Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/tV3x9qaVsLEDb6cv0VFUaqOq-lw.roa
File:                     tV3x9qaVsLEDb6cv0VFUaqOq-lw.roa (raw, json)
Hash identifier:          lT5IihbQuqi6XEZhrfoGLkI7ao9VtWDovzdqQANHjps=
Subject key identifier:   B5:5D:F1:F6:A6:95:B0:B1:03:6F:A7:2F:D1:51:54:6A:A3:AA:FA:5C
Certificate issuer:       /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial:       0185E9566E8D733C8E6FFDA773EDA4E85157
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/tV3x9qaVsLEDb6cv0VFUaqOq-lw.roa
Signing time:             Wed 25 Jan 2023 14:30:33 +0000
ROA not before:           Wed 25 Jan 2023 14:30:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     26548
IP address blocks:        45.148.232.0/23 maxlen: 23
                          45.148.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e9:56:6e:8d:73:3c:8e:6f:fd:a7:73:ed:a4:e8:51:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
        Validity
            Not Before: Jan 25 14:30:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b55df1f6a695b0b1036fa72fd151546aa3aafa5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:70:e6:96:e9:2a:51:c8:f9:fb:75:73:64:
                    d8:93:89:8f:6c:b6:ea:6a:6c:83:00:56:2b:1f:e4:
                    ee:66:f3:9c:92:64:6f:e9:37:f8:95:36:ee:17:3a:
                    5f:d8:1a:3e:b1:c6:e3:06:1e:22:44:3f:c7:04:9c:
                    a1:35:87:d6:07:1d:72:ea:3d:29:87:75:a5:ba:e9:
                    dc:a6:b5:02:f5:36:78:17:7d:8f:31:62:c1:b4:61:
                    03:0d:b9:74:2b:4d:5c:5c:a6:fc:e7:8d:31:67:82:
                    ac:99:a5:a8:16:eb:cd:d5:8f:63:99:e7:8f:9b:3a:
                    a2:3c:68:6d:c5:78:a7:ef:56:2b:59:58:74:ff:ab:
                    15:20:ac:91:5d:30:b4:41:24:c3:52:b4:fb:3c:e1:
                    a9:62:1a:3c:fd:1f:77:f5:25:f8:18:47:ce:32:2a:
                    b7:b2:89:9d:e8:16:d2:85:fa:cf:08:83:29:b6:6d:
                    f2:83:75:d9:bf:98:2d:a3:fd:b5:89:67:38:dd:1e:
                    18:6f:fc:2a:47:3a:87:bf:32:2a:b9:15:a4:bf:5e:
                    69:04:13:95:39:13:73:23:bf:80:5b:66:99:06:f6:
                    58:27:ff:57:63:f2:7f:57:6d:34:9f:72:5e:77:b3:
                    45:87:4f:22:cb:a5:2d:37:c5:3d:89:e5:2e:d1:00:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5D:F1:F6:A6:95:B0:B1:03:6F:A7:2F:D1:51:54:6A:A3:AA:FA:5C
            X509v3 Authority Key Identifier:
                keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/tV3x9qaVsLEDb6cv0VFUaqOq-lw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:98:b2:e5:b4:c9:75:ed:fe:0e:bc:22:8c:46:87:fb:98:
         89:3b:fa:bd:f7:7c:85:76:14:4f:07:fc:e9:28:20:9d:13:86:
         df:23:8d:cb:72:2d:1d:cd:be:b7:22:15:74:ab:25:61:6f:2e:
         5f:6b:4c:16:66:0a:a9:28:1f:fb:de:14:d8:0a:b6:04:69:a4:
         3c:0b:c7:6e:5b:1e:a3:83:f5:cc:14:73:2c:6d:33:e3:3e:80:
         59:5b:53:ee:c1:b8:3a:88:2b:af:4a:7f:27:9d:39:e0:cb:ba:
         02:76:49:3b:c2:8a:9c:0b:dd:bc:49:f8:55:9d:e3:bd:8e:15:
         d3:fd:79:1b:13:2d:41:59:7a:a0:b9:4c:30:a6:08:32:67:d0:
         ad:e5:a2:c9:d2:b2:a6:5b:d8:51:ac:9d:ba:14:63:e2:63:f9:
         7b:3d:e2:8b:cd:62:ca:58:7c:35:ef:b9:d1:71:a0:8c:32:4a:
         9a:3c:19:86:34:1b:de:89:3c:e0:88:6a:3e:70:27:76:a7:fb:
         6a:3f:97:8b:93:df:19:63:02:83:ca:67:9f:89:bc:8c:b4:66:
         de:a8:f7:e2:60:6e:0c:6c:ff:7e:6e:64:d4:a8:7d:56:34:aa:
         05:2d:42:39:95:b7:0c:85:35:0a:4e:93:f5:9f:a0:78:91:e0:
         50:3d:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org