Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/YVCFYxlrhI9a_SP6Uszoz9eQTQA.roa
File:                     YVCFYxlrhI9a_SP6Uszoz9eQTQA.roa (raw, json)
Hash identifier:          dKIO7C0wZvlrjoGRS/mDCn9UalONf5PLrmRJa3iYyF4=
Subject key identifier:   61:50:85:63:19:6B:84:8F:5A:FD:23:FA:52:CC:E8:CF:D7:90:4D:00
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0182911B009CC3E69105098A7A9A0E1F8645
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/YVCFYxlrhI9a_SP6Uszoz9eQTQA.roa
Signing time:             Fri 12 Aug 2022 08:10:41 +0000
ROA not before:           Fri 12 Aug 2022 08:10:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5089
IP address blocks:        45.65.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:91:1b:00:9c:c3:e6:91:05:09:8a:7a:9a:0e:1f:86:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Aug 12 08:10:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61508563196b848f5afd23fa52cce8cfd7904d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:f7:43:c1:74:05:dd:fd:08:51:73:68:92:
                    c2:2d:b8:2a:f0:50:93:56:41:9a:0b:93:19:8b:98:
                    33:52:11:27:7a:8b:1d:b6:47:51:96:35:c5:06:cb:
                    12:42:3f:43:61:77:ef:35:7d:20:a1:ed:0e:f7:fe:
                    ef:cc:75:68:64:fd:37:ea:9d:50:24:e1:51:3a:b6:
                    7f:6a:7e:5f:90:54:47:1b:12:c7:7d:ff:df:1b:55:
                    bc:e8:38:e2:7a:5e:2c:87:30:7f:cb:ca:2f:e4:26:
                    8e:2c:0b:09:30:ff:e9:fa:68:e9:e8:fd:01:2e:06:
                    4e:bf:c9:4e:2b:89:9c:38:79:e1:5f:e0:56:ec:89:
                    c0:42:06:d2:7b:6c:71:b0:8c:02:29:43:79:d7:b0:
                    b0:d4:0e:7f:e2:a1:aa:a8:75:a9:52:c1:79:c5:0a:
                    5f:a4:43:3b:e6:a1:30:7c:7a:13:0e:80:12:3a:dc:
                    99:4a:c0:c2:92:ae:4d:73:f0:ee:66:88:e6:ae:3c:
                    bb:df:27:f6:20:ac:76:46:c1:c0:06:21:bb:42:40:
                    5d:de:8b:19:1c:f2:5b:29:37:0c:8b:63:6c:fa:29:
                    a8:67:03:c0:4a:17:2d:be:4a:43:27:ea:13:c3:55:
                    a7:04:16:62:5a:30:1b:61:64:24:65:48:00:bc:92:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:50:85:63:19:6B:84:8F:5A:FD:23:FA:52:CC:E8:CF:D7:90:4D:00
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/YVCFYxlrhI9a_SP6Uszoz9eQTQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c0:bd:cc:d3:06:de:21:62:a7:f1:3a:9d:01:bc:9e:06:0d:
         0b:51:6c:d4:0b:81:44:d1:e3:11:6a:fc:1e:25:b4:8a:c9:0d:
         d2:20:0e:f6:80:17:b8:bf:99:ca:b5:8f:7c:46:60:27:c4:d9:
         0b:11:e0:7a:36:59:7b:e6:84:0d:10:68:d2:86:cd:1d:8f:4a:
         7e:07:59:91:d7:bc:34:7d:ca:4a:9b:92:96:f0:07:dd:bc:ca:
         34:69:1e:84:c3:f1:ee:37:a7:65:ec:31:17:52:8c:6d:38:b6:
         35:ca:4a:75:2b:e7:d3:b9:9c:c9:95:c5:13:14:71:0c:db:0f:
         b0:2e:93:6c:32:97:38:e4:20:75:40:b5:e9:51:0c:d5:54:ba:
         9a:66:e5:f8:cf:3d:65:6e:ab:84:3e:e6:26:0a:0f:0f:46:93:
         8c:9c:bb:71:e8:0f:9f:9e:35:93:b9:27:6c:11:eb:7c:27:6a:
         2e:73:08:e3:f3:56:bf:61:a6:ce:5e:cc:16:a1:22:48:5f:fc:
         af:94:2e:ce:b1:41:d4:ab:3a:65:5e:e4:24:1c:03:4e:62:b4:
         57:f3:d6:ba:b2:f4:21:22:8d:d8:30:40:68:a3:c1:62:11:96:
         fd:e4:48:c2:4e:69:5b:7c:db:7a:32:5f:5d:78:5c:17:53:86:
         03:8d:86:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKRGwCcw+aRBQmKepoOH4ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIwODEyMDgxMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTUwODU2MzE5NmI4NDhmNWFmZDIzZmE1MmNjZThjZmQ3OTA0ZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnf3Q8F0Bd39CFFzaJLCLbgq8FCT
VkGaC5MZi5gzUhEneosdtkdRljXFBssSQj9DYXfvNX0goe0O9/7vzHVoZP036p1Q
JOFROrZ/an5fkFRHGxLHff/fG1W86Djiel4shzB/y8ov5CaOLAsJMP/p+mjp6P0B
LgZOv8lOK4mcOHnhX+BW7InAQgbSe2xxsIwCKUN517Cw1A5/4qGqqHWpUsF5xQpf
pEM75qEwfHoTDoASOtyZSsDCkq5Nc/DuZojmrjy73yf2IKx2RsHABiG7QkBd3osZ
HPJbKTcMi2Ns+imoZwPAShctvkpDJ+oTw1WnBBZiWjAbYWQkZUgAvJL1UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFQhWMZa4SPWv0j+lLM6M/XkE0AMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvWVZDRll4bHJoSTlhX1NQNlVzem96OWVRVFFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUF0MA0G
CSqGSIb3DQEBCwUAA4IBAQA3wL3M0wbeIWKn8TqdAbyeBg0LUWzUC4FE0eMRavwe
JbSKyQ3SIA72gBe4v5nKtY98RmAnxNkLEeB6Nll75oQNEGjShs0dj0p+B1mR17w0
fcpKm5KW8AfdvMo0aR6Ew/HuN6dl7DEXUoxtOLY1ykp1K+fTuZzJlcUTFHEM2w+w
LpNsMpc45CB1QLXpUQzVVLqaZuX4zz1lbquEPuYmCg8PRpOMnLtx6A+fnjWTuSds
Eet8J2oucwjj81a/YabOXswWoSJIX/yvlC7OsUHUqzplXuQkHANOYrRX89a6svQh
Io3YMEBoo8FiEZb95EjCTmlbfNt6Ml9deFwXU4YDjYYO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org