Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/l_uwiVttwgIAJrqHwg7ypAboNuQ.roa
File:                     l_uwiVttwgIAJrqHwg7ypAboNuQ.roa (raw, json)
Hash identifier:          rwzGGTulPpH1qtyyS/MFkU/iLqB+4y3vXAQFs6baHg8=
Subject key identifier:   97:FB:B0:89:5B:6D:C2:02:00:26:BA:87:C2:0E:F2:A4:06:E8:36:E4
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0183880899F47A67696434B2FC75C12316B7
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/l_uwiVttwgIAJrqHwg7ypAboNuQ.roa
Signing time:             Thu 29 Sep 2022 06:56:48 +0000
ROA not before:           Thu 29 Sep 2022 06:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        45.88.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:88:08:99:f4:7a:67:69:64:34:b2:fc:75:c1:23:16:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Sep 29 06:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97fbb0895b6dc2020026ba87c20ef2a406e836e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:2b:27:6a:d9:83:e1:5f:4f:f3:da:d3:8f:
                    40:71:32:ce:6f:99:cf:b2:26:bd:cb:65:33:20:7d:
                    dd:4b:49:87:6c:ba:9d:12:dc:ab:08:f9:a7:cd:98:
                    0c:7f:a7:bc:b6:62:05:5b:f1:c5:ed:61:57:10:4c:
                    f3:b0:53:93:9e:81:9b:02:11:5e:16:bf:0a:47:2d:
                    38:7d:11:d2:53:db:d7:80:3b:26:d9:d9:36:87:3c:
                    1f:9b:1f:30:9e:e9:d1:30:ad:ad:8c:9a:6c:64:4d:
                    3b:1c:18:21:85:f5:0a:54:e0:d7:8f:f7:ad:b7:28:
                    e0:1e:ff:4a:70:49:64:7a:74:6a:5f:30:81:b0:6b:
                    b3:d9:e1:ee:46:ea:fc:3e:e8:12:1f:5c:87:2a:5b:
                    39:77:67:f9:8a:b0:99:ea:62:b9:ec:a8:6b:7f:0e:
                    88:d6:15:f1:df:5c:3b:49:a7:4e:77:d0:eb:62:94:
                    6f:b3:ce:f8:70:fe:8a:0f:8a:c5:ce:08:f5:68:d4:
                    35:0c:e7:90:d7:1c:94:25:d2:fb:31:01:b9:c9:3a:
                    1a:c4:9c:83:9c:ed:38:22:d8:3e:1f:f1:87:64:6a:
                    3b:81:c3:de:85:5e:5c:98:95:38:d9:14:97:bb:73:
                    9b:4f:83:c9:8f:b7:47:dc:91:77:3f:98:1a:79:a2:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:B0:89:5B:6D:C2:02:00:26:BA:87:C2:0E:F2:A4:06:E8:36:E4
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/l_uwiVttwgIAJrqHwg7ypAboNuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:8d:c1:e8:40:6b:84:b9:1e:a4:74:6d:e8:43:ef:91:ec:
         39:00:4e:cc:b9:bf:03:3d:53:5f:75:a4:ca:cb:fe:a9:72:00:
         36:1b:1a:64:1e:b6:66:5c:c4:95:5b:02:19:9a:1b:65:6d:60:
         b0:77:4e:9a:ff:42:39:d1:45:e6:f4:4b:38:87:7c:b0:35:86:
         f9:9a:85:e4:40:b8:ea:43:e5:8f:4a:0a:6a:40:be:5f:2a:f1:
         30:3b:bc:7e:1d:ba:05:68:e5:92:d2:fb:f7:6f:97:8d:4e:8f:
         62:b5:70:2c:bc:bb:4d:47:93:ca:1e:14:c9:46:75:f9:f3:52:
         c5:26:ae:4c:e8:2d:a7:13:3f:ea:62:58:80:e6:fb:b3:b1:8d:
         0c:64:e4:5f:35:e8:3f:0b:f8:99:ae:8a:1a:07:8e:5c:bf:3f:
         ad:fc:96:88:aa:7e:fd:18:bb:a9:7b:ec:05:48:db:4e:ad:2f:
         21:59:e7:75:ca:ab:2f:71:99:7d:de:69:e2:c3:ef:85:73:a5:
         e2:53:c4:4e:2c:a1:f3:e9:33:96:4f:b2:82:f4:4f:f5:df:1a:
         d2:dc:c1:18:16:e6:4f:05:d7:73:85:b7:7a:74:a7:ea:4a:60:
         c6:20:e7:1d:a9:1e:53:46:f5:34:b3:46:2a:a2:73:ff:21:bf:
         66:79:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org