Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/i1H_2HbCBPIhzaOMfw5sWvCdzHM.roa
File:                     i1H_2HbCBPIhzaOMfw5sWvCdzHM.roa (raw, json)
Hash identifier:          OTh7z9q89/U2b1TClNMTK6rULxrs1DWex3yucMe9EhM=
Subject key identifier:   8B:51:FF:D8:76:C2:04:F2:21:CD:A3:8C:7F:0E:6C:5A:F0:9D:CC:73
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0183FF94E65125DAA4ECC66AC52AAF32D2D8
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/i1H_2HbCBPIhzaOMfw5sWvCdzHM.roa
Signing time:             Sat 22 Oct 2022 12:04:51 +0000
ROA not before:           Sat 22 Oct 2022 12:04:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24875
IP address blocks:        45.148.140.0/24 maxlen: 24
                          45.88.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ff:94:e6:51:25:da:a4:ec:c6:6a:c5:2a:af:32:d2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Oct 22 12:04:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b51ffd876c204f221cda38c7f0e6c5af09dcc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:86:19:cc:d0:65:19:cc:35:bb:2c:b0:e4:
                    21:bf:2d:4a:69:20:f3:9d:d4:16:43:70:82:98:09:
                    be:29:01:08:46:20:c6:4e:49:da:41:cd:13:65:a3:
                    2e:4e:b0:17:17:f6:9e:58:3b:63:f9:f0:54:9f:67:
                    c3:39:56:9c:1c:14:4c:12:e6:cb:33:a9:93:b3:62:
                    c5:8f:2b:cc:e5:ff:df:da:19:ff:e1:5f:55:3e:4d:
                    b1:1f:2c:b9:0e:68:08:e3:4d:3e:8b:d0:f8:ad:1d:
                    0e:6d:13:3f:74:51:1d:7c:08:1e:16:cf:f8:5b:9b:
                    fe:b1:28:8d:ea:4a:0a:ef:d3:79:8e:9d:01:0c:d9:
                    e6:2a:f5:6e:dc:23:a7:e1:e9:78:9b:78:9d:8d:fb:
                    91:21:1d:d9:2b:a4:65:0c:58:34:21:37:66:db:03:
                    14:7e:4c:91:f4:91:3f:9e:d6:ec:08:d7:39:2a:b9:
                    99:c9:70:f9:e3:69:6a:66:af:64:b5:cf:fb:84:4e:
                    c1:1c:73:c5:d2:cb:ae:d9:1a:c4:e1:ce:21:b4:e3:
                    4b:ed:b0:72:62:77:72:28:d5:71:17:ee:08:88:d3:
                    29:11:bf:9d:43:cb:ee:18:a0:dc:c2:01:a2:0c:5f:
                    0b:3a:68:c4:b7:12:7b:fa:1b:2e:12:ca:c7:0f:37:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:51:FF:D8:76:C2:04:F2:21:CD:A3:8C:7F:0E:6C:5A:F0:9D:CC:73
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/i1H_2HbCBPIhzaOMfw5sWvCdzHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.8.0/24
                  45.148.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:f7:e4:8f:a9:0d:3a:44:24:e6:71:10:5d:32:d3:7b:8f:
         cd:4e:f9:89:f3:14:f7:1e:2d:a7:98:b1:4f:31:b0:da:db:f0:
         d2:90:8c:8d:2a:57:0b:02:8a:28:0f:0d:4a:2d:de:8b:73:ae:
         d1:a5:9b:56:2b:a0:39:1f:01:34:b9:ec:f2:16:ab:2c:7d:60:
         a7:8e:4e:bb:a2:53:11:d4:57:36:d0:de:d4:1e:82:64:7f:8c:
         19:41:b3:95:49:e8:d7:2b:d8:27:b0:16:79:da:a5:1f:a6:fc:
         6f:d3:bc:2c:30:c6:fe:7a:fe:4e:52:75:32:96:b6:68:38:b3:
         73:d5:61:6d:8a:9d:f2:4b:0f:19:b4:4c:a6:3c:39:a8:cc:da:
         11:38:92:5a:31:c8:48:60:53:78:77:ab:96:7b:10:37:f5:e7:
         ff:aa:30:2a:b7:e9:ee:19:58:3c:35:5d:3e:42:e9:b9:9a:00:
         59:28:7a:0a:9b:6f:7e:20:26:85:38:54:c9:f9:5d:44:f8:07:
         13:94:6a:21:a9:82:e6:5b:95:db:87:ac:c2:64:ce:5d:20:ff:
         23:7f:ec:8c:01:98:72:20:c6:86:14:69:59:9e:91:90:b9:89:
         0f:ad:9f:2b:65:97:38:8d:3e:e9:02:8a:59:0a:87:96:a2:43:
         0e:b7:4e:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYP/lOZRJdqk7MZqxSqvMtLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIxMDIyMTIwNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjUxZmZkODc2YzIwNGYyMjFjZGEzOGM3ZjBlNmM1YWYwOWRjYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln2GGczQZRnMNbsssOQhvy1KaSDz
ndQWQ3CCmAm+KQEIRiDGTknaQc0TZaMuTrAXF/aeWDtj+fBUn2fDOVacHBRMEubL
M6mTs2LFjyvM5f/f2hn/4V9VPk2xHyy5DmgI400+i9D4rR0ObRM/dFEdfAgeFs/4
W5v+sSiN6koK79N5jp0BDNnmKvVu3COn4el4m3idjfuRIR3ZK6RlDFg0ITdm2wMU
fkyR9JE/ntbsCNc5KrmZyXD542lqZq9ktc/7hE7BHHPF0suu2RrE4c4htONL7bBy
YndyKNVxF+4IiNMpEb+dQ8vuGKDcwgGiDF8LOmjEtxJ7+hsuEsrHDzcu1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFItR/9h2wgTyIc2jjH8ObFrwncxzMB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvaTFIXzJIYkNCUEloemFPTWZ3NXNXdkNkekhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgIAwQA
LZSMMA0GCSqGSIb3DQEBCwUAA4IBAQBh0vfkj6kNOkQk5nEQXTLTe4/NTvmJ8xT3
Hi2nmLFPMbDa2/DSkIyNKlcLAoooDw1KLd6Lc67RpZtWK6A5HwE0uezyFqssfWCn
jk67olMR1Fc20N7UHoJkf4wZQbOVSejXK9gnsBZ52qUfpvxv07wsMMb+ev5OUnUy
lrZoOLNz1WFtip3ySw8ZtEymPDmozNoROJJaMchIYFN4d6uWexA39ef/qjAqt+nu
GVg8NV0+Qum5mgBZKHoKm29+ICaFOFTJ+V1E+AcTlGohqYLmW5Xbh6zCZM5dIP8j
f+yMAZhyIMaGFGlZnpGQuYkPrZ8rZZc4jT7pAopZCoeWokMOt07Z
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org