Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0WSeuNs0m4C9YXuXw7o_FVFlT8s.roa
File:                     0WSeuNs0m4C9YXuXw7o_FVFlT8s.roa (raw, json)
Hash identifier:          Mhu7EC0WNo3aU2wJaavqvvPRg4i3faaTzyu4hKoK9zg=
Subject key identifier:   D1:64:9E:B8:DB:34:9B:80:BD:61:7B:97:C3:BA:3F:15:51:65:4F:CB
Certificate issuer:       /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial:       057650DA
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0WSeuNs0m4C9YXuXw7o_FVFlT8s.roa
Signing time:             Wed 09 Mar 2022 13:54:48 +0000
ROA not before:           Wed 09 Mar 2022 13:54:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43624
IP address blocks:        45.148.232.0/23 maxlen: 23
                          45.148.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91640026 (0x57650da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
        Validity
            Not Before: Mar  9 13:54:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1649eb8db349b80bd617b97c3ba3f1551654fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:88:f9:6b:1c:dc:f3:79:5a:b9:56:23:e2:
                    aa:b3:79:8a:21:14:2f:2a:59:e2:4b:ca:4e:07:67:
                    36:fa:3d:f0:b6:3f:e7:e1:d6:02:2f:1e:d6:f1:23:
                    64:c9:8a:37:bc:82:3d:24:8f:38:64:19:50:ec:32:
                    3f:ae:5a:69:f1:5d:50:03:e9:6c:9b:b8:85:9f:ce:
                    9f:31:d5:b6:3c:27:20:b6:81:7d:e0:27:75:54:f1:
                    1e:f5:1c:13:fc:68:af:be:e9:45:72:0c:92:c4:2c:
                    30:9a:09:d4:45:0f:7d:b9:e3:bb:69:71:46:28:a3:
                    b5:65:f4:55:22:02:92:34:9d:58:99:6a:18:58:94:
                    a5:37:66:a8:40:ce:cd:ed:fd:e0:ed:4a:5f:05:53:
                    32:3f:19:57:23:1f:1f:16:50:d7:8e:07:a5:19:34:
                    fa:45:82:e6:ea:6c:d6:af:74:01:6a:a4:0f:3d:fd:
                    9a:6e:5b:49:b8:44:00:30:d3:d9:5f:66:da:fd:ab:
                    2a:46:e9:b1:37:5a:ec:0c:5f:68:26:2e:2b:79:25:
                    3c:0e:c3:f7:e2:c7:56:16:cc:ca:ec:38:50:9e:62:
                    4e:e6:f7:45:e6:25:31:e1:06:8c:ae:2b:c6:75:a0:
                    49:05:6a:e7:61:93:4a:b7:b1:a2:32:11:76:a9:3d:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:9E:B8:DB:34:9B:80:BD:61:7B:97:C3:BA:3F:15:51:65:4F:CB
            X509v3 Authority Key Identifier:
                keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0WSeuNs0m4C9YXuXw7o_FVFlT8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:d6:e7:79:6b:64:10:15:ac:fe:44:74:03:61:8d:2d:bc:
         00:6b:2d:52:ba:4c:7c:f2:3d:bf:41:14:91:5b:0c:8c:b2:4f:
         35:f0:da:43:6c:4f:e2:d0:11:1b:6a:12:7d:14:14:14:e2:16:
         04:3a:0b:16:d1:c2:9b:b8:c7:0a:24:14:5e:f5:82:8d:82:b4:
         ae:a7:4d:aa:64:70:6f:f4:a3:20:b2:d0:54:1c:c5:a8:4f:72:
         c6:6b:28:47:fc:99:ce:56:cd:cf:fe:5e:c3:42:27:4e:7b:a4:
         a5:fb:39:db:59:61:99:46:56:36:bb:52:09:70:cc:75:c4:3d:
         15:60:90:d5:a2:6e:a7:4b:ef:c1:d7:a8:bf:6a:c6:ef:8f:bf:
         23:b3:39:ee:b4:69:c9:73:20:12:95:f9:10:0c:38:af:58:7d:
         15:67:83:a3:62:8c:22:f1:71:b6:27:b3:0c:21:45:15:05:fc:
         d1:a1:03:d7:e8:a5:a8:7e:5a:99:1f:e3:dd:ea:2b:37:0c:e7:
         68:ed:f0:83:cd:64:4b:d9:aa:68:89:31:80:db:d7:fb:f9:af:
         19:1d:53:17:9c:12:6b:06:bd:98:25:58:19:cd:ed:a0:e2:da:
         fb:cf:03:ae:ae:44:76:0a:c8:ef:3b:95:b5:56:6a:be:de:1f:
         83:2a:49:c0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBXZQ2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MzJmODc2MjMxZGNiNWRmZDdhZjQ1MjMxMjA1NjVkOTgwMDY0NzRhMB4XDTIyMDMw
OTEzNTQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDE2NDllYjhkYjM0
OWI4MGJkNjE3Yjk3YzNiYTNmMTU1MTY1NGZjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANZziPlrHNzzeVq5ViPiqrN5iiEULypZ4kvKTgdnNvo98LY/
5+HWAi8e1vEjZMmKN7yCPSSPOGQZUOwyP65aafFdUAPpbJu4hZ/OnzHVtjwnILaB
feAndVTxHvUcE/xor77pRXIMksQsMJoJ1EUPfbnju2lxRiijtWX0VSICkjSdWJlq
GFiUpTdmqEDOze394O1KXwVTMj8ZVyMfHxZQ144HpRk0+kWC5ups1q90AWqkDz39
mm5bSbhEADDT2V9m2v2rKkbpsTda7AxfaCYuK3klPA7D9+LHVhbMyuw4UJ5iTub3
ReYlMeEGjK4rxnWgSQVq52GTSrexojIRdqk95ykCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTRZJ642zSbgL1he5fDuj8VUWVPyzAfBgNVHSMEGDAWgBTTL4diMdy139ev
RSMSBWXZgAZHSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzB5LUhZakhjdGRfWHIwVWpFZ1ZsMllBR1Iwby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvN2Q4Y2ZkLTg4MzAtNGZlMy1iZjc1LWJjNjRkM2U2MjM4Mi8x
LzBXU2V1TnMwbTRDOVlYdVh3N29fRlZGbFQ4cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
N2Q4Y2ZkLTg4MzAtNGZlMy1iZjc1LWJjNjRkM2U2MjM4Mi8xLzB5LUhZakhjdGRf
WHIwVWpFZ1ZsMllBR1Iwby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2U6DANBgkqhkiG9w0BAQsFAAOC
AQEAUC3W53lrZBAVrP5EdANhjS28AGstUrpMfPI9v0EUkVsMjLJPNfDaQ2xP4tAR
G2oSfRQUFOIWBDoLFtHCm7jHCiQUXvWCjYK0rqdNqmRwb/SjILLQVBzFqE9yxmso
R/yZzlbNz/5ew0InTnukpfs521lhmUZWNrtSCXDMdcQ9FWCQ1aJup0vvwdeov2rG
74+/I7M57rRpyXMgEpX5EAw4r1h9FWeDo2KMIvFxtiezDCFFFQX80aED1+ilqH5a
mR/j3eorNwznaO3wg81kS9mqaIkxgNvX+/mvGR1TF5wSawa9mCVYGc3toOLa+88D
rq5EdgrI7zuVtVZqvt4fgypJwA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:18 2023 by rpki-client on console-fra.rpki-client.org