd:cd:11:17:be:05:d0:dc:19:6f:dd:
         39:0e:a4:f1:f5:c1:aa:81:e4:3f:01:d4:68:a8:f6:8e:3e:ff:
         12:c4:64:46:b4:af:8a:8f:66:c4:39:52:8a:57:e1:5a:40:91:
         9d:fa:96:eb:7f:28:4c:1b:6b:db:70:08:21:12:d3:81:5b:ef:
         f5:fe:8c:01:56:f9:53:48:06:ee:ab:a3:0e:94:01:bc:67:00:
         55:04:41:ca:6d:2d:bc:91:58:d3:a4:e0:4d:f4:31:a3:a9:a7:
         f8:10:3c:d4:a2:88:11:0e:88:e2:c2:ed:0b:79:31:a6:79:66:
         b6:1a:04:17:22:c3:f4:f7:28:f4:64:6d:ea:f0:61:a7:c7:03:
         9d:61:4b:17:2d:8e:0d:14:e8:87:2c:52:d1:12:77:fa:84:38:
         0c:31:15:10:f5:c8:df:06:13:a1:3f:70:5d:08:f8:9e:4b:c3:
         cb:c2:20:8e:03:7b:24:68:f0:9a:33:c2:cc:d4:7a:c7:80:d1:
         a9:ea:d3:2c:16:6a:15:72:40:af:89:c8:d7:0c:c1:c3:ed:5d:
         e5:26:29:3b:6f:86:8f:6c:c0:bd:67:ca:a1:49:72:ef:db:7f:
         1a:da:a0:5e:7c:6c:a6:84:21:30:54:43:98:82:a4:cc:08:18:
         72:ac:84:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBRwlJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
M2VjZjEwYjg4N2YwODU4ODdkZThiMmRiNjQ5MTdlZTJlNDI0NTQ1MB4XDTIyMDUy
MDIwMjgzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQwNGEyOWQ4MGEz
MjY1MzQxNWVlZTMwZDQ1ZWViYTVkNWJkMGRkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK1EMZ0VdSAqvU+JtqzGKtDZ0i4EPGEHgiGBXelKiBiBUJpl
7psXtYPmj6jiXb48cLLzwGy5Vl6zq2oSWGzjOxQPsD64o9PI/Cy40wvtrBzc3kth
N1kbLos1NAWdku0EKQpS4hZ2mCOw62/qFfESUUAFbdwmanGnFyIdmnwRQJdA8HYe
Sa1gvl6a+Q0wIj3vXXS1aSdNaPoyQ5NK/ti7j+vGVFl/Oas9aT7ayPK56EsSvGAn
f0npTh/tsRVpyEi2yNeAIfRav0/C1R5uxeD5pvRCzUXle0pWQsNQoske4dGUBt/J
Db93sbBo7IRi8Kl9asyJRReRnF/rBfn+PW83ymcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUBKKdgKMmU0Fe7jDUXuul1b0N0jAfBgNVHSMEGDAWgBQT7PELiH8IWIfe
iy22SRfuLkJFRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0UtenhDNGhfQ0ZpSDNvc3R0a2tYN2k1Q1JVVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8x
L0ZBU2luWUNqSmxOQlh1NHcxRjdycGRXOURkSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8xL0UtenhDNGhfQ0Zp
SDNvc3R0a2tYN2k1Q1JVVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1fQzANBgkqhkiG9w0BAQsFAAOC
AQEAXyktCz+ois3NERe+BdDcGW/dOQ6k8fXBqoHkPwHUaKj2jj7/EsRkRrSvio9m
xDlSilfhWkCRnfqW638oTBtr23AIIRLTgVvv9f6MAVb5U0gG7qujDpQBvGcAVQRB
ym0tvJFY06TgTfQxo6mn+BA81KKIEQ6I4sLtC3kxpnlmthoEFyLD9Pco9GRt6vBh
p8cDnWFLFy2ODRTohyxS0RJ3+oQ4DDEVEPXI3wYToT9wXQj4nkvDy8IgjgN7JGjw
mjPCzNR6x4DRqerTLBZqFXJAr4nI1wzBw+1d5SYpO2+Gj2zAvWfKoUly79t/Gtqg
XnxspoQhMFRDmIKkzAgYcqyE+A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org