Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/LKo7hEL7wonmJZaYasXcPD2fqT8.roa
File:                     LKo7hEL7wonmJZaYasXcPD2fqT8.roa (raw, json)
Hash identifier:          VFlMUD2cnauCIZB39rAV3vh9/85p+Q1SIpmm/cO7Pb4=
Subject key identifier:   2C:AA:3B:84:42:FB:C2:89:E6:25:96:98:6A:C5:DC:3C:3D:9F:A9:3F
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       058D0840
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/LKo7hEL7wonmJZaYasXcPD2fqT8.roa
Signing time:             Sun 26 Jun 2022 13:32:23 +0000
ROA not before:           Sun 26 Jun 2022 13:32:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        45.148.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93128768 (0x58d0840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun 26 13:32:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2caa3b8442fbc289e62596986ac5dc3c3d9fa93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:7a:60:18:d3:5a:c9:41:10:71:73:b9:3f:
                    4a:77:63:c9:fc:84:e4:0f:71:0d:2c:76:ad:56:4e:
                    a0:c3:49:c7:10:70:f5:c1:c9:d2:56:ac:7c:38:b4:
                    54:04:3d:08:3b:5d:bc:ee:73:a0:57:a6:a3:5f:3b:
                    96:c7:7c:ba:b2:e6:8f:60:d1:85:9a:63:e0:6a:1e:
                    d0:ef:1c:4d:e9:3a:c8:57:4d:7c:b9:46:19:76:c5:
                    7d:bc:fb:c8:17:f8:a4:fe:91:7c:89:67:1c:82:9b:
                    73:a7:38:ba:52:20:f5:51:be:19:db:ab:e7:03:8b:
                    54:8c:f0:21:1e:77:7b:37:77:8a:b8:a9:c7:1e:24:
                    54:4a:cd:f9:97:73:d3:c9:66:e2:a8:e5:ca:0a:67:
                    c8:83:8c:04:bb:05:e8:50:0a:26:5f:48:76:01:61:
                    a8:0b:39:07:12:80:1a:c4:ca:e0:82:fe:4e:db:00:
                    3f:2b:f4:6c:61:6a:c6:30:f5:16:2c:34:12:17:2d:
                    e7:c0:e8:fc:d9:fb:77:cc:4d:da:cf:e6:3f:6e:1b:
                    b0:15:3c:f8:17:36:b2:39:2e:4b:de:0e:12:80:b9:
                    7d:00:b7:35:77:84:73:eb:bb:39:fe:7a:36:87:0c:
                    62:3a:c9:60:ec:f5:18:a7:b7:d9:cf:b9:73:9f:8f:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:3B:84:42:FB:C2:89:E6:25:96:98:6A:C5:DC:3C:3D:9F:A9:3F
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/LKo7hEL7wonmJZaYasXcPD2fqT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:12:86:c6:d2:94:a9:00:84:d4:37:0e:73:83:c9:07:66:77:
         0c:c3:a4:5e:c5:f5:1e:20:13:bf:26:3d:23:07:48:bd:b4:e2:
         6c:91:8f:12:bd:7c:0e:d6:ba:70:6f:1f:49:a2:bb:7a:e4:f0:
         af:c5:52:fd:00:a9:f9:24:ff:6d:f0:77:a5:ff:56:6b:d8:ff:
         60:35:f5:7f:bc:c1:3f:bf:be:ae:0e:6e:06:43:27:d5:33:57:
         61:1f:11:1b:20:88:e3:28:1f:fc:a3:88:c5:69:af:42:0e:65:
         92:a5:fc:83:7a:60:5c:39:ce:f7:77:e6:14:43:71:12:fb:33:
         a0:ae:e5:ab:e8:6d:dc:10:c8:e4:7e:88:69:5b:79:7d:7d:f5:
         9a:7d:11:90:a9:1c:2a:bb:5f:69:7c:7d:84:50:f7:1c:67:56:
         ff:46:72:42:b8:1b:b8:09:68:46:db:af:2d:8d:20:d2:19:f6:
         2f:c5:61:2b:bf:98:a7:3b:36:bf:86:ad:d8:a4:47:2d:97:9f:
         40:0e:02:e3:5a:0c:79:9d:fb:e5:3d:4f:49:88:15:4e:76:fe:
         d1:5c:b7:16:cb:55:00:65:d2:d1:45:5b:53:24:4c:66:4a:a3:
         06:d6:e3:63:19:c4:2c:09:4b:f0:77:72:65:17:59:a9:f3:60:
         82:48:58:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBY0IQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
M2VjZjEwYjg4N2YwODU4ODdkZThiMmRiNjQ5MTdlZTJlNDI0NTQ1MB4XDTIyMDYy
NjEzMzIyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmNhYTNiODQ0MmZi
YzI4OWU2MjU5Njk4NmFjNWRjM2MzZDlmYTkzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJs2emAY01rJQRBxc7k/SndjyfyE5A9xDSx2rVZOoMNJxxBw
9cHJ0lasfDi0VAQ9CDtdvO5zoFemo187lsd8urLmj2DRhZpj4Goe0O8cTek6yFdN
fLlGGXbFfbz7yBf4pP6RfIlnHIKbc6c4ulIg9VG+Gdur5wOLVIzwIR53ezd3irip
xx4kVErN+Zdz08lm4qjlygpnyIOMBLsF6FAKJl9IdgFhqAs5BxKAGsTK4IL+TtsA
Pyv0bGFqxjD1Fiw0Ehct58Do/Nn7d8xN2s/mP24bsBU8+Bc2sjkuS94OEoC5fQC3
NXeEc+u7Of56NocMYjrJYOz1GKe32c+5c5+PascCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQsqjuEQvvCieYllphqxdw8PZ+pPzAfBgNVHSMEGDAWgBQT7PELiH8IWIfe
iy22SRfuLkJFRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0UtenhDNGhfQ0ZpSDNvc3R0a2tYN2k1Q1JVVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8x
L0xLbzdoRUw3d29ubUpaYVlhc1hjUEQyZnFUOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8xL0UtenhDNGhfQ0Zp
SDNvc3R0a2tYN2k1Q1JVVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2UjTANBgkqhkiG9w0BAQsFAAOC
AQEAYhKGxtKUqQCE1DcOc4PJB2Z3DMOkXsX1HiATvyY9IwdIvbTibJGPEr18Dta6
cG8fSaK7euTwr8VS/QCp+ST/bfB3pf9Wa9j/YDX1f7zBP7++rg5uBkMn1TNXYR8R
GyCI4ygf/KOIxWmvQg5lkqX8g3pgXDnO93fmFENxEvszoK7lq+ht3BDI5H6IaVt5
fX31mn0RkKkcKrtfaXx9hFD3HGdW/0ZyQrgbuAloRtuvLY0g0hn2L8VhK7+Ypzs2
v4at2KRHLZefQA4C41oMeZ375T1PSYgVTnb+0Vy3FstVAGXS0UVbUyRMZkqjBtbj
YxnELAlL8HdyZRdZqfNggkhY4w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org