Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/OmM3p673s7zco35B2VAK9Z53cow.roa
File:                     OmM3p673s7zco35B2VAK9Z53cow.roa (raw, json)
Hash identifier:          h4DYZpfKemNj/z6EV2exdPtWn0AnUQqmWyeWNwIsm0Q=
Subject key identifier:   3A:63:37:A7:AE:F7:B3:BC:DC:A3:7E:41:D9:50:0A:F5:9E:77:72:8C
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01833C6640BA4B3CB9E592ADB705B8E530F2
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/OmM3p673s7zco35B2VAK9Z53cow.roa
Signing time:             Wed 14 Sep 2022 14:27:57 +0000
ROA not before:           Wed 14 Sep 2022 14:27:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211459
IP address blocks:        45.12.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:3c:66:40:ba:4b:3c:b9:e5:92:ad:b7:05:b8:e5:30:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Sep 14 14:27:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a6337a7aef7b3bcdca37e41d9500af59e77728c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:51:12:15:a3:16:36:a8:e4:26:b5:85:4a:d2:
                    39:20:ab:1b:35:0e:da:14:18:a3:8b:e7:cc:40:24:
                    8f:9b:10:b8:6e:73:48:5b:87:a0:ec:0d:6a:b3:a7:
                    e2:47:a5:a5:f1:92:01:40:dd:db:6e:98:c5:28:d1:
                    d6:11:ce:9a:73:e5:b6:2f:03:90:5b:37:ad:94:26:
                    ec:4e:49:1b:c9:95:02:fb:5a:fb:78:b5:9e:5e:38:
                    06:69:b8:d7:2b:46:96:4e:1b:0c:75:2c:50:1a:28:
                    d6:1a:7d:77:f9:5d:9c:db:11:f3:44:e9:91:0e:7f:
                    0d:80:6a:06:71:05:ba:ae:e5:1b:8d:c0:42:02:4b:
                    e4:f0:8c:13:d7:76:92:d7:5d:9e:54:f7:3d:71:42:
                    2a:76:28:ff:f1:c9:be:7a:1c:e6:86:fa:0a:2c:35:
                    21:82:31:8f:f8:ac:6a:44:ef:23:f8:94:3b:4c:d2:
                    55:35:fe:eb:99:02:c9:63:53:39:9a:27:0d:c3:7a:
                    8c:58:75:69:ad:91:6d:ad:bb:e2:c0:7a:53:d9:a9:
                    72:41:07:cc:96:6c:9c:a3:ec:33:1c:2b:04:dd:b4:
                    3f:03:20:9e:5c:9e:d3:22:52:02:8c:7b:0e:7a:b1:
                    6e:d1:54:c7:2c:9b:de:ff:35:29:ce:e1:6e:a4:90:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:63:37:A7:AE:F7:B3:BC:DC:A3:7E:41:D9:50:0A:F5:9E:77:72:8C
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/OmM3p673s7zco35B2VAK9Z53cow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:25:b3:76:31:c4:19:13:af:ac:2f:8b:cb:96:db:5e:2b:5e:
         dd:23:ea:81:b2:ad:23:a3:13:99:82:5f:b2:d4:be:2c:ab:bf:
         99:0a:c7:5e:8f:46:b3:19:9e:0d:e5:b2:70:85:3c:0f:09:73:
         99:54:f0:36:eb:ed:4f:e1:cb:e2:c3:51:fc:b4:ca:99:8e:2e:
         0d:d8:de:32:16:6a:45:6c:cc:30:a2:e7:9b:e2:ba:75:70:d2:
         eb:b7:a0:63:ef:fa:bb:a7:40:b7:f1:be:ce:17:11:44:4d:e1:
         cc:31:0f:82:7b:fb:70:86:88:11:c3:3b:e7:35:b0:21:51:ea:
         94:ba:d8:2d:b9:ec:dc:87:e9:52:6b:8d:f9:25:18:a9:79:a3:
         77:f7:e0:44:d0:4c:94:f3:7b:a6:07:3d:9f:21:82:12:a3:e1:
         15:d9:f2:3b:67:57:c1:3c:96:86:16:89:4a:8c:3b:62:77:3b:
         11:5c:2c:dc:e8:dc:2e:2a:35:b0:d0:db:6e:54:96:2f:52:d8:
         be:04:70:57:bd:5a:48:af:2d:7f:d2:46:bb:b1:27:21:ab:da:
         3f:66:b3:7d:ed:05:eb:ad:25:bc:7c:80:db:5d:41:09:95:5f:
         93:cb:46:ca:f4:3b:b5:ae:0c:d3:6b:13:2f:26:ba:cf:c7:74:
         e7:e4:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org