Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/SPD_l_U_WeDOp-svW2uI2BWzm5g.roa
File:                     SPD_l_U_WeDOp-svW2uI2BWzm5g.roa (raw, json)
Hash identifier:          61K2a/u8fXmG0qqaspLiYDmhPVxl7WHS3XI9JjxF2RI=
Subject key identifier:   48:F0:FF:97:F5:3F:59:E0:CE:A7:EB:2F:5B:6B:88:D8:15:B3:9B:98
Certificate issuer:       /CN=7d47d63346951d9316bbc2578645b5eae24531b9
Certificate serial:       018CC94E38C01B7535889E88F84449D8F1DB
Authority key identifier: 7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/SPD_l_U_WeDOp-svW2uI2BWzm5g.roa
Signing time:             Tue 02 Jan 2024 08:33:15 +0000
ROA not before:           Tue 02 Jan 2024 08:33:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31122
IP address blocks:        45.11.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:38:c0:1b:75:35:88:9e:88:f8:44:49:d8:f1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d47d63346951d9316bbc2578645b5eae24531b9
        Validity
            Not Before: Jan  2 08:33:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=48f0ff97f53f59e0cea7eb2f5b6b88d815b39b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:76:8c:98:2c:b5:95:25:ac:56:a1:5b:64:
                    df:86:c5:58:68:b6:36:11:3e:ba:21:5e:a1:0a:f1:
                    f2:bd:93:4a:41:88:97:fe:75:59:69:d1:80:37:5a:
                    76:67:97:2e:88:de:a5:a5:ab:44:a7:f7:db:4e:69:
                    fd:98:60:ba:88:41:07:42:e2:40:41:04:48:7a:56:
                    d3:4d:15:67:15:d0:18:12:86:c4:79:a5:e8:39:e1:
                    77:3b:2e:05:47:92:b6:22:08:6b:99:48:e2:af:51:
                    c5:e5:da:04:b6:fa:9f:97:06:c3:80:d7:82:75:0a:
                    8e:14:29:13:b4:f9:8a:30:32:6e:43:6d:5f:bc:c0:
                    93:28:38:c4:13:c9:e1:29:0a:f7:54:5c:fc:8a:53:
                    aa:4d:67:cd:1e:7a:9e:7c:a2:55:62:dd:f6:e6:5a:
                    42:9f:c8:50:63:82:95:74:20:b1:10:01:e1:a4:66:
                    13:b1:cc:e8:57:7a:42:99:ec:08:a8:57:08:84:9c:
                    38:92:01:8e:a8:ab:6b:ca:ed:d5:f2:09:9e:d0:bc:
                    64:f3:b4:22:2c:71:ef:da:48:9e:67:be:66:1c:38:
                    32:44:cd:1e:1d:07:ba:f5:04:cf:5d:91:a4:41:70:
                    28:34:d9:cb:21:25:27:7f:b8:0b:ce:07:05:a9:5d:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:FF:97:F5:3F:59:E0:CE:A7:EB:2F:5B:6B:88:D8:15:B3:9B:98
            X509v3 Authority Key Identifier:
                keyid:7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/SPD_l_U_WeDOp-svW2uI2BWzm5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/fUfWM0aVHZMWu8JXhkW16uJFMbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:46:af:0e:59:8b:f6:c0:32:a7:39:95:03:37:4d:c3:d4:f5:
         bc:a2:22:60:2c:e3:5c:41:21:46:cf:b2:80:1e:79:84:33:0d:
         bb:13:42:1f:0d:e3:7c:c4:95:7e:69:ef:71:bb:0c:59:7c:1a:
         02:c6:27:e8:95:36:f6:e5:bd:3a:58:22:df:85:a1:3d:e1:ca:
         ba:00:b7:9a:78:43:36:85:4b:11:01:b7:34:04:88:43:ca:a6:
         ae:e5:9b:f3:38:52:18:1f:8a:09:fd:45:3c:73:01:86:fa:61:
         67:1a:dc:5b:91:da:6c:e1:e6:ca:89:41:63:16:cf:2d:04:a6:
         ee:20:2c:28:74:fd:ad:13:6d:c2:88:b5:6a:45:dc:1d:ba:18:
         9d:03:28:fa:91:37:b5:13:36:13:28:b9:73:27:a5:2f:39:ff:
         c1:f5:46:31:cf:05:b8:53:97:80:f1:e0:f5:ae:49:ba:a5:b6:
         0b:fc:0a:91:d6:ff:b7:19:c1:10:39:ea:42:d1:2b:5f:00:69:
         d6:6f:be:bf:54:62:a7:e9:b8:e2:0a:bc:fc:12:7a:d5:ec:c9:
         79:44:7f:af:bd:4b:6f:84:b9:47:14:c1:01:56:b8:02:2e:33:
         d0:2f:96:24:29:4e:8f:2c:e2:39:bf:06:91:9a:7d:e1:5a:89:
         e2:1d:9b:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTjjAG3U1iJ6I+ERJ2PHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDdkNjMzNDY5NTFkOTMxNmJiYzI1Nzg2NDViNWVhZTI0
NTMxYjkwHhcNMjQwMTAyMDgzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGYwZmY5N2Y1M2Y1OWUwY2VhN2ViMmY1YjZiODhkODE1YjM5Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr12jJgstZUlrFahW2TfhsVYaLY2
ET66IV6hCvHyvZNKQYiX/nVZadGAN1p2Z5cuiN6lpatEp/fbTmn9mGC6iEEHQuJA
QQRIelbTTRVnFdAYEobEeaXoOeF3Oy4FR5K2IghrmUjir1HF5doEtvqflwbDgNeC
dQqOFCkTtPmKMDJuQ21fvMCTKDjEE8nhKQr3VFz8ilOqTWfNHnqefKJVYt325lpC
n8hQY4KVdCCxEAHhpGYTsczoV3pCmewIqFcIhJw4kgGOqKtryu3V8gme0Lxk87Qi
LHHv2kieZ75mHDgyRM0eHQe69QTPXZGkQXAoNNnLISUnf7gLzgcFqV2BJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjw/5f1P1ngzqfrL1triNgVs5uYMB8GA1UdIwQY
MBaAFH1H1jNGlR2TFrvCV4ZFteriRTG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVmV00wYVZIWk1XdThKWGhrVzE2dUpGTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZmMzMTEtMzExMC00N2Y1LThjNGYt
MGM5Zjc2YTM0MDA1LzEvU1BEX2xfVV9XZURPcC1zdlcydUkyQld6bTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZmMzMTEtMzExMC00N2Y1LThjNGYtMGM5Zjc2YTM0MDA1
LzEvZlVmV00wYVZIWk1XdThKWGhrVzE2dUpGTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQuoMA0G
CSqGSIb3DQEBCwUAA4IBAQAhRq8OWYv2wDKnOZUDN03D1PW8oiJgLONcQSFGz7KA
HnmEMw27E0IfDeN8xJV+ae9xuwxZfBoCxifolTb25b06WCLfhaE94cq6ALeaeEM2
hUsRAbc0BIhDyqau5ZvzOFIYH4oJ/UU8cwGG+mFnGtxbkdps4ebKiUFjFs8tBKbu
ICwodP2tE23CiLVqRdwduhidAyj6kTe1EzYTKLlzJ6UvOf/B9UYxzwW4U5eA8eD1
rkm6pbYL/AqR1v+3GcEQOepC0StfAGnWb76/VGKn6bjiCrz8EnrV7Ml5RH+vvUtv
hLlHFMEBVrgCLjPQL5YkKU6PLOI5vwaRmn3hWoniHZvu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org