Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/dWRzwG2JY7G238_KWDfQDa7Gk4A.roa
File:                     dWRzwG2JY7G238_KWDfQDa7Gk4A.roa (raw, json)
Hash identifier:          Iq1hmgtcdH4uZq8lQT9/PwBgd+1+76AyGfhtxid6wY8=
Subject key identifier:   75:64:73:C0:6D:89:63:B1:B6:DF:CF:CA:58:37:D0:0D:AE:C6:93:80
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       094A5E19
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/dWRzwG2JY7G238_KWDfQDa7Gk4A.roa
Signing time:             Sat 01 Jan 2022 12:04:01 +0000
ROA not before:           Sat 01 Jan 2022 12:04:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        45.12.83.0/24 maxlen: 24
                          45.12.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155868697 (0x94a5e19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jan  1 12:04:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=756473c06d8963b1b6dfcfca5837d00daec69380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:4c:fc:fe:52:83:06:c6:01:e6:6a:cd:89:
                    e7:e0:c8:7f:81:94:a2:9d:b5:dc:e3:18:5d:43:81:
                    d7:63:e3:6d:a7:f9:84:42:70:71:1c:35:92:37:61:
                    ea:61:3c:40:36:28:af:3d:a6:bf:66:41:ff:f1:3a:
                    63:c8:5f:d4:de:47:56:da:39:d9:d2:a0:2e:ab:86:
                    e4:29:12:de:d0:44:d3:a7:57:98:de:33:35:70:33:
                    6a:0f:5a:55:ca:cf:01:cf:3d:44:2a:72:7c:08:97:
                    80:62:62:26:93:1a:72:d9:ff:62:fc:4e:fb:c9:2b:
                    22:f8:47:86:2b:bc:be:78:74:d8:bc:ed:c5:71:4e:
                    47:15:73:89:02:c3:e1:f1:7d:62:41:6f:b1:ab:3d:
                    5d:cc:fc:87:11:84:8c:ed:5d:e8:d1:b0:ad:1b:3a:
                    f1:f2:50:7c:da:92:d2:e9:39:86:6b:3d:59:2c:e5:
                    ae:fc:50:6b:c0:6e:b3:ef:1c:dd:2f:e4:cd:8b:f4:
                    03:96:c7:00:49:8a:2c:28:86:27:49:ac:dd:df:bb:
                    7b:3e:cf:07:d6:d5:69:89:6a:b0:e7:b9:b9:39:4b:
                    21:4c:26:99:22:7f:34:36:41:d1:fd:e5:b0:14:83:
                    5e:eb:7a:51:07:26:39:87:cd:f0:46:75:0d:e4:02:
                    99:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:73:C0:6D:89:63:B1:B6:DF:CF:CA:58:37:D0:0D:AE:C6:93:80
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/dWRzwG2JY7G238_KWDfQDa7Gk4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:31:70:7d:74:e8:45:85:3b:86:8d:f8:5a:4f:c0:21:cd:33:
         b4:b9:15:e9:46:74:76:b0:ff:12:28:c4:94:17:b7:21:e1:b9:
         35:01:4b:8c:7f:0e:19:ff:a0:fe:59:05:3e:42:c3:d8:30:0e:
         65:4b:9d:7b:fa:36:32:c8:c2:35:8d:ba:df:f1:fc:2a:72:16:
         38:82:29:90:58:9d:c3:9d:53:02:d6:ca:16:2c:62:34:c9:3f:
         12:86:da:a7:d6:4b:4d:58:0d:7c:1a:2a:0b:ba:76:4f:1b:31:
         26:59:7f:d1:c5:eb:7a:16:b5:7d:d7:d8:d5:e2:b1:4d:dc:5c:
         48:48:ad:2f:17:d0:b9:50:44:c4:fe:40:1f:b0:ef:0d:84:1a:
         c0:f4:99:0e:a2:48:10:ba:c9:a3:df:7f:4b:28:99:4d:b7:f7:
         11:42:24:81:06:41:f6:31:09:95:7d:f4:71:77:d2:6c:b6:22:
         4e:69:d0:a1:d0:8d:d0:7a:1f:27:7e:b9:03:31:75:c1:65:b1:
         91:39:7f:ba:36:f7:35:9d:0c:82:51:65:22:db:14:63:42:78:
         36:2e:69:bc:34:59:33:bf:a3:cf:c1:c5:7a:54:94:35:59:76:
         63:ab:0b:f4:86:32:ee:e0:7d:f5:f7:a0:19:5e:ea:44:38:5c:
         c3:16:b7:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECUpeGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDEw
MTEyMDQwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU2NDczYzA2ZDg5
NjNiMWI2ZGZjZmNhNTgzN2QwMGRhZWM2OTM4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQnTPz+UoMGxgHmas2J5+DIf4GUop213OMYXUOB12Pjbaf5
hEJwcRw1kjdh6mE8QDYorz2mv2ZB//E6Y8hf1N5HVto52dKgLquG5CkS3tBE06dX
mN4zNXAzag9aVcrPAc89RCpyfAiXgGJiJpMactn/YvxO+8krIvhHhiu8vnh02Lzt
xXFORxVziQLD4fF9YkFvsas9Xcz8hxGEjO1d6NGwrRs68fJQfNqS0uk5hms9WSzl
rvxQa8Bus+8c3S/kzYv0A5bHAEmKLCiGJ0ms3d+7ez7PB9bVaYlqsOe5uTlLIUwm
mSJ/NDZB0f3lsBSDXut6UQcmOYfN8EZ1DeQCmZUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR1ZHPAbYljsbbfz8pYN9ANrsaTgDAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L2RXUnp3RzJKWTdHMjM4X0tXRGZRRGE3R2s0QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS0MUjANBgkqhkiG9w0BAQsFAAOC
AQEAljFwfXToRYU7ho34Wk/AIc0ztLkV6UZ0drD/EijElBe3IeG5NQFLjH8OGf+g
/lkFPkLD2DAOZUude/o2MsjCNY263/H8KnIWOIIpkFidw51TAtbKFixiNMk/Eoba
p9ZLTVgNfBoqC7p2TxsxJll/0cXreha1fdfY1eKxTdxcSEitLxfQuVBExP5AH7Dv
DYQawPSZDqJIELrJo99/SyiZTbf3EUIkgQZB9jEJlX30cXfSbLYiTmnQodCN0Hof
J365AzF1wWWxkTl/ujb3NZ0MglFlItsUY0J4Ni5pvDRZM7+jz8HFelSUNVl2Y6sL
9IYy7uB99fegGV7qRDhcwxa3ZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org