Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/SjL2BUfrXeKC8jISWU084QCulMk.roa
File:                     SjL2BUfrXeKC8jISWU084QCulMk.roa (raw, json)
Hash identifier:          1ob2dO4fxvPKsjr7jR9rT/faEq2yZ0PP/IWqNFD9AA4=
Subject key identifier:   4A:32:F6:05:47:EB:5D:E2:82:F2:32:12:59:4D:3C:E1:00:AE:94:C9
Certificate issuer:       /CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Certificate serial:       07ACA192
Authority key identifier: 6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/SjL2BUfrXeKC8jISWU084QCulMk.roa
Signing time:             Sat 01 Jan 2022 09:01:45 +0000
ROA not before:           Sat 01 Jan 2022 09:01:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213064
IP address blocks:        45.134.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128754066 (0x7aca192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
        Validity
            Not Before: Jan  1 09:01:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a32f60547eb5de282f23212594d3ce100ae94c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:47:17:e2:35:34:58:6d:26:3a:2b:55:a7:09:
                    a7:2d:3f:5d:0e:db:c1:a3:70:77:1b:f4:a5:51:db:
                    b9:b5:82:00:c2:98:38:fe:38:e3:91:e7:b6:08:bd:
                    fd:f2:2c:e0:55:47:9a:eb:e7:9e:f5:5f:11:32:bb:
                    c2:f0:f2:f8:2c:84:3d:58:95:7a:55:85:5a:12:8b:
                    fc:cf:77:be:fa:67:ba:ce:10:5a:20:9f:1c:61:ec:
                    a6:2e:91:20:44:07:fe:2c:96:be:ea:13:f6:64:ac:
                    85:6c:90:44:9a:9b:fe:89:9d:f8:e1:3c:c9:43:92:
                    49:22:be:26:1c:f3:e2:3a:03:b0:36:2e:3a:d7:9b:
                    90:2e:0e:35:f1:db:27:b9:c3:1e:32:89:8f:b1:bf:
                    80:ea:9e:ee:28:fd:6a:71:d3:f6:ca:64:d2:6a:75:
                    de:9f:5d:e1:82:89:ef:06:aa:45:25:01:5e:85:06:
                    4d:3e:39:a2:c3:23:de:9f:c2:c3:14:b9:ec:b3:7d:
                    cc:ec:b2:97:fe:6b:f2:4c:9b:d8:18:e4:8f:09:43:
                    a5:e1:76:20:b8:83:b4:32:1d:32:8a:bf:ae:24:6e:
                    86:2a:2a:58:0d:71:89:c1:91:0d:8d:b4:ba:50:a2:
                    b1:a8:7e:f1:ba:10:01:00:55:93:65:04:6f:bc:bb:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:32:F6:05:47:EB:5D:E2:82:F2:32:12:59:4D:3C:E1:00:AE:94:C9
            X509v3 Authority Key Identifier:
                keyid:6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/SjL2BUfrXeKC8jISWU084QCulMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/be7Ke5hYwt5sy0Hl013geVx57ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:b5:50:63:55:0c:5f:e7:43:ff:da:fe:41:f9:27:7d:cc:
         76:70:61:e0:7b:af:ef:8d:9e:72:14:19:c5:97:9c:a2:f0:3d:
         27:52:e9:dd:6c:e1:8d:35:1e:cf:64:cc:d0:3f:43:99:33:c5:
         a9:93:3b:1b:ce:b2:cc:84:e4:03:26:97:e8:ad:42:55:9c:88:
         22:8c:b6:74:17:37:da:4a:83:39:72:0a:11:4c:e6:bc:0c:c9:
         50:3d:ac:24:17:93:38:ce:6c:de:b3:56:e1:3a:61:1a:ec:39:
         1f:cd:66:67:e5:ab:bd:9a:e3:3a:02:58:6e:29:45:d6:e7:87:
         71:15:cb:c1:d5:5c:60:b4:a1:24:87:e9:f3:ef:2c:5d:8e:a6:
         da:a6:8c:48:09:26:bb:d1:ce:b1:24:92:56:f8:03:58:b7:fa:
         1a:7d:bc:d6:f2:19:e3:30:95:ac:5d:be:dc:de:39:1f:1e:e6:
         db:07:ba:92:19:99:f3:da:a8:d8:e1:58:3c:57:bc:75:d6:79:
         c0:3b:5f:86:ff:94:c4:02:1f:cf:f6:aa:4e:71:53:f5:88:af:
         a6:99:bb:df:46:1f:69:84:a8:a9:98:fa:b6:f6:0f:98:f5:85:
         1e:df:40:40:0a:a0:1a:ce:2e:2b:ce:33:7a:45:8b:57:0b:01:
         83:1c:83:57
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB6yhkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGVlY2E3Yjk4NThjMmRlNmNjYjQxZTVkMzVkZTA3OTVjNzllZDk2MB4XDTIyMDEw
MTA5MDE0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGEzMmY2MDU0N2Vi
NWRlMjgyZjIzMjEyNTk0ZDNjZTEwMGFlOTRjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN5HF+I1NFhtJjorVacJpy0/XQ7bwaNwdxv0pVHbubWCAMKY
OP4445Hntgi9/fIs4FVHmuvnnvVfETK7wvDy+CyEPViVelWFWhKL/M93vvpnus4Q
WiCfHGHspi6RIEQH/iyWvuoT9mSshWyQRJqb/omd+OE8yUOSSSK+Jhzz4joDsDYu
OtebkC4ONfHbJ7nDHjKJj7G/gOqe7ij9anHT9spk0mp13p9d4YKJ7waqRSUBXoUG
TT45osMj3p/CwxS57LN9zOyyl/5r8kyb2BjkjwlDpeF2ILiDtDIdMoq/riRuhioq
WA1xicGRDY20ulCisah+8boQAQBVk2UEb7y7YwUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRKMvYFR+td4oLyMhJZTTzhAK6UyTAfBgNVHSMEGDAWgBRt7sp7mFjC3mzL
QeXTXeB5XHntljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JlN0tlNWhZd3Q1c3kwSGwwMTNnZVZ4NTdaWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvY2UzOGRmLWYwYTctNGUzNC05NzA0LWE0NWE2MzE3YTEzZC8x
L1NqTDJCVWZyWGVLQzhqSVNXVTA4NFFDdWxNay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
Y2UzOGRmLWYwYTctNGUzNC05NzA0LWE0NWE2MzE3YTEzZC8xL2JlN0tlNWhZd3Q1
c3kwSGwwMTNnZVZ4NTdaWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2GWjANBgkqhkiG9w0BAQsFAAOC
AQEALjC1UGNVDF/nQ//a/kH5J33MdnBh4Huv742echQZxZecovA9J1Lp3WzhjTUe
z2TM0D9DmTPFqZM7G86yzITkAyaX6K1CVZyIIoy2dBc32kqDOXIKEUzmvAzJUD2s
JBeTOM5s3rNW4TphGuw5H81mZ+WrvZrjOgJYbilF1ueHcRXLwdVcYLShJIfp8+8s
XY6m2qaMSAkmu9HOsSSSVvgDWLf6Gn281vIZ4zCVrF2+3N45Hx7m2we6khmZ89qo
2OFYPFe8ddZ5wDtfhv+UxAIfz/aqTnFT9Yivppm730YfaYSoqZj6tvYPmPWFHt9A
QAqgGs4uK84zekWLVwsBgxyDVw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:54 2024 by rpki-client on console-ams.rpki-client.org