Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MrbEUQeOqSSndQE0Uy3fA7tHNUQ.roa
File:                     MrbEUQeOqSSndQE0Uy3fA7tHNUQ.roa (raw, json)
Hash identifier:          FyiKjmLCB6I2wkQrII9XmXqwelhkXvTABWKi7vu9Me0=
Subject key identifier:   32:B6:C4:51:07:8E:A9:24:A7:75:01:34:53:2D:DF:03:BB:47:35:44
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0184E9C6568CF69A13194A6350C832148C69
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MrbEUQeOqSSndQE0Uy3fA7tHNUQ.roa
Signing time:             Tue 06 Dec 2022 23:30:00 +0000
ROA not before:           Tue 06 Dec 2022 23:30:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212249
IP address blocks:        45.87.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e9:c6:56:8c:f6:9a:13:19:4a:63:50:c8:32:14:8c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Dec  6 23:30:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32b6c451078ea924a7750134532ddf03bb473544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:80:5e:8d:aa:e5:28:bb:c7:1c:12:ce:cb:
                    a7:2b:f5:40:8d:a3:e7:d0:a0:ab:2d:3a:7f:61:a7:
                    df:36:87:b2:c2:75:2c:f3:6c:07:9c:63:71:85:28:
                    58:26:8e:cd:fd:f2:0d:11:71:e5:39:b9:02:1f:f9:
                    e5:93:38:19:0c:49:20:37:4a:cf:b1:5b:99:cf:9e:
                    05:3e:c1:64:fe:da:ae:28:55:b5:fe:f7:fd:43:22:
                    5b:8d:e4:e7:34:89:1d:94:51:b5:66:00:3b:d6:e7:
                    ab:1c:ab:7f:4e:be:60:fa:02:d9:ea:e5:e1:67:01:
                    ea:16:98:66:c8:8e:7f:5d:99:40:42:82:7d:06:4f:
                    5e:aa:67:f8:f3:77:6f:91:7c:2a:de:82:4f:c6:43:
                    73:66:4c:cc:cf:2a:6f:0c:9f:dc:11:69:dd:9e:cb:
                    a7:b1:d9:7d:b7:7c:34:dc:a5:ee:47:15:c0:7a:df:
                    d2:c6:9d:87:21:e1:4d:63:cf:d3:67:8f:be:3e:dd:
                    77:97:42:20:43:0c:2c:61:5b:f3:e4:a1:2a:87:bf:
                    09:de:47:3a:08:aa:f3:78:a8:af:b8:af:4b:b8:82:
                    de:9f:3f:2e:1c:e3:89:14:22:b9:42:0e:c2:90:31:
                    88:4f:46:f1:b1:13:4e:57:3c:8e:d1:71:b9:26:66:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:C4:51:07:8E:A9:24:A7:75:01:34:53:2D:DF:03:BB:47:35:44
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/MrbEUQeOqSSndQE0Uy3fA7tHNUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:ba:67:1b:08:37:9e:94:c8:08:7e:15:0b:5d:a2:4d:e8:
         ad:03:53:4c:19:77:bc:7e:b8:33:e3:2e:76:a7:63:20:4f:91:
         f2:b3:e6:99:8b:4e:47:f1:9b:47:46:ec:45:73:3e:80:0e:86:
         16:20:6f:9c:a3:23:18:6c:b1:c0:7e:72:7b:c0:ac:10:e6:a3:
         58:da:85:ef:dd:aa:ad:c8:6a:ab:f0:4f:3b:e2:a8:f5:68:ae:
         e5:a6:6e:4f:9d:98:04:48:26:61:47:0c:ef:a7:b7:78:5a:0d:
         be:11:50:28:90:9e:e3:11:67:a8:ea:c4:5c:30:75:33:1b:7b:
         e1:fc:27:10:6c:83:b7:82:de:01:69:03:df:2d:67:fa:be:e7:
         57:4c:90:58:ea:3f:28:fc:b4:77:b5:8e:a0:c2:a4:c0:6f:ea:
         0b:62:b3:20:8a:e5:89:a4:97:91:0e:3a:7c:78:b2:68:73:c2:
         6a:fd:56:7f:31:f0:b8:f4:b9:9c:8d:9b:76:63:98:27:08:6c:
         8d:b7:1e:94:29:6b:89:1d:ce:91:6b:69:cc:bf:aa:0b:77:92:
         b4:cb:61:f6:10:b8:26:ab:35:04:8f:76:d3:72:2d:19:e7:ed:
         46:72:73:2e:e2:56:d5:d0:90:a8:40:6b:c6:fe:70:b7:db:63:
         db:39:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org