Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa
File:                     V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa (raw, json)
Hash identifier:          Smp3dos1rOqn7cAJgotNjFK9BTZ2MYIOWQqflfa52VA=
Subject key identifier:   57:E4:B8:E2:7E:C0:F6:12:73:F6:B2:09:2B:F4:7A:C0:84:67:61:64
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       018262DA32CC8B7D3336A95D27F86C99CE51
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa
Signing time:             Wed 03 Aug 2022 08:37:23 +0000
ROA not before:           Wed 03 Aug 2022 08:37:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210546
IP address blocks:        45.148.141.0/24 maxlen: 24
                          45.95.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:62:da:32:cc:8b:7d:33:36:a9:5d:27:f8:6c:99:ce:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Aug  3 08:37:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57e4b8e27ec0f61273f6b2092bf47ac084676164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:b3:c1:e6:e2:20:3a:ac:9e:27:30:54:2f:
                    13:2d:0c:97:dd:aa:22:fa:60:81:52:09:06:31:23:
                    1b:ba:f8:2f:26:65:bd:5a:32:57:74:7b:fb:5c:e8:
                    d2:e2:52:e9:13:29:1c:b9:31:ec:89:f5:9d:13:cd:
                    ad:4d:1e:73:fe:f6:8c:38:bb:aa:8c:4a:88:c6:d8:
                    76:ee:71:f1:01:85:ea:55:59:67:20:e8:2e:ca:15:
                    a7:9c:b2:a6:54:0b:da:06:8b:8d:d9:73:2e:31:11:
                    c1:98:b4:4a:11:22:52:81:5f:fe:53:a9:a1:11:7b:
                    8f:f8:11:93:4b:be:77:2a:e3:12:2a:45:28:77:94:
                    e8:74:13:00:8f:53:62:17:93:f0:4b:48:3e:9f:15:
                    42:c2:0f:3d:70:ea:92:0f:27:db:9a:1b:59:e3:19:
                    ef:39:1d:7f:a2:84:71:49:bd:1f:de:57:95:db:9c:
                    b8:e8:08:5a:e8:be:18:5d:7b:88:66:00:bf:0e:71:
                    db:f1:bc:06:ee:2e:dc:64:2d:af:55:5a:20:ef:c2:
                    30:9e:48:b6:f0:58:13:61:47:7d:01:4e:dd:15:48:
                    f3:42:84:3d:14:09:de:23:9f:75:69:88:a0:6a:c7:
                    40:96:1b:e4:a8:0a:1d:8b:98:31:ae:4c:0b:e7:49:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E4:B8:E2:7E:C0:F6:12:73:F6:B2:09:2B:F4:7A:C0:84:67:61:64
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.67.0/24
                  45.148.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:a9:77:f3:94:f5:b1:4e:49:60:7b:ad:77:86:ab:27:32:
         d8:cf:ac:7e:e3:da:12:50:f7:0f:bf:b5:0f:19:ac:bc:2c:2a:
         98:1f:a7:52:1b:3e:68:1d:88:a1:b6:ab:9d:91:a0:e4:cb:c4:
         10:45:2f:01:2c:6c:53:d4:da:b8:94:15:27:b8:f2:74:a8:a9:
         0a:31:7a:ef:ff:0d:f8:9b:00:86:2a:f4:0a:f1:b3:ae:1a:62:
         37:0a:c2:59:b5:3e:aa:34:f0:65:43:d9:cf:bc:3f:44:00:25:
         5c:36:f0:dc:32:54:46:e2:55:27:d3:09:d8:49:c9:ff:c1:d1:
         6b:bc:7e:d2:bb:ff:1f:cb:93:df:ae:73:c4:73:26:1b:b8:fc:
         83:7a:c3:84:61:3f:30:33:e4:34:22:d4:ec:07:2d:6c:fc:80:
         a6:66:4a:94:47:3f:61:c1:5e:3d:b2:b3:dc:ef:05:1f:66:52:
         b9:34:36:d9:5c:31:bf:cb:d1:5c:07:50:13:3b:4c:b1:37:49:
         8c:5d:cd:53:6a:d6:e8:59:2e:f6:bf:a7:6a:6e:0e:65:60:95:
         48:75:66:62:b2:a7:de:d7:44:40:3d:ab:ff:49:85:ab:0a:85:
         17:28:74:01:53:45:aa:5d:6a:3c:ac:1e:58:ba:b8:4f:68:08:
         82:69:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org