Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LR6lFqjmgvsOq0CBaLm-VzmrFyg.roa
File:                     LR6lFqjmgvsOq0CBaLm-VzmrFyg.roa (raw, json)
Hash identifier:          FaL2PnPY+EEJRblMv2lzjToWJnmFuuaeXRWou++JJA4=
Subject key identifier:   2D:1E:A5:16:A8:E6:82:FB:0E:AB:40:81:68:B9:BE:57:39:AB:17:28
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01856F8C4776D9B1D1A3D34CB6730E9208CE
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LR6lFqjmgvsOq0CBaLm-VzmrFyg.roa
Signing time:             Sun 01 Jan 2023 22:55:42 +0000
ROA not before:           Sun 01 Jan 2023 22:55:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7489
IP address blocks:        5.181.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8c:47:76:d9:b1:d1:a3:d3:4c:b6:73:0e:92:08:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jan  1 22:55:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d1ea516a8e682fb0eab408168b9be5739ab1728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:af:a0:44:d6:d8:f1:54:98:63:6c:5c:66:
                    28:47:c8:56:98:f7:fa:ce:22:0c:9b:4b:d1:63:b8:
                    bb:64:a4:6f:78:41:6c:df:62:6e:b7:63:db:98:10:
                    20:80:84:17:e4:fc:98:14:cd:d1:05:f3:5e:6f:2d:
                    ed:9f:3b:b7:3e:00:7e:6b:97:d9:45:a1:88:f7:6e:
                    49:94:c9:e4:b6:bb:7f:ae:6b:93:e2:9b:55:a3:ad:
                    f3:ce:db:c2:8c:56:c9:30:dd:8a:02:ba:af:1d:b6:
                    92:4c:f5:87:12:76:d1:f1:55:a1:64:2c:41:bd:0e:
                    64:79:e3:d2:e5:c1:b3:66:99:43:6d:f4:50:d9:9e:
                    fe:3c:9e:65:26:9e:21:e9:a6:90:84:c6:ca:5b:c2:
                    1d:09:b4:89:a2:c6:73:1a:e8:53:c4:f2:2b:9f:42:
                    1d:f2:79:83:47:cd:ba:13:f1:1c:73:07:97:fe:47:
                    03:da:b3:4a:56:f7:75:ff:3a:c9:fc:a4:d7:56:09:
                    a8:a0:54:84:71:80:d4:23:05:7d:8e:e0:52:47:fe:
                    82:12:4e:57:cb:ba:f6:dd:5a:ed:aa:a6:a0:d8:8c:
                    2a:f3:ca:77:73:e1:66:47:74:cb:25:68:53:ae:50:
                    12:77:73:50:76:b9:97:0c:77:27:d6:84:19:53:65:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:A5:16:A8:E6:82:FB:0E:AB:40:81:68:B9:BE:57:39:AB:17:28
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LR6lFqjmgvsOq0CBaLm-VzmrFyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:69:45:19:aa:86:c3:db:0b:ab:57:30:78:38:a0:dd:c1:d4:
         91:3c:ec:49:d2:71:58:5b:7f:e0:d7:89:75:e0:f6:38:82:a6:
         ce:f5:b0:09:39:7b:b9:6e:b4:ce:5a:96:2a:92:17:f5:ec:f5:
         a4:c7:d6:68:b3:b6:a3:2a:b8:94:74:eb:ba:e4:a6:b3:ed:fe:
         ca:15:de:06:79:b2:31:10:32:73:3f:6b:c7:6c:1b:4f:77:7c:
         fb:ca:07:38:f8:7a:bc:60:ac:c0:0d:fe:cb:ea:28:1e:63:cd:
         27:65:5c:cf:ea:8c:03:2b:6a:cc:32:47:3e:a9:84:ea:7e:d3:
         b1:c5:dc:1d:fc:e8:8d:de:b4:2d:6e:4b:64:c2:83:a9:a6:94:
         56:17:fe:50:70:f9:16:26:93:96:64:ca:c4:4e:63:b9:a7:73:
         52:5d:d2:57:03:a3:91:b4:ab:0d:c8:9b:d2:20:82:b3:6b:de:
         4e:13:f5:6a:62:f4:e2:6a:a9:6f:18:9a:ee:29:41:34:51:26:
         d5:96:5e:7e:43:65:dc:29:fe:44:5c:d1:e9:ab:99:1e:ff:e9:
         0f:a7:bf:7a:29:a2:14:d1:e5:ff:1b:f7:59:d9:0d:be:9a:c8:
         16:2e:7d:6d:a9:8e:60:73:30:10:2c:6e:2c:04:2b:52:fc:7c:
         c6:b7:37:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org