Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/qcbA5BXerrjXR6yXaBTLuWZcofo.roa
File:                     qcbA5BXerrjXR6yXaBTLuWZcofo.roa (raw, json)
Hash identifier:          v/S7vTbhcwpCtSOqGDDr9RuTd7dKWaqzepxl2cZZZYw=
Subject key identifier:   A9:C6:C0:E4:15:DE:AE:B8:D7:47:AC:97:68:14:CB:B9:66:5C:A1:FA
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0183880B592D88EE029891FCC147082BCA82
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/qcbA5BXerrjXR6yXaBTLuWZcofo.roa
Signing time:             Thu 29 Sep 2022 06:59:48 +0000
ROA not before:           Thu 29 Sep 2022 06:59:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.95.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:88:0b:59:2d:88:ee:02:98:91:fc:c1:47:08:2b:ca:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Sep 29 06:59:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9c6c0e415deaeb8d747ac976814cbb9665ca1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:f0:5d:b4:4f:59:da:5e:a8:91:77:2f:e7:
                    36:eb:70:dd:ad:b1:93:ab:f6:5a:44:89:27:93:66:
                    58:cc:de:0d:f3:da:97:88:cd:43:f1:67:3c:57:eb:
                    cf:16:65:dc:f3:b0:88:80:6d:dd:12:ec:f5:55:2b:
                    4c:fd:c4:c4:e6:d7:49:09:61:94:95:81:be:46:3c:
                    7f:00:6c:fd:f2:50:f6:61:d0:49:88:ac:c8:74:12:
                    f5:24:32:05:6f:80:8f:4c:ad:64:a5:f7:0c:c7:97:
                    1c:10:ea:38:2b:54:03:ef:d9:d5:b3:b4:8b:84:b3:
                    81:a7:c2:93:40:10:1c:b2:e9:d8:b7:26:fd:01:1d:
                    97:15:63:7a:8b:f9:2a:f1:7c:d5:e8:e8:cf:a2:48:
                    8f:30:56:45:b5:3c:83:9d:93:44:46:72:5b:0e:68:
                    19:6a:ee:3d:24:cc:28:99:53:f1:e6:e4:c6:2b:90:
                    e7:ee:c4:73:de:fd:d0:43:2a:51:e8:b4:41:5a:5a:
                    49:ed:ee:b9:82:d5:c4:93:3d:03:69:8b:9a:2f:f6:
                    10:33:c1:c3:71:3d:5e:68:98:39:8c:d7:d9:69:b1:
                    23:39:68:b1:fa:3b:f5:05:fe:75:e9:60:16:e5:3b:
                    2d:80:ed:a5:84:2d:fb:58:d9:81:f4:35:9c:66:38:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:C0:E4:15:DE:AE:B8:D7:47:AC:97:68:14:CB:B9:66:5C:A1:FA
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/qcbA5BXerrjXR6yXaBTLuWZcofo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:09:16:14:c3:34:cb:a6:0e:3d:6b:2d:1b:80:8d:02:a4:db:
         b5:b8:15:4f:f2:2f:2f:46:98:64:4b:1c:64:b9:8d:07:89:c5:
         54:24:34:42:89:f3:9b:59:b4:c0:30:55:6c:c7:8e:44:e2:c7:
         d6:78:73:10:f9:76:8e:59:1a:76:43:8c:e3:96:4b:23:85:3b:
         c6:5a:61:ba:dc:18:73:39:c0:68:50:b9:b5:9f:e9:bd:1a:7d:
         27:06:dd:b2:1b:f9:ea:f7:9b:98:cc:a3:43:10:f5:7b:b0:5b:
         14:87:4b:05:f2:c3:3c:e9:97:85:fe:4b:87:a9:a7:7f:a9:87:
         d5:15:f8:91:77:7a:99:32:d4:05:9d:83:f4:f7:6c:34:9e:4d:
         96:72:dc:ac:58:8b:ea:fc:de:f9:6d:51:62:99:f8:ff:ba:02:
         58:94:0a:94:3d:50:18:07:79:ba:cb:36:b7:f7:09:5b:b5:d9:
         97:36:6d:c7:5d:45:c2:92:f6:d6:b6:57:90:86:49:89:a4:18:
         dd:af:e7:e3:e2:ce:17:aa:93:80:13:b6:b1:7e:5c:ca:30:99:
         2a:03:70:0d:bd:d3:f7:e0:b7:d6:ce:6d:69:df:0a:86:ec:98:
         5d:bb:ad:e8:f9:ff:e4:c8:fe:4d:89:80:15:08:32:d1:2f:35:
         16:20:3e:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOIC1ktiO4CmJH8wUcIK8qCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjIwOTI5MDY1OTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWM2YzBlNDE1ZGVhZWI4ZDc0N2FjOTc2ODE0Y2JiOTY2NWNhMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaDwXbRPWdpeqJF3L+c263DdrbGT
q/ZaRIknk2ZYzN4N89qXiM1D8Wc8V+vPFmXc87CIgG3dEuz1VStM/cTE5tdJCWGU
lYG+Rjx/AGz98lD2YdBJiKzIdBL1JDIFb4CPTK1kpfcMx5ccEOo4K1QD79nVs7SL
hLOBp8KTQBAcsunYtyb9AR2XFWN6i/kq8XzV6OjPokiPMFZFtTyDnZNERnJbDmgZ
au49JMwomVPx5uTGK5Dn7sRz3v3QQypR6LRBWlpJ7e65gtXEkz0DaYuaL/YQM8HD
cT1eaJg5jNfZabEjOWix+jv1Bf516WAW5TstgO2lhC37WNmB9DWcZjiXlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnGwOQV3q6410esl2gUy7lmXKH6MB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvcWNiQTVCWGVycmpYUjZ5WGFCVEx1V1pjb2ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9BMA0G
CSqGSIb3DQEBCwUAA4IBAQBHCRYUwzTLpg49ay0bgI0CpNu1uBVP8i8vRphkSxxk
uY0HicVUJDRCifObWbTAMFVsx45E4sfWeHMQ+XaOWRp2Q4zjlksjhTvGWmG63Bhz
OcBoULm1n+m9Gn0nBt2yG/nq95uYzKNDEPV7sFsUh0sF8sM86ZeF/kuHqad/qYfV
FfiRd3qZMtQFnYP092w0nk2WctysWIvq/N75bVFimfj/ugJYlAqUPVAYB3m6yza3
9wlbtdmXNm3HXUXCkvbWtleQhkmJpBjdr+fj4s4XqpOAE7axflzKMJkqA3ANvdP3
4LfWzm1p3wqG7Jhdu63o+f/kyP5NiYAVCDLRLzUWID7T
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org