Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Weqwuy1y1d4rhykFo6BWaLse8UE.roa
File:                     Weqwuy1y1d4rhykFo6BWaLse8UE.roa (raw, json)
Hash identifier:          eCX5oJmAQ16JN6OXAzjD9nOGnfqAzhQ54qnFaPD/OFw=
Subject key identifier:   59:EA:B0:BB:2D:72:D5:DE:2B:87:29:05:A3:A0:56:68:BB:1E:F1:41
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0183E5665720DCA3428C60081FCD5B6F3AF6
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Weqwuy1y1d4rhykFo6BWaLse8UE.roa
Signing time:             Mon 17 Oct 2022 10:03:52 +0000
ROA not before:           Mon 17 Oct 2022 10:03:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        45.148.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:66:57:20:dc:a3:42:8c:60:08:1f:cd:5b:6f:3a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Oct 17 10:03:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59eab0bb2d72d5de2b872905a3a05668bb1ef141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:9a:b6:23:0e:95:4a:5c:d2:01:8a:62:35:
                    8e:f1:6a:65:75:b9:ac:20:f7:7d:47:8a:9b:eb:bf:
                    00:76:32:92:75:3a:09:fd:ed:bf:40:01:92:83:bb:
                    b3:98:07:b8:81:c3:e5:80:02:a5:07:ad:47:b4:5f:
                    c5:52:47:93:68:f1:0f:99:b8:31:a9:f1:37:ec:44:
                    eb:4a:79:80:34:60:7d:38:5c:76:3e:f4:a3:04:22:
                    34:61:07:94:90:41:5a:8b:2f:d0:f2:dc:32:87:a1:
                    89:67:8c:fb:c3:90:10:1e:3c:22:95:31:b6:f5:10:
                    b4:a3:3e:37:f2:fb:e2:d7:01:bd:6d:83:6f:97:ea:
                    7e:e4:66:b2:47:fb:c3:1c:33:1d:68:11:6a:09:c0:
                    7f:62:24:f6:dd:e1:d4:3d:a3:b8:5c:2b:48:e9:5a:
                    1b:c0:a5:72:d3:5a:8d:a5:de:af:e8:91:73:a8:9a:
                    2a:58:a0:da:b4:df:d8:eb:7e:84:40:52:07:e2:36:
                    a1:f7:b1:d1:ce:a3:5a:60:93:3b:b4:12:9f:da:a6:
                    a5:4b:a1:d6:fd:c4:1f:e2:9a:ca:56:6d:4d:b7:d5:
                    9a:50:ef:1f:43:bd:5f:7d:23:62:f2:d2:50:83:6a:
                    ca:49:6f:81:9c:8c:1a:2a:65:c7:89:ff:ed:24:09:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EA:B0:BB:2D:72:D5:DE:2B:87:29:05:A3:A0:56:68:BB:1E:F1:41
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Weqwuy1y1d4rhykFo6BWaLse8UE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:70:5c:ae:27:98:ba:77:44:ed:f5:94:a1:df:4e:7c:74:14:
         a0:9c:47:86:0a:ca:de:fb:67:27:55:a6:d2:13:31:85:71:8e:
         40:41:a5:b8:98:ce:09:7f:75:3f:3a:a9:31:65:8e:21:0f:29:
         7d:3b:45:8b:17:bb:0e:c9:2c:c6:ad:73:12:82:be:28:bd:9c:
         4c:74:be:6e:d7:9c:37:38:1b:c9:7d:de:d1:46:a8:65:02:61:
         eb:84:73:a1:49:7b:55:4c:25:33:55:58:35:9a:e8:f0:b9:78:
         33:a8:07:06:33:3e:56:58:18:21:a9:50:7d:fe:2a:c6:d8:9c:
         fa:c3:7f:b1:4d:3f:e6:7a:cd:51:8b:9c:b2:6d:ab:aa:03:bd:
         72:6b:d3:67:ac:d0:2a:57:86:a8:06:72:13:8c:10:7f:07:64:
         1e:84:ae:99:15:08:92:be:7a:d2:d7:a4:17:ca:bb:ab:d1:6b:
         7d:ff:f5:fc:2d:a2:89:e3:a3:b4:e6:36:fc:2f:4f:7e:c3:47:
         47:b7:24:3a:fd:c7:8b:e8:03:4b:48:69:82:9a:71:03:2a:ab:
         20:0a:cd:de:ed:d3:33:d7:b1:37:e8:fe:4f:7d:ea:e9:67:1a:
         87:63:69:f3:b0:bd:f9:fb:16:2e:42:a8:f1:d8:25:ef:6f:d9:
         4a:44:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org