Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/wfZVvo3DhXPiHVM3s7tMGzUmecU.roa
File:                     wfZVvo3DhXPiHVM3s7tMGzUmecU.roa (raw, json)
Hash identifier:          1vLwp7KL79rv6tyUq0v8CvjClN9tBk8M/+4FWwDHV60=
Subject key identifier:   C1:F6:55:BE:8D:C3:85:73:E2:1D:53:37:B3:BB:4C:1B:35:26:79:C5
Certificate issuer:       /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial:       03C3AC30
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/wfZVvo3DhXPiHVM3s7tMGzUmecU.roa
Signing time:             Mon 13 Jun 2022 16:17:42 +0000
ROA not before:           Mon 13 Jun 2022 16:17:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209372
IP address blocks:        45.130.184.0/24 maxlen: 24
                          45.130.185.0/24 maxlen: 24
                          45.130.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63155248 (0x3c3ac30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
        Validity
            Not Before: Jun 13 16:17:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1f655be8dc38573e21d5337b3bb4c1b352679c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:17:a4:3f:09:16:ca:91:e3:1b:58:7f:16:
                    c0:60:ea:48:07:3e:bc:ee:cb:83:eb:b9:61:9e:c6:
                    48:54:36:1d:ac:8c:23:0f:18:bb:d2:92:93:fe:bd:
                    ec:94:4d:66:ca:40:af:79:e9:9b:3e:83:6e:a9:dd:
                    41:e3:45:6e:d1:d4:ce:74:39:98:1f:8f:6a:3e:10:
                    f8:bd:8b:5d:6e:5b:ca:dd:e9:6f:af:33:ab:5a:bf:
                    5f:32:17:67:67:c1:50:23:3b:0b:48:13:c4:57:59:
                    b9:e6:52:08:34:18:4e:74:3d:1c:a0:a9:f7:c9:a0:
                    bc:e1:0a:a0:c4:11:78:a4:e9:c9:45:4a:c9:c8:e3:
                    77:e9:36:57:6d:4a:f1:cb:d4:50:f7:91:ac:3d:52:
                    44:16:69:5e:3e:d2:30:cf:f1:37:c4:d8:58:ed:39:
                    e0:06:4b:90:9a:63:51:45:dc:fb:34:ea:4c:07:94:
                    9f:d1:1e:ab:94:e0:24:d3:fc:20:2a:d8:d3:82:42:
                    a5:83:85:98:1a:59:b2:6a:fc:e2:02:4b:de:7b:4c:
                    14:7f:da:73:2a:14:25:0f:74:84:00:05:ff:86:21:
                    c4:75:e7:f4:25:45:0f:cc:64:63:0c:f5:a3:a7:de:
                    e2:ef:83:2c:4a:3d:9c:a9:aa:d5:45:e3:ea:0b:96:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:55:BE:8D:C3:85:73:E2:1D:53:37:B3:BB:4C:1B:35:26:79:C5
            X509v3 Authority Key Identifier:
                keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/wfZVvo3DhXPiHVM3s7tMGzUmecU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.184.0-45.130.186.255

    Signature Algorithm: sha256WithRSAEncryption
         03:40:3a:c6:bd:75:ca:40:04:fe:0b:35:07:e5:96:d8:7e:3a:
         5d:ad:f9:6c:54:32:39:d4:13:b4:35:0d:ce:58:65:64:32:69:
         46:15:32:e9:92:36:40:47:79:62:97:f5:a0:54:d1:c8:0a:05:
         7e:8a:9a:fb:c0:cc:dc:0e:fd:05:27:38:5d:b8:60:5e:d9:00:
         7b:33:5a:1b:43:47:cc:8a:0e:51:d1:1a:41:a8:3c:5a:64:00:
         b4:d2:9f:f4:0a:c6:50:1a:42:8b:2e:db:f1:c5:dd:d2:3f:50:
         b8:74:6a:7b:09:e7:74:aa:bf:00:9f:43:8d:bf:ca:6e:06:3f:
         87:f4:7c:b1:21:78:2c:e4:5c:23:49:99:59:0d:a7:d2:3e:40:
         af:57:54:5d:94:36:33:80:75:cf:da:e6:ae:27:08:59:50:be:
         d0:d6:12:29:89:b8:12:cb:a6:22:e1:7a:fb:f4:86:9c:de:f6:
         07:1b:b9:cf:b0:56:46:ba:d6:cd:25:f1:67:f3:df:62:3e:2c:
         2c:30:a6:8d:00:a4:2f:13:e7:24:bd:0d:6f:92:26:34:0d:98:
         5c:a9:2f:da:4a:54:68:e3:96:ab:dc:f9:86:f1:3a:c3:ec:be:
         fa:e2:a0:77:bc:12:b5:46:e9:62:d9:d3:e3:b4:01:e6:b1:aa:
         a2:e5:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org