Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/QRfMy_SvE2eKjOFwOSX4Zi88mcM.roa
File:                     QRfMy_SvE2eKjOFwOSX4Zi88mcM.roa (raw, json)
Hash identifier:          dLIzhLLD3RK1Pq5xVH5Rc2nVjdjIun46r3Aba1KxGvY=
Subject key identifier:   41:17:CC:CB:F4:AF:13:67:8A:8C:E1:70:39:25:F8:66:2F:3C:99:C3
Certificate issuer:       /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial:       0186613214E76817B496E6CC6931ADD8EF54
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/QRfMy_SvE2eKjOFwOSX4Zi88mcM.roa
Signing time:             Fri 17 Feb 2023 21:05:17 +0000
ROA not before:           Fri 17 Feb 2023 21:05:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400175
IP address blocks:        45.141.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:61:32:14:e7:68:17:b4:96:e6:cc:69:31:ad:d8:ef:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
        Validity
            Not Before: Feb 17 21:05:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4117cccbf4af13678a8ce1703925f8662f3c99c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:1f:2b:4f:29:bd:57:0a:3a:88:37:56:fd:
                    23:6e:05:b1:af:c4:3b:2a:d4:7e:40:f2:2a:95:9e:
                    14:62:1c:53:6f:bf:f4:23:ac:65:c1:8c:d6:bd:6f:
                    ac:ba:09:26:13:07:22:54:76:25:4f:59:e9:fe:d5:
                    c2:d9:e9:60:7e:ad:f3:b6:f4:3c:31:ed:38:d3:e6:
                    b2:dd:b6:83:42:cc:fd:e9:56:3d:cc:2e:d9:a4:5e:
                    95:8a:b0:2c:8c:99:33:e3:d2:11:d4:91:64:37:da:
                    dc:08:ae:06:0c:ed:43:68:56:3f:74:ca:af:72:8a:
                    64:49:cb:7b:30:e3:29:f4:65:13:b6:3f:d7:ce:ca:
                    8a:87:1e:76:d9:66:66:9c:76:31:ae:46:07:b3:fe:
                    04:7c:c8:4b:eb:74:ac:97:e4:2d:12:c9:71:dd:1e:
                    65:2e:30:e5:cf:f2:cd:34:28:2a:cc:3d:65:ab:4e:
                    3e:49:89:fe:67:a8:fe:63:f6:ec:f3:3a:99:69:a4:
                    42:76:78:17:c9:3b:2d:aa:27:f2:91:03:0c:70:95:
                    af:d3:34:e1:c2:5a:75:7c:3d:95:e0:5d:4e:0a:f1:
                    ec:d9:a0:e5:ab:80:fa:ce:bb:a6:9d:13:f4:43:59:
                    ad:ea:0d:66:24:44:eb:9e:0f:08:31:40:f5:25:c2:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:17:CC:CB:F4:AF:13:67:8A:8C:E1:70:39:25:F8:66:2F:3C:99:C3
            X509v3 Authority Key Identifier:
                keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/QRfMy_SvE2eKjOFwOSX4Zi88mcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8b:21:ca:48:06:af:86:d3:5e:33:07:72:c4:d9:39:0e:ae:
         14:fa:70:8c:46:67:9e:54:c1:9e:19:a5:63:80:47:01:06:e8:
         1e:a0:e4:3f:bd:cc:9e:34:88:a6:e8:16:fb:5c:d7:8f:48:94:
         55:36:ce:a9:40:2c:69:b5:ce:a5:60:9c:09:f9:1a:c1:21:21:
         86:b7:cf:de:3a:ac:86:7a:d8:da:ec:09:62:53:01:1f:89:a9:
         80:a3:ea:d9:7c:54:b2:ee:d3:e4:e5:34:ae:52:fd:10:f8:34:
         c3:90:cc:bf:4e:d0:5f:db:fb:c0:d5:c1:4f:46:cc:60:6f:80:
         eb:5b:0c:57:78:ad:4e:f5:64:ff:91:08:d8:e4:e9:bc:a3:4d:
         0b:8a:c1:c0:c0:b3:b5:11:06:e7:6f:73:78:01:aa:15:94:46:
         a5:00:fa:c9:9f:7f:2f:29:09:1f:85:a5:63:e7:1c:30:a5:e7:
         7a:ae:c4:b4:00:42:d3:e0:98:6f:5b:1e:05:26:82:cc:ed:68:
         02:46:37:70:d7:06:10:b6:70:c4:30:0c:f3:d1:35:b6:a9:90:
         b4:ef:f8:4f:f6:0f:f7:9b:bf:d2:01:9c:0c:89:6b:fd:0a:bc:
         72:cc:bc:67:73:23:94:b0:91:32:9d:db:7c:53:59:0e:8f:bf:
         83:6d:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org