Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa
File:                     V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa (raw, json)
Hash identifier:          ORP+N0GlNbtZ2anWFwb5hHnqoLPAR+bOzVPDeMULCc8=
Subject key identifier:   57:66:0E:CC:BD:CB:05:F5:A1:5A:E4:F5:10:9E:00:D7:42:66:6B:EF
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01822767634DCA163F79896C931D16E23520
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa
Signing time:             Fri 22 Jul 2022 19:34:23 +0000
ROA not before:           Fri 22 Jul 2022 19:34:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        45.12.83.0/24 maxlen: 24
                          45.12.82.0/24 maxlen: 24
                          85.209.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:27:67:63:4d:ca:16:3f:79:89:6c:93:1d:16:e2:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jul 22 19:34:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57660eccbdcb05f5a15ae4f5109e00d742666bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:f5:cf:e6:f0:34:7d:ad:d8:35:0f:27:ba:
                    d3:9b:d5:8f:91:14:d8:14:3d:27:4d:a8:81:9a:08:
                    14:a7:b6:70:16:df:b1:eb:39:47:45:5b:40:dc:bd:
                    9f:10:66:ec:f2:a1:6f:8b:ba:ef:94:16:97:cc:33:
                    e9:b2:04:d6:3a:99:ec:02:53:f9:1a:60:13:9f:47:
                    79:b1:1b:2e:93:9d:e0:45:cf:be:51:1c:ec:ec:a4:
                    0d:31:7a:5e:6d:93:80:6b:7f:ad:e7:70:39:e5:7c:
                    11:29:71:a0:67:0c:63:7a:30:c6:78:0f:31:82:0c:
                    f2:59:40:c4:c1:25:a1:ee:7c:fc:41:23:e1:8e:68:
                    0a:1b:6b:29:0f:27:9b:d2:1d:1a:73:ba:c3:84:5c:
                    89:8c:56:a7:97:54:b4:cd:98:1c:9f:a5:5d:2f:1b:
                    f8:fa:d0:81:ae:2c:07:5f:93:cb:46:72:3b:38:17:
                    0e:2b:12:f3:e7:7e:75:ac:cd:b3:32:a3:7a:cd:9f:
                    b8:58:da:1e:ec:ac:ff:8b:60:d9:58:bc:b9:99:33:
                    cb:38:e6:2a:8a:d2:28:e6:ea:c9:a2:30:95:fd:e4:
                    a0:91:7d:0d:4c:1d:6a:f7:92:6c:c5:74:7a:7a:9f:
                    66:15:7a:2d:e5:f5:3b:5c:47:6f:05:dc:8d:cb:6d:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:0E:CC:BD:CB:05:F5:A1:5A:E4:F5:10:9E:00:D7:42:66:6B:EF
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/V2YOzL3LBfWhWuT1EJ4A10Jma-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.82.0/23
                  85.209.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:aa:77:db:ee:9d:1e:05:7c:67:b2:20:f3:e0:85:34:cf:4b:
         f9:ee:88:c9:cd:20:21:da:f0:b4:75:42:82:a8:37:e6:42:b4:
         e4:ab:a6:1f:d3:63:8d:ee:57:40:b1:ff:9e:37:3d:a2:34:c5:
         b4:21:8d:f4:5b:2f:b3:cc:bb:2d:5c:b8:a8:93:28:2f:f1:f5:
         ff:12:4d:c2:7d:91:e5:3f:dd:9d:63:4a:4a:72:8b:7e:f1:c0:
         a7:ed:02:ce:fa:4b:0f:4f:90:86:d7:1c:25:bc:79:34:33:53:
         44:61:e5:73:9e:81:87:d2:93:22:4e:77:e8:9b:e9:ba:28:5a:
         b1:11:dc:02:8a:dc:45:ec:c0:b7:6b:c9:8f:89:04:5f:b8:5f:
         ed:7c:27:1c:6d:30:41:10:2e:bf:20:ec:f5:e4:06:08:14:ae:
         3b:aa:ce:8c:fa:46:9e:ae:d4:d6:10:08:05:52:b9:3a:1a:09:
         3a:1c:02:da:12:b2:6a:9c:cc:10:46:47:61:bd:2c:fc:3f:b9:
         56:64:35:64:62:fc:2b:5b:b8:58:46:3d:e2:01:e1:f1:55:f9:
         89:f8:e2:fb:6b:8a:80:9e:60:3f:a7:b4:f8:72:71:d9:f8:46:
         ac:2d:be:e1:1f:d5:ca:c2:70:81:6d:fe:eb:c7:ad:85:a7:69:
         ed:7c:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org