Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/IxggWI84P1gh_K-zZF7yzo_UxMo.roa
File:                     IxggWI84P1gh_K-zZF7yzo_UxMo.roa (raw, json)
Hash identifier:          oeRdxER2hB+6hfzYJBf0xcfXyIRXrypK9srTalf3yk0=
Subject key identifier:   23:18:20:58:8F:38:3F:58:21:FC:AF:B3:64:5E:F2:CE:8F:D4:C4:CA
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       018262D723D2135DB65E64B542C150FED5D3
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/IxggWI84P1gh_K-zZF7yzo_UxMo.roa
Signing time:             Wed 03 Aug 2022 08:34:02 +0000
ROA not before:           Wed 03 Aug 2022 08:34:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35758
IP address blocks:        45.88.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:62:d7:23:d2:13:5d:b6:5e:64:b5:42:c1:50:fe:d5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Aug  3 08:34:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=231820588f383f5821fcafb3645ef2ce8fd4c4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:46:10:19:b6:21:e8:df:f9:c0:da:c4:ed:
                    06:47:7f:85:0e:03:2d:65:ae:2f:7d:56:a9:10:ff:
                    f8:14:ac:05:98:2d:12:f6:80:40:6d:26:60:b6:27:
                    38:2f:b8:06:35:49:fd:d4:3b:d5:28:0b:3c:cd:52:
                    2a:1f:d3:e2:63:fa:1c:b1:5a:4c:66:e0:35:09:bb:
                    ab:c4:dc:ce:52:44:06:d3:76:4e:1d:72:f3:a4:4e:
                    df:dc:3b:ea:a0:a1:f6:c2:f8:8b:10:fb:bb:31:9c:
                    02:df:c4:0f:3c:33:fb:7b:62:1d:37:88:26:77:63:
                    b2:00:a1:68:f1:e0:8d:01:44:dc:1e:ba:0d:1a:b7:
                    2f:a2:a6:c9:ce:86:c8:ee:3e:44:9f:24:47:7f:c7:
                    10:34:4f:c4:f1:e1:2f:1d:5f:18:80:9e:d1:c4:0e:
                    6a:0f:25:1c:2b:1d:0b:69:8c:36:e4:b8:3b:06:8d:
                    78:5e:81:0d:84:eb:45:e4:fe:2b:fa:48:21:0e:39:
                    81:87:e9:d2:a9:66:34:c6:79:44:03:ea:a4:f5:3d:
                    fa:20:ce:3e:6c:73:09:16:2a:2e:b5:19:3b:ec:0f:
                    e9:cf:ab:ea:bb:2c:d8:9b:f4:c8:37:10:e7:33:b2:
                    49:56:df:cb:b4:b3:23:ea:84:25:de:83:44:e3:d6:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:20:58:8F:38:3F:58:21:FC:AF:B3:64:5E:F2:CE:8F:D4:C4:CA
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/IxggWI84P1gh_K-zZF7yzo_UxMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:fa:14:e7:65:06:5f:d0:9e:a1:90:ae:7e:15:39:03:09:08:
         15:81:63:72:38:23:40:2b:e5:d8:e3:11:8e:58:4c:e5:0b:ad:
         cc:f9:c2:1c:8e:0e:eb:7e:3d:64:50:2f:f0:76:8d:37:65:46:
         2f:eb:4d:0d:15:35:fa:38:62:5b:9f:69:cc:fe:06:1c:e0:6c:
         06:92:35:85:80:93:49:fe:37:4a:4b:ce:e1:31:0c:cf:84:6a:
         85:46:28:94:4e:1d:38:5c:0e:f6:22:f5:3a:f6:a7:22:84:48:
         d2:40:49:d6:d1:98:a9:c8:1e:28:d4:da:aa:61:8e:e4:15:5b:
         82:92:bf:18:78:c8:ce:68:1b:eb:a1:89:7c:78:f6:26:db:fe:
         fd:2e:e9:ed:9e:d8:99:17:1d:5e:3e:c3:61:2c:fd:fb:24:ab:
         e0:ae:18:6b:f1:c1:5a:cc:a4:2a:0c:78:10:5e:18:92:ab:e1:
         22:e4:1f:28:fe:75:99:7d:74:99:c4:91:30:c7:bd:2d:b6:34:
         12:53:f9:84:ce:61:32:27:8e:61:bf:63:71:f9:04:4b:c4:07:
         1e:7d:6f:b1:1b:dc:ca:08:3d:17:ed:7d:fc:5e:fc:61:bd:18:
         71:8e:07:15:f2:63:b9:7f:95:ec:42:b1:2d:de:f8:05:18:1e:
         0b:7d:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org