Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/91pQR3C-N8oogwoP_6rcv1E8Hlo.roa
File:                     91pQR3C-N8oogwoP_6rcv1E8Hlo.roa (raw, json)
Hash identifier:          CAn5CwL8brc7zuy/fePNjamaQ4Mt7sF140VMjuPY58M=
Subject key identifier:   F7:5A:50:47:70:BE:37:CA:28:83:0A:0F:FF:AA:DC:BF:51:3C:1E:5A
Certificate issuer:       /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial:       018509C266940A3BDF9C659F2B60348D7A12
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/91pQR3C-N8oogwoP_6rcv1E8Hlo.roa
Signing time:             Tue 13 Dec 2022 04:33:33 +0000
ROA not before:           Tue 13 Dec 2022 04:33:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59651
IP address blocks:        45.143.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:09:c2:66:94:0a:3b:df:9c:65:9f:2b:60:34:8d:7a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
        Validity
            Not Before: Dec 13 04:33:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f75a504770be37ca28830a0fffaadcbf513c1e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:55:2b:2d:43:23:12:b2:ac:8f:ce:9e:46:
                    04:eb:fa:1b:11:a8:3a:2e:b0:0f:b0:52:81:d1:1f:
                    da:e5:d6:c0:15:2a:38:06:a3:e3:d3:78:20:32:aa:
                    31:af:df:c9:a1:c2:13:ed:db:4a:fa:8c:59:64:7b:
                    ec:2e:8e:0a:9d:04:82:47:3b:4c:e6:40:69:24:8d:
                    00:15:31:29:2c:f8:2d:c7:75:7b:67:ab:ef:28:0a:
                    24:e4:fa:66:83:d4:cf:2b:82:e2:8b:de:56:e2:52:
                    96:8f:df:dd:8f:dc:07:16:61:a9:ed:d3:53:27:d3:
                    92:cb:8f:4a:ff:68:ff:2c:93:c5:4a:c3:b1:1c:d8:
                    b0:03:32:85:3b:8a:f8:b8:fd:b3:d3:24:41:86:e8:
                    56:9f:5a:3c:51:37:82:ca:c0:35:d1:8b:12:ff:67:
                    55:53:4b:ac:16:b4:29:c0:fd:92:3d:82:51:59:47:
                    0a:5c:49:c9:09:a4:55:69:1b:4c:74:2e:bc:3b:12:
                    6d:8a:8e:d8:96:80:3a:6b:f0:a9:71:42:7e:e3:e7:
                    04:d7:97:01:a1:57:d0:a2:48:5a:3c:c7:e8:c1:68:
                    30:e8:4b:29:8b:1e:5f:d1:8f:0c:c6:ec:54:73:c6:
                    f2:68:4e:d8:8d:5e:5d:1f:aa:ae:e1:f6:71:d4:d3:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:50:47:70:BE:37:CA:28:83:0A:0F:FF:AA:DC:BF:51:3C:1E:5A
            X509v3 Authority Key Identifier:
                keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/91pQR3C-N8oogwoP_6rcv1E8Hlo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:7a:a6:44:2e:01:2d:03:29:6f:f6:bd:0d:39:31:f4:85:
         b6:95:f9:96:df:6c:71:13:c8:6a:19:df:6f:5e:f7:2b:85:a2:
         0c:95:c8:c1:9b:cd:ba:5b:fa:8e:a1:e9:5f:f6:c0:68:56:24:
         0e:20:42:e7:b5:97:59:04:e1:a4:15:e8:48:38:ac:60:40:54:
         54:43:07:9f:12:53:db:9a:30:e1:c3:f4:86:8e:38:33:c6:1a:
         7a:73:e3:b4:da:9a:63:d7:88:67:9a:90:6b:22:6a:23:c1:fd:
         c1:47:19:18:28:cc:36:c5:a5:fd:39:cf:d1:3e:a0:20:09:d1:
         82:0b:5f:ff:ba:32:d1:be:10:12:a5:51:50:5b:55:e6:50:1a:
         2b:2b:37:bb:26:04:81:05:57:63:0c:35:86:12:9a:6c:d6:25:
         0d:a1:2e:3d:80:59:17:77:dc:95:30:e2:88:61:87:41:7c:58:
         2e:d2:53:90:56:7a:4e:f3:80:5e:e1:43:70:a2:32:3e:22:6e:
         23:e7:44:f6:42:2b:7a:93:7c:39:c5:35:63:05:ae:7d:c1:67:
         19:6e:dd:77:22:ce:ed:64:7c:d1:5c:67:4a:3b:18:ab:dc:75:
         89:2d:a8:60:72:8a:77:8f:83:8d:28:cf:2a:b3:15:96:29:df:
         47:01:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:00 2024 by rpki-client on console-fra.rpki-client.org