Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/wttu7M2qXf55MuYMKR25xUG70r8.roa
File:                     wttu7M2qXf55MuYMKR25xUG70r8.roa (raw, json)
Hash identifier:          RknfYtI4HUtuo8jECYOZR++0RdP8lLBH/ENHCJfmCco=
Subject key identifier:   C2:DB:6E:EC:CD:AA:5D:FE:79:32:E6:0C:29:1D:B9:C5:41:BB:D2:BF
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0568D0CA
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/wttu7M2qXf55MuYMKR25xUG70r8.roa
Signing time:             Thu 16 Jun 2022 06:57:44 +0000
ROA not before:           Thu 16 Jun 2022 06:57:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147003
IP address blocks:        45.88.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90755274 (0x568d0ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun 16 06:57:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2db6eeccdaa5dfe7932e60c291db9c541bbd2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:39:f7:3b:81:d9:c8:cf:d3:c5:34:8d:ea:
                    85:c8:51:c0:e8:cf:2f:1b:0e:06:86:80:e5:30:1e:
                    ed:64:97:60:33:8a:ff:e7:93:ef:5f:2c:c1:ad:2e:
                    52:e8:4b:ef:1d:63:4d:2e:fa:e9:4c:f8:a0:c9:95:
                    87:cb:ce:df:25:0f:b5:b1:ed:0e:55:d8:94:65:54:
                    48:7b:6c:2a:1e:59:6f:92:51:72:7e:0c:4b:6d:46:
                    fa:ab:eb:98:54:45:f3:cc:7f:45:fb:d3:2e:0a:eb:
                    71:b0:83:be:5b:81:00:05:79:64:cc:6e:29:a0:2c:
                    52:e5:65:83:83:40:4c:f2:ac:72:5c:1c:b2:58:11:
                    46:0c:33:6f:ae:08:c7:6d:2d:9a:25:e7:95:2d:4b:
                    a2:a7:50:89:32:be:f5:82:7b:f2:0e:97:c0:5b:a2:
                    6f:5a:f1:6b:be:c3:56:33:a4:c6:93:6a:a9:d9:5f:
                    79:d7:5e:4c:f2:cb:78:8e:92:32:b0:f1:76:d4:ba:
                    89:b1:1d:a3:19:20:5d:aa:fc:88:e4:85:cc:a5:11:
                    cc:64:d2:58:44:4f:09:b1:cb:dc:d3:17:6b:36:28:
                    37:f7:d4:06:03:d0:d5:81:cd:37:7e:9e:35:34:f3:
                    55:1d:b4:8a:ca:ab:61:72:3e:7d:7a:9e:1b:ec:76:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DB:6E:EC:CD:AA:5D:FE:79:32:E6:0C:29:1D:B9:C5:41:BB:D2:BF
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/wttu7M2qXf55MuYMKR25xUG70r8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:76:c6:54:44:d0:66:cf:d8:97:f2:e2:f9:4b:0c:62:0b:
         0b:7f:80:99:d7:9b:99:d1:05:c1:26:5e:4e:c7:17:f3:a4:6a:
         dc:59:13:30:1a:4a:e5:cd:84:f4:a9:46:d5:5d:6a:10:b6:5b:
         09:2e:16:9d:ac:cd:82:d3:49:eb:a0:03:3b:83:3e:e9:99:27:
         0f:50:e0:b4:28:a3:e0:21:3c:57:0c:68:2e:34:c7:da:ee:7c:
         54:97:5c:cf:90:43:cf:31:fd:2c:de:bc:f0:b0:bd:ea:86:f5:
         de:bd:05:f4:5c:35:12:b4:e5:48:17:30:26:3c:38:bc:1f:e3:
         61:bf:79:6d:cd:31:7c:13:04:a8:27:a9:ed:cd:3f:b5:24:64:
         85:10:00:21:34:28:8b:51:f2:05:19:3e:d9:45:59:a8:ac:15:
         76:51:1b:45:d7:16:e9:2f:bf:50:02:10:41:f9:5f:94:d4:8e:
         a9:5d:30:b6:0f:0c:19:85:76:6d:f4:35:97:42:65:39:9b:83:
         6f:79:1f:a3:a2:b9:0a:1d:4f:95:19:e9:d9:7e:e7:f1:74:15:
         1d:61:81:40:26:53:a7:5d:6c:47:3b:82:e0:82:6e:4f:dd:7a:
         00:b4:c7:d4:9e:b1:94:12:20:8e:e3:52:fb:42:0f:a4:67:5c:
         35:6f:85:b1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBWjQyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
M2VjZjEwYjg4N2YwODU4ODdkZThiMmRiNjQ5MTdlZTJlNDI0NTQ1MB4XDTIyMDYx
NjA2NTc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzJkYjZlZWNjZGFh
NWRmZTc5MzJlNjBjMjkxZGI5YzU0MWJiZDJiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAiOfc7gdnIz9PFNI3qhchRwOjPLxsOBoaA5TAe7WSXYDOK
/+eT718swa0uUuhL7x1jTS766Uz4oMmVh8vO3yUPtbHtDlXYlGVUSHtsKh5Zb5JR
cn4MS21G+qvrmFRF88x/RfvTLgrrcbCDvluBAAV5ZMxuKaAsUuVlg4NATPKsclwc
slgRRgwzb64Ix20tmiXnlS1LoqdQiTK+9YJ78g6XwFuib1rxa77DVjOkxpNqqdlf
eddeTPLLeI6SMrDxdtS6ibEdoxkgXar8iOSFzKURzGTSWERPCbHL3NMXazYoN/fU
BgPQ1YHNN36eNTTzVR20isqrYXI+fXqeG+x2JXMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTC227szapd/nky5gwpHbnFQbvSvzAfBgNVHSMEGDAWgBQT7PELiH8IWIfe
iy22SRfuLkJFRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0UtenhDNGhfQ0ZpSDNvc3R0a2tYN2k1Q1JVVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8x
L3d0dHU3TTJxWGY1NU11WU1LUjI1eFVHNzByOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8xL0UtenhDNGhfQ0Zp
SDNvc3R0a2tYN2k1Q1JVVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1YCzANBgkqhkiG9w0BAQsFAAOC
AQEABaV2xlRE0GbP2Jfy4vlLDGILC3+AmdebmdEFwSZeTscX86Rq3FkTMBpK5c2E
9KlG1V1qELZbCS4WnazNgtNJ66ADO4M+6ZknD1DgtCij4CE8VwxoLjTH2u58VJdc
z5BDzzH9LN688LC96ob13r0F9Fw1ErTlSBcwJjw4vB/jYb95bc0xfBMEqCep7c0/
tSRkhRAAITQoi1HyBRk+2UVZqKwVdlEbRdcW6S+/UAIQQflflNSOqV0wtg8MGYV2
bfQ1l0JlOZuDb3kfo6K5Ch1PlRnp2X7n8XQVHWGBQCZTp11sRzuC4IJuT916ALTH
1J6xlBIgjuNS+0IPpGdcNW+FsQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org