Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/jhBlFCtQgjiJf2aeCJkRiAuzVDc.roa
File:                     jhBlFCtQgjiJf2aeCJkRiAuzVDc.roa (raw, json)
Hash identifier:          pdd/Wae/r5ux7hnS2pbzGw1duzIV9Ru8V2aSO1bHoAI=
Subject key identifier:   8E:10:65:14:2B:50:82:38:89:7F:66:9E:08:99:11:88:0B:B3:54:37
Certificate issuer:       /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial:       01836A142307E83F43136ED990A901DC50AD
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/jhBlFCtQgjiJf2aeCJkRiAuzVDc.roa
Signing time:             Fri 23 Sep 2022 11:20:48 +0000
ROA not before:           Fri 23 Sep 2022 11:20:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52000
IP address blocks:        45.148.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6a:14:23:07:e8:3f:43:13:6e:d9:90:a9:01:dc:50:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
        Validity
            Not Before: Sep 23 11:20:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e1065142b508238897f669e089911880bb35437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:b6:3b:eb:48:a9:59:4e:d2:e7:e8:5e:d2:
                    49:44:d0:fd:19:43:6f:89:3f:45:af:a9:bc:d7:94:
                    6d:e2:c6:4c:62:51:5c:1f:87:fe:c5:d7:a3:34:ce:
                    a5:bf:d7:0f:21:3c:44:37:ae:4c:84:5e:0a:d9:f5:
                    ee:6c:51:46:1c:85:64:e8:80:38:e5:5c:ae:3c:e9:
                    ac:70:97:5e:c8:b9:3a:71:f9:97:a8:27:99:ea:44:
                    a3:2c:42:be:6b:8b:c8:b5:c3:91:29:e4:09:1e:10:
                    47:49:34:8a:ae:ad:df:f5:4c:4b:0d:a1:1b:1f:a1:
                    a6:5c:f4:27:a4:c6:b1:fb:73:dc:fe:e7:6b:c3:dd:
                    92:88:f6:68:ee:81:07:0c:aa:cb:8d:59:05:18:15:
                    8c:ad:b1:f8:50:db:e9:70:2d:eb:91:e7:56:6f:f7:
                    c7:2b:1e:1e:48:da:21:e3:13:60:cb:a0:a6:a4:cb:
                    3c:90:91:95:35:e8:6f:6a:eb:3b:c1:4e:69:79:7e:
                    93:1c:f6:4c:a7:9a:17:16:50:d9:97:72:1b:f0:b8:
                    fe:3d:dd:bd:50:55:45:33:01:ad:0e:fc:92:ba:82:
                    b8:e1:eb:90:be:5d:7e:24:49:88:c5:fe:9c:92:77:
                    99:15:b2:53:cf:54:ed:8d:ed:cf:1f:9f:92:0a:e0:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:10:65:14:2B:50:82:38:89:7F:66:9E:08:99:11:88:0B:B3:54:37
            X509v3 Authority Key Identifier:
                keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/jhBlFCtQgjiJf2aeCJkRiAuzVDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:05:e2:e3:51:f4:49:4a:ce:16:18:d0:b0:e0:e8:3e:7f:99:
         81:fe:c3:92:5c:ea:34:87:e4:df:32:b3:06:cd:3f:46:ff:12:
         bf:d1:78:c1:55:5b:f4:27:e1:f0:6b:3b:ea:49:92:ae:16:77:
         c3:1d:6d:b2:56:4f:75:e2:31:89:09:2c:82:cc:c2:34:84:ca:
         9c:89:85:9e:6b:c2:92:a1:01:ee:a4:e1:55:28:35:aa:1c:ba:
         71:c8:e8:bb:36:01:09:15:63:d9:9a:f1:7f:c8:ba:9f:3c:ff:
         8c:2a:5f:d2:dd:c7:9a:48:c1:c6:2a:c4:e5:ab:5b:6c:03:c3:
         c0:7d:63:35:3d:9e:59:6d:17:b8:f8:bc:2e:28:93:6e:b0:9f:
         76:40:a9:ae:3c:0d:60:f9:20:71:c9:28:fd:ba:65:7c:45:67:
         5c:25:7f:05:2a:ea:7a:3e:37:0c:dd:d0:60:c0:65:2d:76:f9:
         cd:cd:23:df:47:5b:cb:0c:96:32:43:0f:93:87:79:01:04:fd:
         59:95:0f:ef:2f:7b:df:e4:09:69:49:34:d5:21:5a:ef:9a:7a:
         fc:02:36:11:3f:52:f7:72:dd:fb:6f:63:a9:79:10:d0:91:d6:
         0b:07:f4:20:d2:4e:34:66:7d:c4:78:61:ed:2b:a0:55:6e:30:
         ca:85:e8:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNqFCMH6D9DE27ZkKkB3FCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmY4NzYyMzFkY2I1ZGZkN2FmNDUyMzEyMDU2NWQ5ODAw
NjQ3NGEwHhcNMjIwOTIzMTEyMDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTEwNjUxNDJiNTA4MjM4ODk3ZjY2OWUwODk5MTE4ODBiYjM1NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PS2O+tIqVlO0ufoXtJJRND9GUNv
iT9Fr6m815Rt4sZMYlFcH4f+xdejNM6lv9cPITxEN65MhF4K2fXubFFGHIVk6IA4
5VyuPOmscJdeyLk6cfmXqCeZ6kSjLEK+a4vItcORKeQJHhBHSTSKrq3f9UxLDaEb
H6GmXPQnpMax+3Pc/udrw92SiPZo7oEHDKrLjVkFGBWMrbH4UNvpcC3rkedWb/fH
Kx4eSNoh4xNgy6CmpMs8kJGVNehvaus7wU5peX6THPZMp5oXFlDZl3Ib8Lj+Pd29
UFVFMwGtDvySuoK44euQvl1+JEmIxf6ckneZFbJTz1Ttje3PH5+SCuDC6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4QZRQrUII4iX9mngiZEYgLs1Q3MB8GA1UdIwQY
MBaAFNMvh2Ix3LXf169FIxIFZdmABkdKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUt
YmM2NGQzZTYyMzgyLzEvamhCbEZDdFFnamlKZjJhZUNKa1JpQXV6VkRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUtYmM2NGQzZTYyMzgy
LzEvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZTpMA0G
CSqGSIb3DQEBCwUAA4IBAQB1BeLjUfRJSs4WGNCw4Og+f5mB/sOSXOo0h+TfMrMG
zT9G/xK/0XjBVVv0J+HwazvqSZKuFnfDHW2yVk914jGJCSyCzMI0hMqciYWea8KS
oQHupOFVKDWqHLpxyOi7NgEJFWPZmvF/yLqfPP+MKl/S3ceaSMHGKsTlq1tsA8PA
fWM1PZ5ZbRe4+LwuKJNusJ92QKmuPA1g+SBxySj9umV8RWdcJX8FKup6PjcM3dBg
wGUtdvnNzSPfR1vLDJYyQw+Th3kBBP1ZlQ/vL3vf5AlpSTTVIVrvmnr8AjYRP1L3
ct37b2OpeRDQkdYLB/Qg0k40Zn3EeGHtK6BVbjDKheiZ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:18 2023 by rpki-client on console-fra.rpki-client.org