Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_i4kbEgnRaObzrIxHLeMfsZzJj0.roa
File:                     _i4kbEgnRaObzrIxHLeMfsZzJj0.roa (raw, json)
Hash identifier:          FXIMt8wDsGKhQbdfCohzo1ncgT4vPY1SHckDqJ4K3wE=
Subject key identifier:   FE:2E:24:6C:48:27:45:A3:9B:CE:B2:31:1C:B7:8C:7E:C6:73:26:3D
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0183E567418B4700810A59D6CC94187A311A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_i4kbEgnRaObzrIxHLeMfsZzJj0.roa
Signing time:             Mon 17 Oct 2022 10:04:52 +0000
ROA not before:           Mon 17 Oct 2022 10:04:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50673
IP address blocks:        45.148.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:67:41:8b:47:00:81:0a:59:d6:cc:94:18:7a:31:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Oct 17 10:04:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe2e246c482745a39bceb2311cb78c7ec673263d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:7c:a9:8c:ab:ff:43:f5:8e:d3:53:c9:3d:
                    dc:e1:a7:06:8a:45:02:34:26:01:29:e1:76:3f:a0:
                    41:15:37:2e:94:a2:d6:0f:d8:5f:7c:6b:c0:fe:52:
                    21:3b:59:6c:f8:06:ee:af:f8:c2:5b:7e:7d:ab:5d:
                    b9:56:df:90:9d:d0:7d:40:98:6d:b3:6c:18:4a:02:
                    66:29:35:49:bb:be:f9:13:28:24:88:b4:3e:d4:a1:
                    99:54:39:52:3b:cd:ca:18:c4:34:01:51:4f:7d:be:
                    6d:dc:f1:54:8e:31:df:7d:59:69:36:13:ff:7f:ad:
                    6a:2f:7e:5f:fb:ac:c3:6a:14:87:3d:da:fd:e4:b2:
                    e4:82:2a:4c:30:30:51:0b:d7:71:cf:40:44:4a:e4:
                    b1:4d:54:9b:14:9b:5d:c0:cf:3f:d0:a3:9e:18:70:
                    20:38:c0:8b:ad:d2:d7:ff:af:c4:c8:ec:34:a1:07:
                    5f:00:ea:ec:c3:69:d8:6b:5d:37:2f:91:ae:d0:b9:
                    22:d9:9c:f4:05:6a:ac:9f:ff:e9:22:ac:f8:7a:50:
                    b8:5d:2b:a6:a3:e8:74:99:1c:8c:c5:9f:fa:5e:82:
                    df:89:5c:41:2e:f7:ad:a9:f6:d8:fb:5e:15:a2:3c:
                    92:c3:92:e6:21:3f:c3:32:fe:5f:4c:6f:87:95:1d:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:24:6C:48:27:45:A3:9B:CE:B2:31:1C:B7:8C:7E:C6:73:26:3D
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_i4kbEgnRaObzrIxHLeMfsZzJj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:0f:dc:ff:de:ad:ec:7a:3a:2f:41:2a:0b:ed:66:26:0d:e5:
         5f:fa:2b:cf:0a:dd:ad:93:61:ba:fe:a6:66:25:c7:0e:ed:12:
         03:ad:70:21:13:48:fa:69:5e:44:d0:b2:8c:fa:c9:5e:19:22:
         d8:41:00:00:11:9b:08:8a:0d:df:d1:98:62:82:51:fa:ad:de:
         13:3d:eb:48:51:96:ea:80:8b:5c:5f:b0:01:ab:4b:ea:89:96:
         bb:04:fe:be:4d:bd:f8:e0:9e:d4:e5:17:65:a1:93:c6:55:19:
         d3:d2:c5:f5:b6:bb:66:8d:eb:57:69:9f:35:9b:c7:33:6e:56:
         ae:16:73:96:e8:37:67:90:54:99:6c:84:df:b5:43:ac:2b:0f:
         61:99:f9:18:e4:87:a7:d9:ca:ff:09:d8:9c:15:78:af:ea:00:
         5a:36:2c:04:1d:e8:9d:68:c4:ec:23:af:70:05:4a:04:4c:11:
         83:a7:2e:c5:10:22:83:1a:c4:cf:f8:80:9d:75:96:f8:71:48:
         a5:fe:bb:d5:61:88:7a:3f:c6:8e:64:83:08:74:f0:41:f2:59:
         70:c6:dc:cf:a4:f5:84:a0:df:1f:49:87:a9:45:e3:21:a3:d9:
         e8:9e:74:be:8c:15:0b:9e:d7:19:83:f9:39:f7:27:dd:60:f1:
         a0:cd:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org