Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/p64LUG21Vj-35LDyTABxX_6mgv4.roa
File:                     p64LUG21Vj-35LDyTABxX_6mgv4.roa (raw, json)
Hash identifier:          Wg+rtlA/plrRN53FgO3sMliUqBZ0E+KEVyL6GvkHWI4=
Subject key identifier:   A7:AE:0B:50:6D:B5:56:3F:B7:E4:B0:F2:4C:00:71:5F:FE:A6:82:FE
Certificate issuer:       /CN=40aa0cc8e165cd705221f3aa8aa6e6288462013e
Certificate serial:       038B8B2A
Authority key identifier: 40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/p64LUG21Vj-35LDyTABxX_6mgv4.roa
Signing time:             Sat 01 Jan 2022 07:53:51 +0000
ROA not before:           Sat 01 Jan 2022 07:53:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35682
IP address blocks:        45.138.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59476778 (0x38b8b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40aa0cc8e165cd705221f3aa8aa6e6288462013e
        Validity
            Not Before: Jan  1 07:53:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7ae0b506db5563fb7e4b0f24c00715ffea682fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:aa:7d:2d:8c:03:47:32:35:c3:b2:0a:ff:
                    09:75:61:96:4e:df:2a:99:e0:13:b8:23:31:19:5a:
                    24:54:37:60:2f:96:41:b5:27:8b:25:18:64:27:0d:
                    b6:7a:6e:22:b1:01:76:0b:8f:81:36:62:21:78:9f:
                    d5:28:f4:ac:c0:6a:bd:b4:c4:6e:3e:e6:2f:cf:57:
                    61:e6:fc:8c:28:d3:6c:bb:f0:53:50:ac:9b:45:5d:
                    8b:ba:57:aa:a2:26:8d:88:78:aa:71:e3:cf:c2:87:
                    b3:6c:62:98:c5:2c:ae:15:13:b9:bd:86:26:5a:3a:
                    94:bc:23:fd:55:e9:64:3f:12:95:78:6a:2b:b4:82:
                    32:63:03:b1:0f:5f:5d:47:2d:7b:5d:5f:3c:0b:37:
                    56:3c:e1:e7:49:16:d7:2e:af:e0:bd:c0:c0:21:b1:
                    6d:d1:8c:95:30:cf:c6:96:35:7d:6c:03:93:0f:fd:
                    95:09:c0:68:9d:32:c8:97:e0:22:89:bc:c6:5d:56:
                    b9:96:9c:fe:c7:a1:5b:85:88:5d:ef:b2:f1:db:ad:
                    f0:ef:2a:f0:38:5e:5f:f6:cd:4b:93:e4:88:2c:dc:
                    b9:cb:23:95:fa:9c:44:b4:0f:81:76:de:ce:7f:37:
                    3b:c6:9f:8a:8c:45:6d:74:9b:97:19:53:27:3f:8b:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AE:0B:50:6D:B5:56:3F:B7:E4:B0:F2:4C:00:71:5F:FE:A6:82:FE
            X509v3 Authority Key Identifier:
                keyid:40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/p64LUG21Vj-35LDyTABxX_6mgv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:60:00:41:f3:50:60:86:62:12:72:24:25:8a:31:6f:a5:
         97:a6:7e:8e:94:1a:f4:41:ba:6e:2e:6d:41:f2:4c:fa:a4:1f:
         74:32:3e:bc:a5:41:7c:c8:75:9e:3e:11:da:a6:19:98:c7:db:
         07:8d:ad:53:d6:7f:66:82:4d:64:46:73:41:3b:b2:7c:0b:33:
         21:79:73:62:71:bb:e2:05:c8:53:80:5f:d1:41:a8:25:01:89:
         08:44:51:b5:86:a6:ce:58:71:36:f5:9e:da:43:94:2a:2a:cb:
         53:6c:7c:fa:ef:e2:c2:15:0f:54:06:de:50:b4:3e:65:5a:84:
         ee:43:81:68:36:47:f6:b0:74:84:6e:0f:42:94:dd:e5:d7:39:
         0c:28:5a:ee:1f:2d:97:6e:0b:2f:fa:a8:5c:b5:2d:e8:4f:a8:
         57:d2:a1:7c:f9:d5:95:d3:bc:84:4b:19:b0:c7:1b:f6:8d:a9:
         66:95:4d:9a:35:f5:68:32:a1:f8:8c:8b:3d:53:8c:37:bd:28:
         60:1e:a6:98:b5:e1:d1:cf:c4:bc:b1:f7:92:07:3b:81:eb:20:
         5e:52:6b:bd:2d:f5:60:54:b5:ce:be:ba:53:30:4b:c0:53:be:
         fe:c6:98:8e:93:08:cf:5a:c7:bd:25:fa:13:86:cb:a8:dd:45:
         d9:77:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:22 2024 by rpki-client on console-fra.rpki-client.org