Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/xl_yJNCwUortL8qqaqD3ZD4xJk8.roa
File:                     xl_yJNCwUortL8qqaqD3ZD4xJk8.roa (raw, json)
Hash identifier:          4FgTAx3CRYSCmXJYH9IqXtVghGcOhijcbbxodwvXH1E=
Subject key identifier:   C6:5F:F2:24:D0:B0:52:8A:ED:2F:CA:AA:6A:A0:F7:64:3E:31:26:4F
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       052A51DA
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/xl_yJNCwUortL8qqaqD3ZD4xJk8.roa
Signing time:             Tue 24 May 2022 06:19:30 +0000
ROA not before:           Tue 24 May 2022 06:19:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        45.148.140.0/24 maxlen: 24
                          45.88.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86659546 (0x52a51da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: May 24 06:19:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c65ff224d0b0528aed2fcaaa6aa0f7643e31264f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:a3:d7:dc:fb:83:4a:bd:7a:21:46:45:d1:
                    0e:49:78:e7:7b:2c:d3:96:ce:26:07:77:ee:e9:46:
                    4d:72:38:a6:1e:c6:62:3e:7f:b0:68:43:8a:86:ce:
                    24:c0:4b:4f:15:12:d6:c0:bf:db:d8:24:08:6b:ea:
                    6f:c4:2b:c9:79:f5:6d:c0:e1:fa:50:8f:d8:ec:0b:
                    ec:78:6d:88:ab:98:59:29:fd:6c:b1:26:d5:ff:ff:
                    e3:9d:05:06:2b:f4:1e:98:fa:c6:1e:8b:a9:fa:96:
                    2e:3f:39:2c:20:75:d5:31:22:43:22:b9:52:d3:ff:
                    9e:61:84:74:f8:f7:d6:31:74:e6:91:a4:20:48:2e:
                    e9:07:68:ed:84:66:76:b3:be:e5:ff:e2:d5:fa:a0:
                    3b:23:1b:ec:f4:b7:ff:1e:0c:0f:45:38:93:e7:89:
                    5c:05:3c:35:6c:b2:28:c8:c1:eb:08:f8:7c:e9:bb:
                    3e:60:93:b1:01:64:c5:9b:5b:20:c4:bc:56:ed:b7:
                    82:86:2e:17:e8:d1:9b:3f:49:86:04:bf:53:06:fe:
                    8d:d0:08:cc:09:1b:ec:57:3e:e4:2f:fc:2f:29:44:
                    07:94:c0:6c:3c:9c:eb:ec:1a:d7:7f:60:1e:0f:c6:
                    7c:2e:60:7e:fb:de:23:d1:cd:15:c9:19:ed:0c:69:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5F:F2:24:D0:B0:52:8A:ED:2F:CA:AA:6A:A0:F7:64:3E:31:26:4F
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/xl_yJNCwUortL8qqaqD3ZD4xJk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.9.0/24
                  45.148.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:e9:6d:7c:8b:3c:19:ef:c6:9e:57:05:b0:22:29:18:5b:1f:
         81:3a:05:bf:bf:c2:0c:d7:87:b9:65:74:aa:3f:56:a8:fb:71:
         a7:94:d9:66:12:ce:c8:d7:d7:5e:19:f9:0a:b7:60:55:2b:ae:
         32:79:6d:b1:5f:3d:30:da:67:8d:a6:36:d6:4f:12:bf:7d:a8:
         17:64:05:85:50:61:1e:71:5d:93:a6:f8:ed:86:40:29:0b:09:
         2e:f5:d6:28:a2:c1:f8:38:89:55:15:61:38:0e:20:fe:ca:fc:
         50:f7:2f:8f:8e:c7:bd:ce:8b:d8:09:ae:d3:26:fb:56:eb:e4:
         a5:00:37:55:25:d4:17:0b:72:35:74:38:0f:9b:7e:09:03:68:
         48:1d:20:d7:53:60:f4:22:3f:1a:7c:00:bf:15:dc:0a:61:a3:
         2d:a0:86:84:3c:99:aa:aa:75:23:08:00:a8:b0:b4:1d:50:c1:
         2b:e3:d2:28:1b:ac:1c:c4:dc:12:99:8c:27:71:24:a1:3e:a4:
         7d:8e:54:15:97:f2:af:fd:38:96:68:1f:39:9b:26:c2:9d:22:
         56:1c:c3:e2:a1:c8:b2:15:e4:50:0d:e0:d0:92:18:68:4f:77:
         98:cc:ac:50:88:83:9e:41:34:dd:fd:0a:37:77:f4:e2:b1:77:
         fa:b6:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org