Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/jTBcIMPa_cX6neLKOwOjbROvh_M.roa
File:                     jTBcIMPa_cX6neLKOwOjbROvh_M.roa (raw, json)
Hash identifier:          3ODK4oWVM6HVQiN8IjlmZRkqAyucMRwVcFcQTjCRyVg=
Subject key identifier:   8D:30:5C:20:C3:DA:FD:C5:FA:9D:E2:CA:3B:03:A3:6D:13:AF:87:F3
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0182F0EC6EF5EB3990C86E664BAB6D3B89AD
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/jTBcIMPa_cX6neLKOwOjbROvh_M.roa
Signing time:             Tue 30 Aug 2022 22:43:22 +0000
ROA not before:           Tue 30 Aug 2022 22:43:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34549
IP address blocks:        45.91.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f0:ec:6e:f5:eb:39:90:c8:6e:66:4b:ab:6d:3b:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Aug 30 22:43:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d305c20c3dafdc5fa9de2ca3b03a36d13af87f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:18:7f:cc:bd:4c:fe:dc:db:5d:cc:f6:b2:
                    5e:43:78:27:35:0d:07:bb:d8:3a:93:45:f5:91:5d:
                    17:49:13:ec:fc:c4:83:ad:31:cc:cc:cc:d1:2a:ca:
                    d3:0e:05:f3:1f:79:73:0f:f5:67:12:86:76:fa:40:
                    d1:25:ce:21:f7:19:d5:3e:9b:81:71:24:f2:4d:d3:
                    eb:9a:7f:53:50:8c:f6:71:5d:07:a5:a8:0b:44:4c:
                    b2:d1:36:77:ee:bc:44:a6:d6:26:12:85:67:78:1b:
                    75:fb:48:cd:fa:61:60:07:88:0f:4a:95:84:23:7c:
                    2e:1d:d1:cc:10:a2:51:94:73:ad:33:8c:5e:e4:04:
                    ff:b0:c5:b8:94:79:2f:b2:04:b1:9b:d3:cd:d2:60:
                    b9:5c:41:4e:59:ff:bd:f0:eb:41:73:66:95:2d:c6:
                    0c:69:a8:5d:28:61:7b:55:d7:e8:aa:17:94:48:34:
                    00:52:d9:ca:9e:47:25:47:ec:1b:ac:47:0e:4e:79:
                    ea:32:6e:a1:b7:43:b1:96:6c:32:1f:ab:f8:3b:0d:
                    e7:be:7d:ae:b7:35:b0:43:55:fc:f6:b4:0b:5e:c0:
                    25:eb:26:99:8b:a0:a0:b3:ed:a7:09:36:bd:10:63:
                    50:5a:1b:00:02:14:63:ec:9d:4e:c4:aa:fe:92:3b:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:30:5C:20:C3:DA:FD:C5:FA:9D:E2:CA:3B:03:A3:6D:13:AF:87:F3
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/jTBcIMPa_cX6neLKOwOjbROvh_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:c8:31:65:de:9f:9f:97:59:ce:8f:f8:85:95:6d:ca:e5:
         52:a7:d0:af:52:dd:a4:4b:8b:e8:d7:a1:ba:4f:b8:b3:1c:6d:
         e8:81:de:b7:74:91:f2:73:93:e6:af:a6:66:b4:23:69:5b:32:
         19:c8:af:b8:56:d9:37:51:9e:ed:77:06:10:30:d4:4b:68:a5:
         2b:33:95:5a:37:de:21:f7:e5:d3:11:e2:28:2f:fd:7c:c5:b9:
         b5:4c:6a:89:d3:c3:3c:87:c5:42:21:a6:27:da:16:17:78:fa:
         9c:f1:6f:35:13:33:9c:f1:09:b3:66:aa:40:c6:08:6b:da:0c:
         05:b1:c5:e8:94:6d:21:62:fc:86:96:26:d4:7e:f0:9b:43:b0:
         49:a9:fc:9c:ed:84:12:ec:f4:bc:1a:59:ae:3c:35:06:05:11:
         64:bd:8d:dc:13:4e:93:92:b4:66:ea:18:23:86:4d:59:12:c1:
         75:25:9a:fd:a0:86:80:4c:a9:1f:35:86:e2:c8:9c:6f:60:50:
         a2:d1:61:b3:ec:50:97:28:ad:a2:f0:4d:f8:f4:40:14:5e:ab:
         f4:07:c2:ca:0a:ad:0e:e1:45:dd:7a:d8:54:14:05:46:f4:53:
         9f:79:93:76:ea:2f:86:06:a2:99:e8:07:5d:2b:54:f6:f8:aa:
         f7:8b:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org