Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eZVmeqv59gLNR1eK-qTiDw8wCj8.roa
File:                     eZVmeqv59gLNR1eK-qTiDw8wCj8.roa (raw, json)
Hash identifier:          pr8hmcEXRngWbQ+yej2RhDMMhN/uERq8DjlitAgBcBM=
Subject key identifier:   79:95:66:7A:AB:F9:F6:02:CD:47:57:8A:FA:A4:E2:0F:0F:30:0A:3F
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       056BB69F
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eZVmeqv59gLNR1eK-qTiDw8wCj8.roa
Signing time:             Thu 16 Jun 2022 19:17:47 +0000
ROA not before:           Thu 16 Jun 2022 19:17:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        45.95.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90945183 (0x56bb69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun 16 19:17:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7995667aabf9f602cd47578afaa4e20f0f300a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:ad:f5:d4:b6:93:1e:18:28:81:64:1b:36:
                    4b:7c:ae:5e:04:e0:d4:1c:58:1c:29:b2:f2:92:7d:
                    58:e5:ee:d7:56:30:4d:ef:2d:2d:4c:26:3a:1d:f1:
                    4c:7e:46:b1:dd:f4:5e:93:ea:0d:50:f0:e6:2e:79:
                    37:51:65:f0:01:20:8a:a4:88:79:0a:0d:f5:03:51:
                    03:e4:62:4f:b7:af:cd:49:65:cf:ca:41:ee:dd:be:
                    1c:a6:3e:96:1a:82:f1:eb:c3:d7:ea:d3:af:ff:ab:
                    56:22:10:89:ca:21:95:44:77:3e:8c:22:ec:c1:da:
                    81:ef:0c:6c:df:26:a6:9b:d4:b9:49:88:09:46:74:
                    ba:6a:75:be:ce:1e:cd:f7:a0:cc:48:e8:d6:bd:92:
                    6f:b9:b0:6f:99:26:af:f8:1f:dd:ff:0e:91:c4:87:
                    b2:f5:02:d6:8d:1b:6d:fb:d3:ee:cc:23:ed:bb:70:
                    f4:b2:b7:bc:8b:f6:6d:6e:05:39:94:2f:ce:f9:dd:
                    79:94:b7:7d:96:d0:8e:89:e3:66:5e:c9:3a:33:8f:
                    b8:75:6f:a9:cb:8b:58:62:1e:0d:78:ae:1a:79:e4:
                    0e:cc:5f:d7:2f:e5:f6:43:b3:17:c7:c4:95:cc:eb:
                    29:a0:0b:2b:10:f6:47:4c:8f:cf:5e:3a:48:49:8e:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:95:66:7A:AB:F9:F6:02:CD:47:57:8A:FA:A4:E2:0F:0F:30:0A:3F
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eZVmeqv59gLNR1eK-qTiDw8wCj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:93:c2:fc:e2:30:c1:94:31:c5:f9:bf:c0:cf:7d:52:1d:
         0c:43:e6:c5:04:ca:4c:fa:e6:1a:e0:59:04:7e:b2:d8:6b:00:
         60:69:75:76:6c:c9:56:71:26:1c:f9:9b:a6:57:19:8b:a2:ca:
         db:bb:26:ed:d1:dc:65:7c:f2:5f:0a:d6:8f:44:b5:47:7d:e9:
         73:c6:59:af:db:60:ce:8d:92:44:9c:b0:30:e9:bc:fc:b2:95:
         9b:54:05:23:a4:b5:64:77:1b:d0:ca:c8:60:7e:7e:de:57:69:
         3e:60:cf:21:3a:bd:77:79:08:ab:13:ad:d2:4e:6b:51:07:56:
         83:37:c5:cd:9d:b0:25:45:5a:f7:d1:db:d1:d3:27:75:9f:74:
         17:b8:e8:e9:a3:67:3d:bc:1e:f8:79:b8:d1:9e:23:19:23:0a:
         21:02:72:6b:80:24:10:97:d2:4e:04:71:06:f9:19:1b:4f:d5:
         20:04:dc:fd:ed:ad:25:07:11:37:eb:cc:ce:e7:87:13:ed:42:
         16:6c:b8:82:79:15:81:41:ae:9e:e7:a2:56:6c:78:f3:ac:f8:
         33:61:56:ec:16:a5:54:93:d5:7f:45:35:58:38:72:c7:9d:70:
         ec:d0:74:7e:44:00:6d:fa:ea:62:89:00:69:0a:0e:88:e2:9d:
         9c:14:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org