Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/X6eNHWm1Q4v5PUA_TsiqBmCjaCo.roa
File:                     X6eNHWm1Q4v5PUA_TsiqBmCjaCo.roa (raw, json)
Hash identifier:          5tnWei170JoIlbezL/XY94Qftv2CaHnnlUc3VW5+51o=
Subject key identifier:   5F:A7:8D:1D:69:B5:43:8B:F9:3D:40:3F:4E:C8:AA:06:60:A3:68:2A
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01856F8C530C453CF28BA242D820D08DB6AB
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/X6eNHWm1Q4v5PUA_TsiqBmCjaCo.roa
Signing time:             Sun 01 Jan 2023 22:55:45 +0000
ROA not before:           Sun 01 Jan 2023 22:55:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211459
IP address blocks:        45.12.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8c:53:0c:45:3c:f2:8b:a2:42:d8:20:d0:8d:b6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jan  1 22:55:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5fa78d1d69b5438bf93d403f4ec8aa0660a3682a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:e1:5c:d5:e3:35:73:e5:6c:d5:2a:63:08:
                    02:82:cf:f5:31:80:0d:0c:3a:76:91:7a:20:49:ba:
                    7f:82:ac:46:fe:30:ec:5f:f0:03:3c:38:47:6b:5c:
                    13:4c:9f:1f:c8:49:17:4c:0f:65:af:74:fd:e2:82:
                    ad:27:f0:b0:77:6d:2c:43:22:2a:d9:36:9b:d3:41:
                    50:36:a9:81:fc:73:e2:04:e2:c1:ea:66:08:49:77:
                    39:39:7d:20:e7:17:b3:3f:77:79:5f:74:22:7d:06:
                    38:36:63:5a:d4:e9:fd:eb:32:eb:34:66:a1:25:db:
                    05:75:bd:a1:f2:1b:b2:85:39:21:ca:bc:a0:81:28:
                    0f:cc:0f:d8:38:01:0c:19:7e:56:bf:1b:b7:07:9d:
                    1b:f6:f5:49:35:5b:0e:39:fa:f7:8a:15:3b:87:d4:
                    d4:eb:69:1d:4c:ed:41:f5:45:4a:2e:f6:a1:da:05:
                    0f:32:fa:19:e5:ac:f6:c2:cb:a4:74:2e:d1:3f:14:
                    c9:89:de:cb:4c:f2:eb:ef:b8:35:62:a4:81:be:64:
                    23:15:ca:d7:9f:88:40:34:c6:34:95:07:ce:2e:51:
                    b3:21:71:03:93:7b:65:68:bb:d7:63:c7:9c:78:ef:
                    15:8b:bf:98:87:44:26:fa:af:0b:e9:97:55:8f:80:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:8D:1D:69:B5:43:8B:F9:3D:40:3F:4E:C8:AA:06:60:A3:68:2A
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/X6eNHWm1Q4v5PUA_TsiqBmCjaCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5e:26:4c:66:b7:5f:84:3a:3c:af:58:76:e8:a9:74:b8:23:
         70:06:f2:f7:6c:5d:7c:66:db:5b:d5:ff:b2:bc:1d:31:50:d9:
         a4:4f:7b:6d:39:f8:fe:ca:2f:66:8a:10:44:2e:25:58:2d:ec:
         78:36:49:77:5c:71:2a:35:ca:7b:e5:c3:f3:e6:8d:de:4e:97:
         a6:de:6b:56:22:5c:8c:ec:67:3e:e2:58:af:f8:e5:8e:57:27:
         bf:ee:90:c5:23:24:a0:23:a0:46:7e:12:b1:ff:3a:fe:15:ac:
         b1:d5:b9:45:d6:98:08:8d:7a:51:c1:e8:96:eb:71:a3:d9:8c:
         98:ec:07:b3:ff:fa:70:99:6f:12:03:54:b4:1f:91:4e:92:f9:
         46:89:6e:c4:b4:52:4c:05:b0:55:0c:f7:0b:44:57:11:9c:c3:
         cb:6f:5d:4e:c8:87:d1:1a:0a:20:4e:cb:77:a2:0b:5e:40:12:
         35:4f:a4:3e:ba:2a:5e:0b:71:c1:c1:26:8e:c6:ca:7e:5d:81:
         e4:00:7d:34:38:f3:a0:e7:7b:44:bc:ff:c2:e0:6d:82:9a:bc:
         8e:a4:57:f4:46:0a:ee:cb:30:41:db:73:fa:ab:3b:b3:77:72:
         aa:db:fe:a0:72:d8:d1:c9:25:d5:fd:b3:30:15:b4:b7:05:33:
         11:9b:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org