Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/h-MR6APz8ZE-Llzci7s5-37Tae4.roa
File:                     h-MR6APz8ZE-Llzci7s5-37Tae4.roa (raw, json)
Hash identifier:          sxpKiiVqS4RPxja7+jpKhoCEJKi4FInDEPAkbKniq5g=
Subject key identifier:   87:E3:11:E8:03:F3:F1:91:3E:2E:5C:DC:8B:BB:39:FB:7E:D3:69:EE
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018260E8CAC9299B0993DC266D19538DD8E0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/h-MR6APz8ZE-Llzci7s5-37Tae4.roa
Signing time:             Tue 02 Aug 2022 23:34:05 +0000
ROA not before:           Tue 02 Aug 2022 23:34:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        45.87.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:60:e8:ca:c9:29:9b:09:93:dc:26:6d:19:53:8d:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Aug  2 23:34:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=87e311e803f3f1913e2e5cdc8bbb39fb7ed369ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:a0:06:0f:0d:02:cc:37:a5:25:ec:61:43:
                    51:e3:39:07:3b:7b:3f:2f:5c:a5:12:75:b3:dd:56:
                    45:c0:3c:cf:d0:14:a2:91:70:d2:d9:ac:84:53:90:
                    7e:38:e8:12:59:80:7d:f5:1b:fb:5b:05:0d:5e:fd:
                    fc:86:68:6e:eb:12:59:9b:67:92:1d:fc:04:d7:3a:
                    ed:34:32:2e:2b:37:fe:96:f8:e8:e4:ed:ca:29:84:
                    48:ca:ac:7f:7b:dc:8b:fe:bf:6c:25:06:47:f7:d3:
                    05:3c:6b:15:e5:87:be:29:1f:b4:78:6b:a1:27:9d:
                    2f:b7:f8:6f:95:5f:87:b8:24:6e:e7:8d:68:f2:a4:
                    c1:c7:01:8a:1b:54:1a:94:d9:bb:cc:ca:a4:19:f8:
                    a2:bb:2a:0a:8d:5f:ac:31:1d:9d:77:13:08:74:85:
                    1c:b2:98:6c:78:7e:63:c7:d5:50:89:ff:a8:fc:a0:
                    ca:b4:36:7d:43:9e:6a:41:a1:eb:34:64:21:fa:cf:
                    69:49:ad:b4:42:de:ad:43:8f:8b:5a:f5:7e:90:a1:
                    df:70:e2:9c:95:de:52:40:a0:6d:9d:ee:ef:99:81:
                    d8:e3:96:b6:b5:4a:9d:d5:2c:2c:30:69:36:a4:47:
                    0c:1f:e3:45:7c:49:36:0c:27:8e:25:00:3f:f2:5b:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E3:11:E8:03:F3:F1:91:3E:2E:5C:DC:8B:BB:39:FB:7E:D3:69:EE
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/h-MR6APz8ZE-Llzci7s5-37Tae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:64:37:ac:1e:d6:fc:0e:d4:be:b1:ef:79:09:4d:33:0d:
         02:db:cf:2f:87:36:7c:ee:c6:7a:07:bc:9b:18:03:30:72:a9:
         a2:25:c4:46:11:00:5c:91:67:a9:bc:e0:dd:da:40:3c:8a:a3:
         43:38:14:31:40:38:84:3b:81:49:31:e1:18:8d:30:6d:a0:7d:
         41:31:15:3f:23:7e:9e:17:5c:db:08:7e:f0:55:e5:81:db:cc:
         8a:46:09:06:9e:58:ed:e5:6e:e1:92:0a:e2:b0:b3:d6:61:88:
         6b:77:3f:a9:8d:29:76:18:40:18:e2:40:39:b0:de:47:d9:c7:
         5a:77:7d:73:89:14:a5:42:ec:02:c8:de:a3:88:02:40:ab:95:
         6d:05:16:1b:4d:2f:12:77:4d:f0:3e:67:52:d2:9f:9c:a7:b7:
         61:a1:69:ce:54:b5:87:d0:38:d3:52:3d:fd:ed:ae:d0:c4:d6:
         a9:af:40:5c:e0:ed:11:77:af:ab:f9:91:b0:06:c4:fb:68:40:
         f6:5b:ae:6b:f4:0f:9e:5c:90:7f:69:e9:a8:a2:d6:0f:0f:3b:
         d5:c1:cb:1f:21:9b:f3:4e:3d:c4:00:e6:8a:98:f3:3a:0f:49:
         24:17:cd:21:bc:f1:17:54:05:be:1f:06:95:40:18:e8:da:78:
         ee:b1:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org