Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V12mckcVtUsD-0X2zuIuDlCNhW8.roa
File:                     V12mckcVtUsD-0X2zuIuDlCNhW8.roa (raw, json)
Hash identifier:          Il8Gm7bZuqzcP0F/3M9IJevx3pg2z8kLuFttlFF971E=
Subject key identifier:   57:5D:A6:72:47:15:B5:4B:03:FB:45:F6:CE:E2:2E:0E:50:8D:85:6F
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018255558147087DA8503046106EA0FD6B94
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V12mckcVtUsD-0X2zuIuDlCNhW8.roa
Signing time:             Sun 31 Jul 2022 17:37:23 +0000
ROA not before:           Sun 31 Jul 2022 17:37:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        5.181.176.0/24 maxlen: 24
                          5.181.177.0/24 maxlen: 24
                          193.39.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:55:55:81:47:08:7d:a8:50:30:46:10:6e:a0:fd:6b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jul 31 17:37:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=575da6724715b54b03fb45f6cee22e0e508d856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:ce:03:7f:c9:4c:6b:18:7f:15:17:31:7f:
                    ba:24:87:bb:fc:4a:b3:32:c9:91:3c:96:a6:62:d5:
                    16:6d:7b:13:84:2a:6e:33:83:0e:20:95:42:09:30:
                    30:7f:36:0a:3f:84:0a:0b:29:56:8c:6b:73:7a:2b:
                    50:91:2f:79:9a:37:26:43:3f:ef:97:43:fd:3a:82:
                    3d:4b:a1:6d:5f:16:2e:74:38:86:50:23:e0:0c:7b:
                    81:18:b5:15:e5:e9:ab:bc:ac:be:60:d5:27:d2:8c:
                    01:b4:2d:96:37:3b:5d:d8:a3:f0:a3:db:3b:bb:d8:
                    14:90:01:b5:d2:dc:21:da:44:f6:a0:64:d0:6d:ad:
                    f4:d8:b7:89:f8:68:8f:c0:bf:8a:ce:ce:19:3a:f9:
                    30:11:d0:b8:ba:84:95:d4:cb:c4:f8:b2:e5:e7:57:
                    0d:32:fd:c0:61:3e:57:8a:b7:c6:8f:a1:ac:4c:16:
                    4e:7b:3b:82:6c:cd:b4:63:06:c1:0b:c7:b6:5e:7c:
                    72:c5:52:29:49:ee:91:d0:ef:a4:69:05:48:31:54:
                    74:49:63:c6:27:d3:c0:77:44:10:f7:f8:6d:b6:96:
                    0d:15:20:a0:a0:f3:45:de:7c:ca:da:b5:4d:84:fe:
                    7a:a0:9b:b7:dc:a5:7b:5d:ac:14:b4:87:ee:0c:60:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5D:A6:72:47:15:B5:4B:03:FB:45:F6:CE:E2:2E:0E:50:8D:85:6F
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V12mckcVtUsD-0X2zuIuDlCNhW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.176.0/23
                  193.39.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:28:b1:d8:c5:79:94:70:db:ca:ff:e3:8b:42:95:12:d8:
         3d:c8:86:3b:6c:81:73:40:04:02:e0:c4:3b:80:96:3c:77:f3:
         b3:5b:b9:77:33:4a:e3:ec:d7:a9:b0:a2:d8:3a:49:ee:06:2c:
         16:db:ec:2f:bb:39:70:c5:c4:b1:a7:44:3e:a0:d5:85:c1:b9:
         ae:de:ac:93:41:89:3f:86:f8:35:3d:0e:ee:44:f5:f7:ef:48:
         7c:80:09:08:f4:d7:30:92:8b:31:2d:2b:9f:48:20:69:b3:09:
         0c:ef:d4:e9:18:9b:9f:c4:fb:1e:62:54:81:b6:f9:b5:83:51:
         c2:19:1c:45:4c:e1:b2:1a:5e:93:6d:92:11:8f:af:00:f1:91:
         97:a3:18:01:28:0c:98:fb:9d:6b:12:5e:fc:b5:fa:80:73:bc:
         56:24:cb:8e:80:1f:b9:2c:d5:f4:f7:71:d9:4d:89:0b:ea:03:
         3d:ad:03:9a:9d:9e:72:ce:ac:be:45:d1:5e:d2:25:31:a1:65:
         3e:e5:b6:ac:cb:37:69:77:02:dc:59:4d:86:eb:3a:53:4d:c5:
         65:31:93:dd:38:7c:9c:ba:f8:74:8c:a7:a1:2d:29:cf:1a:ae:
         86:17:a5:dc:a0:64:da:55:61:e3:f0:6e:6c:91:cd:6c:e5:3e:
         62:7f:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org