Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/7Urdby6cXSt2G-L2GpOYGRRbgXM.roa
File:                     7Urdby6cXSt2G-L2GpOYGRRbgXM.roa (raw, json)
Hash identifier:          +L+z2m6La/gRCwHhl/N3AbOqe+etz8L24tbWgNiXjvM=
Subject key identifier:   ED:4A:DD:6F:2E:9C:5D:2B:76:1B:E2:F6:1A:93:98:19:14:5B:81:73
Certificate issuer:       /CN=b09d2f65d7228de6ee9784ed8b6ade655f5ee778
Certificate serial:       01856F38FB96AD415734B76F466DADC02801
Authority key identifier: B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJ0vZdcijebul4Tti2reZV9e53g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/7Urdby6cXSt2G-L2GpOYGRRbgXM.roa
Signing time:             Sun 01 Jan 2023 21:24:43 +0000
ROA not before:           Sun 01 Jan 2023 21:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41155
IP address blocks:        45.91.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:38:fb:96:ad:41:57:34:b7:6f:46:6d:ad:c0:28:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09d2f65d7228de6ee9784ed8b6ade655f5ee778
        Validity
            Not Before: Jan  1 21:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed4add6f2e9c5d2b761be2f61a939819145b8173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:56:35:fe:4b:33:7e:35:e3:5e:4b:a8:8d:
                    e5:76:46:84:73:94:e2:4f:dc:d1:7a:64:55:cb:71:
                    e0:18:c9:7a:67:27:78:1e:57:49:bc:2a:24:e0:c9:
                    a7:22:ff:8a:14:44:4b:07:cd:62:35:ad:36:93:81:
                    ee:bd:7f:e9:05:ab:f7:e6:c6:52:b9:a8:d7:d9:33:
                    07:04:7c:d5:8c:5a:6b:e2:12:19:5b:d2:42:57:fc:
                    48:05:a9:98:92:28:4f:b9:e0:dc:65:88:fc:65:33:
                    e8:10:45:38:81:83:5a:65:62:3e:a7:0e:d2:ec:cc:
                    67:ff:12:fc:f7:56:2f:93:93:27:84:f0:a3:77:06:
                    90:46:66:2e:a5:97:b7:4d:38:c4:5c:81:94:57:c4:
                    a2:89:5e:51:f9:37:e0:44:aa:24:64:e6:04:d0:38:
                    fb:2d:45:41:a2:04:da:47:5e:72:14:86:16:2b:1c:
                    1f:74:e1:89:b6:fe:44:d4:fc:f4:36:2c:0d:4e:e3:
                    19:a1:45:b5:cf:1b:8f:16:0f:4c:c8:e0:9d:42:9a:
                    a4:3b:b1:ab:95:78:24:4a:c2:10:3e:58:50:29:21:
                    92:8d:41:80:8e:aa:0e:be:8d:fe:05:ca:fa:ed:7b:
                    ae:a3:92:e9:b3:97:31:df:8a:28:ca:0c:33:f3:ed:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4A:DD:6F:2E:9C:5D:2B:76:1B:E2:F6:1A:93:98:19:14:5B:81:73
            X509v3 Authority Key Identifier:
                keyid:B0:9D:2F:65:D7:22:8D:E6:EE:97:84:ED:8B:6A:DE:65:5F:5E:E7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ0vZdcijebul4Tti2reZV9e53g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/7Urdby6cXSt2G-L2GpOYGRRbgXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/44bc9c-47ac-42f5-9744-c468c44fa589/1/sJ0vZdcijebul4Tti2reZV9e53g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4c:8a:56:1a:af:0c:d7:7f:ab:44:d6:be:eb:62:c5:87:88:
         00:35:e8:79:32:e5:51:2d:1b:dc:ed:b9:59:02:83:31:7d:2b:
         ce:a9:95:74:64:19:e7:2e:0b:55:b7:23:04:6a:78:2c:03:94:
         78:30:a7:69:eb:b1:07:20:ef:db:f2:e1:c3:40:e2:e6:1d:2c:
         8d:35:0d:d4:da:ea:05:5b:7a:71:99:b1:a8:cc:00:97:ff:d5:
         49:7f:e3:fb:a1:5d:61:b1:da:a6:f0:46:5e:1e:c7:17:79:a9:
         ca:53:de:91:87:8a:6e:b8:f2:e9:06:ad:a1:21:71:2a:be:e1:
         2a:83:9b:be:9f:25:f1:85:99:55:83:d3:d5:93:5b:c1:26:78:
         3e:9a:9f:fc:95:b4:4c:e0:67:e5:60:c0:4e:f7:ee:38:e1:2b:
         df:58:15:1d:99:8a:54:71:51:10:60:bb:b4:94:42:b8:6a:df:
         cb:c0:db:3f:9a:66:62:b4:ba:06:c1:16:3b:38:a6:e7:7f:66:
         e3:ae:1b:04:6b:f6:83:ca:d9:17:ee:d1:7c:1f:8e:b7:b7:9a:
         61:4c:06:b4:f2:9d:d5:fa:65:09:ee:0f:c8:80:7d:42:0e:d7:
         11:f1:34:67:8f:22:ad:dc:f8:1d:64:88:95:77:d2:84:4a:69:
         2f:9d:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:39 2024 by rpki-client on console-ams.rpki-client.org