Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MIF3T1ODu0V-8gzMZhxMvhNyNQg.roa
File:                     MIF3T1ODu0V-8gzMZhxMvhNyNQg.roa (raw, json)
Hash identifier:          mv7P8Alf7y5E++FdjBFuZJjSPppf9EVzQrwduP6ir24=
Subject key identifier:   30:81:77:4F:53:83:BB:45:7E:F2:0C:CC:66:1C:4C:BE:13:72:35:08
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0184D9945FFBAF8EEA5DADDE00059BC2F384
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MIF3T1ODu0V-8gzMZhxMvhNyNQg.roa
Signing time:             Sat 03 Dec 2022 20:01:30 +0000
ROA not before:           Sat 03 Dec 2022 20:01:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142111
IP address blocks:        45.12.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d9:94:5f:fb:af:8e:ea:5d:ad:de:00:05:9b:c2:f3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Dec  3 20:01:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3081774f5383bb457ef20ccc661c4cbe13723508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:7e:89:48:42:fb:7f:a0:3f:0f:31:cd:f0:
                    71:09:81:8d:ff:34:fc:24:d5:a5:4e:b9:38:52:d4:
                    6f:b3:7d:4e:15:e4:dc:a0:06:13:dd:5a:00:5e:49:
                    68:a6:00:9e:95:11:3c:24:c0:95:29:2b:34:22:7a:
                    45:be:0c:3d:08:88:65:28:e7:87:99:23:02:17:2a:
                    92:9b:ae:4f:e3:06:13:15:8d:0f:37:0f:77:5f:f1:
                    e6:52:00:21:61:c6:28:17:02:93:4b:4d:ee:40:4a:
                    be:ad:a2:e3:71:58:c5:6e:32:bd:31:b9:6a:b0:47:
                    d3:c1:db:3a:0d:60:ff:84:82:fe:dc:1c:64:81:db:
                    7c:bc:8e:27:0c:49:6a:ae:3d:28:a5:74:3e:64:ad:
                    fe:4b:48:bc:8c:58:6a:9f:e4:82:d9:1a:eb:ed:f6:
                    78:16:90:2a:40:50:25:23:cf:7b:85:27:81:ad:3b:
                    18:79:b7:fd:d0:4e:f3:62:9c:8d:87:93:3a:8b:ef:
                    05:e3:ef:b3:2c:e1:ab:f7:5f:8f:99:bc:c3:da:8e:
                    7c:98:0a:86:f1:4c:79:36:4f:7f:84:ae:03:40:d7:
                    77:52:fa:b3:b3:2a:ca:f3:58:29:46:83:94:d4:1f:
                    a6:33:24:e4:25:cd:f7:10:43:7f:29:3b:07:3c:4a:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:81:77:4F:53:83:BB:45:7E:F2:0C:CC:66:1C:4C:BE:13:72:35:08
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MIF3T1ODu0V-8gzMZhxMvhNyNQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:ec:d9:93:4d:85:9f:5e:4a:80:19:70:82:1f:f8:96:28:
         3f:00:b8:89:9e:36:c9:14:6e:76:0a:59:12:a2:a3:52:26:73:
         18:40:c0:9a:77:1c:ed:cf:7f:79:96:d0:78:5c:49:56:3c:bf:
         ea:f7:71:30:87:95:8a:93:ce:19:48:94:9d:e8:cc:42:67:9a:
         71:6f:f3:ea:11:ce:98:0a:42:cb:d9:5c:eb:25:c0:5f:a1:46:
         da:2d:77:58:28:2f:d2:a2:d8:37:94:4c:f6:4d:26:dd:94:93:
         cd:c1:78:2e:82:5a:1a:5b:87:d2:1b:d1:87:da:0d:4c:13:8f:
         36:ec:38:46:f2:94:71:50:53:be:1b:24:bf:e7:bd:7d:9c:ed:
         b7:30:21:f4:f1:63:23:66:0c:81:2d:59:24:1d:2d:1b:8b:4f:
         f1:dd:77:7b:3c:e7:3b:5a:11:25:e7:4f:6d:43:f5:90:40:9e:
         c5:51:14:74:89:c9:cb:07:1a:6d:b0:1e:a2:b7:cb:6c:7d:60:
         e8:4f:eb:e2:53:60:8f:c8:ee:a7:70:22:9b:f7:bd:8f:98:01:
         f2:7b:99:15:10:8c:32:2e:68:2a:6e:a4:c7:ec:54:ac:df:00:
         63:1c:36:63:3c:91:0e:67:b0:76:c1:f4:2a:94:ef:c9:cc:66:
         0f:a7:63:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTZlF/7r47qXa3eAAWbwvOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMjAzMjAwMTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDgxNzc0ZjUzODNiYjQ1N2VmMjBjY2M2NjFjNGNiZTEzNzIzNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQt+iUhC+3+gPw8xzfBxCYGN/zT8
JNWlTrk4UtRvs31OFeTcoAYT3VoAXklopgCelRE8JMCVKSs0InpFvgw9CIhlKOeH
mSMCFyqSm65P4wYTFY0PNw93X/HmUgAhYcYoFwKTS03uQEq+raLjcVjFbjK9Mblq
sEfTwds6DWD/hIL+3Bxkgdt8vI4nDElqrj0opXQ+ZK3+S0i8jFhqn+SC2Rrr7fZ4
FpAqQFAlI897hSeBrTsYebf90E7zYpyNh5M6i+8F4++zLOGr91+PmbzD2o58mAqG
8Ux5Nk9/hK4DQNd3UvqzsyrK81gpRoOU1B+mMyTkJc33EEN/KTsHPEqzTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDCBd09Tg7tFfvIMzGYcTL4TcjUIMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvTUlGM1QxT0R1MFYtOGd6TVpoeE12aE55TlFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQxSMA0G
CSqGSIb3DQEBCwUAA4IBAQB/6OzZk02Fn15KgBlwgh/4lig/ALiJnjbJFG52ClkS
oqNSJnMYQMCadxztz395ltB4XElWPL/q93Ewh5WKk84ZSJSd6MxCZ5pxb/PqEc6Y
CkLL2VzrJcBfoUbaLXdYKC/Sotg3lEz2TSbdlJPNwXgugloaW4fSG9GH2g1ME482
7DhG8pRxUFO+GyS/5719nO23MCH08WMjZgyBLVkkHS0bi0/x3Xd7POc7WhEl509t
Q/WQQJ7FURR0icnLBxptsB6it8tsfWDoT+viU2CPyO6ncCKb972PmAHye5kVEIwy
LmgqbqTH7FSs3wBjHDZjPJEOZ7B2wfQqlO/JzGYPp2Nb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org