Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lnoODue04cEDEpWYCxssyZOx3EY.roa
File:                     lnoODue04cEDEpWYCxssyZOx3EY.roa (raw, json)
Hash identifier:          6f3vIYQYnRlHMC4idvJg9jfBc/bbVvKGLxsycvzrJ4M=
Subject key identifier:   96:7A:0E:0E:E7:B4:E1:C1:03:12:95:98:0B:1B:2C:C9:93:B1:DC:46
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0183A5423F72C2B9618885871F1B24D93889
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lnoODue04cEDEpWYCxssyZOx3EY.roa
Signing time:             Tue 04 Oct 2022 23:08:45 +0000
ROA not before:           Tue 04 Oct 2022 23:08:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210703
IP address blocks:        45.158.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a5:42:3f:72:c2:b9:61:88:85:87:1f:1b:24:d9:38:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Oct  4 23:08:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=967a0e0ee7b4e1c1031295980b1b2cc993b1dc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:96:3a:6a:b8:6b:90:31:67:ad:48:a5:70:
                    5b:4b:57:84:5d:db:28:54:72:19:27:20:96:6e:d0:
                    8b:3f:a7:60:bc:34:fe:a7:d2:d4:42:99:3f:81:6c:
                    c9:a2:4d:b1:9a:68:be:9e:31:e9:4f:16:bd:ed:a0:
                    71:84:f1:03:13:5e:b7:77:45:c7:d1:1f:97:6a:d4:
                    2f:19:a1:ae:3f:7d:e8:74:a5:cc:3d:de:94:62:a0:
                    03:6e:74:b0:af:43:f5:9c:fb:83:f6:11:01:47:40:
                    29:84:ee:2d:25:fb:92:c7:7c:d9:76:e2:d9:34:e1:
                    ce:69:57:c0:c6:40:2d:0f:37:c4:48:0d:c7:2e:93:
                    d4:c0:19:a5:61:91:c4:d2:cf:26:8f:b7:e4:1b:35:
                    fa:9b:8d:d6:1f:06:31:3a:fd:4a:62:8c:58:07:56:
                    77:b1:08:56:8a:4a:54:05:3b:b1:99:3f:4c:d8:27:
                    fe:bb:ef:da:ab:54:b5:85:a1:fd:56:bc:55:d1:bf:
                    a5:50:79:1e:f7:bb:58:7a:aa:2e:1b:fa:0d:b4:1f:
                    66:e0:ba:51:c7:0a:20:cf:06:f3:56:95:a2:bd:db:
                    91:71:4c:5d:7f:88:3a:04:da:f0:50:6e:12:93:17:
                    27:3a:32:40:d5:38:16:ba:46:44:2a:8e:24:9c:52:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:0E:0E:E7:B4:E1:C1:03:12:95:98:0B:1B:2C:C9:93:B1:DC:46
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/lnoODue04cEDEpWYCxssyZOx3EY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:1a:09:0c:96:11:8a:49:19:b9:81:5b:8b:e0:4c:49:f9:13:
         43:17:4b:8e:1f:3b:35:e0:d8:50:a5:7e:f5:47:0b:8e:41:c1:
         92:4d:15:5a:cb:a3:18:19:19:a0:1b:f6:d9:36:0c:26:4e:f8:
         50:67:26:cf:56:50:c2:b1:4b:6d:78:ea:aa:7e:1a:b5:e3:4c:
         6b:96:8f:86:2b:14:72:7f:3f:d3:95:82:1b:0b:51:6e:43:48:
         f8:7a:00:f8:a2:4f:45:88:f4:53:c9:06:88:0d:49:c1:2b:f2:
         e4:ff:5f:cb:45:2f:50:c6:4a:f2:6e:c2:41:63:0a:6c:cc:2a:
         b5:00:6f:10:01:54:67:5e:dc:38:82:b9:6b:d4:b0:bf:dd:55:
         c9:e0:07:f4:71:eb:7d:7b:c5:be:48:1d:5d:95:9d:23:05:1b:
         0b:ad:38:bd:42:a0:db:76:16:e4:0d:f7:00:a3:da:c5:a7:0d:
         3c:11:f3:51:5d:0a:02:39:c7:ad:c8:7a:0e:78:e1:6c:f8:8a:
         54:ae:fe:4c:31:b5:02:90:68:ac:c0:d2:d6:e6:90:56:b4:39:
         f5:54:9f:19:bf:19:96:ee:1d:4c:af:2e:2f:86:0e:75:13:91:
         71:5a:99:99:f4:3c:a0:d9:38:43:7d:58:d3:13:fa:24:04:0e:
         23:d1:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org