Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/x0LqFx1Dq0SyaohGqzmnQV4ycPs.roa
File:                     x0LqFx1Dq0SyaohGqzmnQV4ycPs.roa (raw, json)
Hash identifier:          vImG8Cq+5ZS8dwLJ6WiAtoaiIdQcYPjidYN/RLg4RwI=
Subject key identifier:   C7:42:EA:17:1D:43:AB:44:B2:6A:88:46:AB:39:A7:41:5E:32:70:FB
Certificate issuer:       /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial:       01856CC166166BFC017219BCCCF53158B82A
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/x0LqFx1Dq0SyaohGqzmnQV4ycPs.roa
Signing time:             Sun 01 Jan 2023 09:54:51 +0000
ROA not before:           Sun 01 Jan 2023 09:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53850
IP address blocks:        45.143.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:c1:66:16:6b:fc:01:72:19:bc:cc:f5:31:58:b8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
        Validity
            Not Before: Jan  1 09:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c742ea171d43ab44b26a8846ab39a7415e3270fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:a8:a8:16:9c:09:9f:30:d6:27:49:0f:66:
                    f2:45:00:60:6c:50:8d:f2:ee:0c:db:e1:b8:7d:24:
                    2e:0a:c5:a6:b5:0a:bb:9d:f2:62:e8:d1:bd:34:d4:
                    a2:4f:6a:d4:47:1c:a9:ba:e2:35:d8:9b:86:49:51:
                    53:05:dd:bb:ca:98:0e:4e:96:ec:66:e5:44:e9:e9:
                    3c:91:0b:15:45:48:7e:8a:87:de:81:55:79:2b:de:
                    c3:7f:21:37:b0:9f:80:bb:23:69:f6:98:43:a5:3e:
                    bd:e2:dc:22:a8:18:d9:68:fb:78:d3:a0:9a:4d:8a:
                    2b:c5:08:5f:a8:cb:2c:3d:56:c1:38:16:2f:b8:16:
                    1f:c6:3e:83:1a:79:ff:7e:f6:bf:ff:ef:54:70:2a:
                    f0:a7:b7:47:1c:05:f8:9b:df:27:6a:1a:61:be:fa:
                    e4:5d:e9:9c:fb:17:70:91:6e:88:a8:4d:fe:72:18:
                    cb:48:17:e4:48:08:7b:0e:c9:5d:55:97:8c:44:8f:
                    dd:68:90:03:c6:a6:9a:5d:20:eb:12:95:3a:15:e7:
                    cd:78:ea:ea:11:16:a8:ba:8f:e3:58:71:79:29:2f:
                    40:1c:4c:dd:0d:41:d0:de:66:15:b9:03:94:cb:57:
                    28:c2:c0:85:df:2e:6b:8f:e4:ec:2b:6a:94:fa:12:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:EA:17:1D:43:AB:44:B2:6A:88:46:AB:39:A7:41:5E:32:70:FB
            X509v3 Authority Key Identifier:
                keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/x0LqFx1Dq0SyaohGqzmnQV4ycPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:f0:a7:48:42:9d:48:d3:73:fe:bf:7e:24:f3:29:db:d7:
         82:3f:9a:e5:4f:c6:9b:26:d7:a9:ad:57:b7:51:4a:a0:32:0e:
         60:49:f3:5a:7f:a6:82:47:63:45:84:54:8a:f6:bf:1e:37:04:
         db:be:84:2a:7f:db:21:f0:ca:25:07:cf:ad:a5:f0:2a:21:5b:
         dd:40:0e:01:39:eb:3d:48:cf:85:d4:f9:e2:f2:b1:ad:26:3c:
         bc:c3:70:9c:9b:d5:5e:5e:7a:42:79:8e:61:e7:1f:ad:b0:7f:
         ff:7b:9e:8d:92:5a:a3:2c:02:08:22:e6:3f:fb:31:62:6a:f7:
         a7:c2:78:fd:ff:61:76:23:e4:d4:f3:ee:b0:41:3f:64:71:77:
         2c:44:93:d4:08:ee:5d:80:7a:80:10:9e:39:2b:38:df:6b:9d:
         81:15:c2:f8:83:dd:2a:57:a7:88:ee:76:b2:06:a6:2d:84:b8:
         04:73:be:29:6a:09:d7:7c:70:07:a8:b5:2f:03:63:97:7d:f1:
         2a:f5:8f:49:43:1a:1e:94:a3:48:04:cc:64:af:16:70:ca:b1:
         51:d7:71:ae:01:63:2d:a1:52:91:2a:af:1f:cb:79:8b:f9:e9:
         2a:e0:83:bd:8c:bd:52:40:83:49:6a:d2:e1:58:44:44:7e:34:
         54:8a:8b:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVswWYWa/wBchm8zPUxWLgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmY4NzYyMzFkY2I1ZGZkN2FmNDUyMzEyMDU2NWQ5ODAw
NjQ3NGEwHhcNMjMwMTAxMDk1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzQyZWExNzFkNDNhYjQ0YjI2YTg4NDZhYjM5YTc0MTVlMzI3MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqGoqBacCZ8w1idJD2byRQBgbFCN
8u4M2+G4fSQuCsWmtQq7nfJi6NG9NNSiT2rURxypuuI12JuGSVFTBd27ypgOTpbs
ZuVE6ek8kQsVRUh+iofegVV5K97DfyE3sJ+AuyNp9phDpT694twiqBjZaPt406Ca
TYorxQhfqMssPVbBOBYvuBYfxj6DGnn/fva//+9UcCrwp7dHHAX4m98nahphvvrk
Xemc+xdwkW6IqE3+chjLSBfkSAh7DsldVZeMRI/daJADxqaaXSDrEpU6FefNeOrq
ERaouo/jWHF5KS9AHEzdDUHQ3mYVuQOUy1cowsCF3y5rj+TsK2qU+hIYtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdC6hcdQ6tEsmqIRqs5p0FeMnD7MB8GA1UdIwQY
MBaAFNMvh2Ix3LXf169FIxIFZdmABkdKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUt
YmM2NGQzZTYyMzgyLzEveDBMcUZ4MURxMFN5YW9oR3F6bW5RVjR5Y1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83ZDhjZmQtODgzMC00ZmUzLWJmNzUtYmM2NGQzZTYyMzgy
LzEvMHktSFlqSGN0ZF9YcjBVakVnVmwyWUFHUjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY8GMA0G
CSqGSIb3DQEBCwUAA4IBAQA+2/CnSEKdSNNz/r9+JPMp29eCP5rlT8abJteprVe3
UUqgMg5gSfNaf6aCR2NFhFSK9r8eNwTbvoQqf9sh8MolB8+tpfAqIVvdQA4BOes9
SM+F1Pni8rGtJjy8w3Ccm9VeXnpCeY5h5x+tsH//e56NklqjLAIIIuY/+zFiaven
wnj9/2F2I+TU8+6wQT9kcXcsRJPUCO5dgHqAEJ45Kzjfa52BFcL4g90qV6eI7nay
BqYthLgEc74pagnXfHAHqLUvA2OXffEq9Y9JQxoelKNIBMxkrxZwyrFR13GuAWMt
oVKRKq8fy3mL+ekq4IO9jL1SQINJatLhWEREfjRUiovn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:18 2023 by rpki-client on console-fra.rpki-client.org