Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/NWv2hDtY_lyr0jvGxDvjUeHU-Kg.roa
File:                     NWv2hDtY_lyr0jvGxDvjUeHU-Kg.roa (raw, json)
Hash identifier:          Mxh7/fb1J+tyT9qhpt3j4l+CSREkz+6HS6On5/xuFn4=
Subject key identifier:   35:6B:F6:84:3B:58:FE:5C:AB:D2:3B:C6:C4:3B:E3:51:E1:D4:F8:A8
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018486621015336471CADEB77A7253928F53
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/NWv2hDtY_lyr0jvGxDvjUeHU-Kg.roa
Signing time:             Thu 17 Nov 2022 16:18:04 +0000
ROA not before:           Thu 17 Nov 2022 16:18:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400799
IP address blocks:        45.12.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:62:10:15:33:64:71:ca:de:b7:7a:72:53:92:8f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Nov 17 16:18:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=356bf6843b58fe5cabd23bc6c43be351e1d4f8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:7e:d1:9e:89:60:27:05:21:36:0a:37:aa:
                    fb:a5:14:4e:5e:5d:bf:93:25:a8:7b:f6:f8:dc:49:
                    59:1f:c0:60:6f:16:12:ff:c5:09:18:a7:d2:ff:17:
                    03:27:75:72:30:68:25:00:5a:a0:dd:fa:87:59:f4:
                    66:32:8c:5c:a2:18:db:f3:7b:03:3e:c9:91:6e:26:
                    ec:8d:c2:dc:33:bb:74:3e:54:62:69:51:23:c4:1f:
                    1f:6c:93:11:6d:01:1f:97:4f:f5:11:9e:89:1f:1f:
                    fd:22:7b:87:f3:8d:d2:8b:68:ee:94:53:e3:71:f7:
                    96:81:ae:40:0d:03:34:31:cb:8b:61:b5:45:da:c0:
                    59:19:28:45:1a:d5:0e:f0:f0:d8:6c:8b:82:59:b5:
                    c3:50:be:74:a3:07:5c:64:53:26:6b:41:79:8e:65:
                    bf:8f:9f:57:54:eb:bf:21:71:f7:98:2b:46:c5:ef:
                    fe:5e:c4:8e:f9:8d:72:e2:c1:7e:28:b8:c1:4a:16:
                    09:27:b3:b7:64:91:7d:ef:c9:89:99:df:d5:12:8c:
                    e6:d7:0f:63:01:a5:3d:26:73:aa:15:0f:13:5d:4e:
                    99:ef:15:69:8b:66:e4:60:3e:ba:45:ab:eb:7c:5e:
                    99:04:e4:67:b3:7c:16:fe:f2:8c:5a:67:7e:3e:f1:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6B:F6:84:3B:58:FE:5C:AB:D2:3B:C6:C4:3B:E3:51:E1:D4:F8:A8
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/NWv2hDtY_lyr0jvGxDvjUeHU-Kg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:da:5d:97:8a:c4:91:79:25:f4:c3:6d:95:65:8d:dd:42:d9:
         f1:d8:59:fd:90:01:f4:60:63:39:e4:2a:48:4e:29:24:b7:27:
         7b:2e:cf:98:04:90:f9:af:09:01:c2:0b:95:a9:60:5a:61:af:
         2f:fb:6e:04:ed:ec:2a:c1:e9:33:cc:d8:87:bf:6a:a3:c9:b0:
         e8:17:04:da:3c:9e:5e:b2:53:22:1c:7c:33:1e:94:3b:09:80:
         1a:5b:2f:76:5d:2e:92:7e:f6:ff:d2:16:b8:a0:b4:73:5f:2c:
         b9:3a:4e:22:54:e9:18:61:76:a0:4b:f5:a2:1a:c1:29:06:20:
         9d:8b:e6:6a:67:d1:bb:86:17:b7:94:9d:c6:fc:37:5e:d8:97:
         8f:07:e5:cb:78:ca:2c:2a:91:98:2e:08:38:af:75:8b:1b:b1:
         59:93:d2:d0:1e:6b:08:74:c5:a4:1b:ea:19:9b:91:8a:51:cc:
         99:8b:3d:24:08:36:db:a6:bd:5c:a7:30:c5:f8:ee:ac:8a:96:
         ae:c5:fe:2c:39:6a:b1:16:c9:d4:88:f0:84:bb:c9:54:e5:f2:
         2c:c2:a2:6d:37:1e:f6:0a:f8:94:f5:82:97:27:d6:3e:d3:32:
         eb:ad:90:15:b1:57:46:61:fd:fe:12:78:fe:b4:f3:a4:3a:a5:
         07:e0:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org