Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/Fg1NtN8ToSQ_Kd8Ompsq4-IH_Bg.roa
File:                     Fg1NtN8ToSQ_Kd8Ompsq4-IH_Bg.roa (raw, json)
Hash identifier:          jUnkUjB17Whv9RYrzCVzYbt66aYVnfVokkPC15jOdQY=
Subject key identifier:   16:0D:4D:B4:DF:13:A1:24:3F:29:DF:0E:9A:9B:2A:E3:E2:07:FC:18
Certificate issuer:       /CN=d793a8d736beb92be16d193b101f93be55325919
Certificate serial:       078CD54B
Authority key identifier: D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/Fg1NtN8ToSQ_Kd8Ompsq4-IH_Bg.roa
Signing time:             Sat 01 Jan 2022 12:04:39 +0000
ROA not before:           Sat 01 Jan 2022 12:04:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        45.145.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126670155 (0x78cd54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d793a8d736beb92be16d193b101f93be55325919
        Validity
            Not Before: Jan  1 12:04:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=160d4db4df13a1243f29df0e9a9b2ae3e207fc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:fc:58:e1:eb:e4:13:2d:33:50:45:48:f3:
                    69:ea:c5:6f:ce:2b:13:57:d8:fd:d6:1d:27:13:5c:
                    de:4c:c2:a2:80:84:53:3b:a4:0c:eb:15:ee:d4:c5:
                    7b:ac:89:de:d3:93:23:39:e4:37:37:c2:ee:d1:15:
                    43:5e:fb:bc:0b:ee:4e:07:7a:4f:4d:d9:0f:23:51:
                    84:72:43:30:14:be:0f:3f:2e:c9:d4:de:42:53:fe:
                    65:1e:d3:33:df:c6:da:62:45:8a:ec:10:6c:88:1b:
                    0b:57:2d:23:2d:31:6f:a8:ae:94:61:37:8c:9b:61:
                    00:87:10:07:4a:b2:a3:3b:c7:be:9d:40:57:8e:ee:
                    bb:85:0e:34:45:cf:cf:08:81:ef:f4:86:62:21:fa:
                    f9:8f:66:c8:6e:cf:64:c0:8f:60:78:9c:60:85:3b:
                    a4:aa:4f:36:2b:71:73:ff:82:a8:b1:97:a1:bc:17:
                    46:f0:7f:31:37:4c:4b:db:88:bb:f2:24:26:83:d4:
                    e1:77:39:3c:7c:76:8f:81:77:92:7b:28:ec:24:f1:
                    63:21:7d:a1:37:d6:03:a5:9d:bd:9f:51:33:f1:c6:
                    62:b2:6d:7d:0a:50:b1:95:87:63:ab:4e:8e:35:b9:
                    eb:c6:21:58:4f:ce:56:9e:f9:c9:3c:c5:87:da:b3:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0D:4D:B4:DF:13:A1:24:3F:29:DF:0E:9A:9B:2A:E3:E2:07:FC:18
            X509v3 Authority Key Identifier:
                keyid:D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/Fg1NtN8ToSQ_Kd8Ompsq4-IH_Bg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:46:a1:8a:32:c9:eb:99:af:8a:bf:f3:f3:4d:24:ef:f2:4b:
         23:fb:a8:dd:f5:6b:e9:b3:b3:c3:f5:24:e0:b0:65:d4:d2:3f:
         2c:08:91:da:49:e2:86:5f:19:eb:85:74:69:58:0a:20:a0:42:
         21:eb:95:4f:54:ae:d1:e9:2c:8b:cb:46:b2:81:dc:41:57:ab:
         ee:46:63:65:f6:6e:3b:fe:a2:1e:55:97:3f:f1:71:0e:6d:5b:
         f8:e6:48:ff:20:e6:18:f7:d8:ea:89:0d:92:6e:85:e7:3f:a3:
         f6:04:74:5f:84:52:22:c9:4c:61:4c:08:66:51:52:68:be:ea:
         7b:7b:66:34:8d:f3:a6:9f:53:ca:da:fc:44:16:59:c1:a5:1b:
         53:62:72:26:e4:a7:c5:9d:aa:88:f6:d2:8d:93:6d:48:43:fd:
         d2:9e:54:06:0c:31:0d:3c:2d:d1:13:a2:5c:0f:e8:d9:04:4e:
         72:74:d8:01:f2:4a:9b:f9:20:dd:54:fe:eb:e6:33:1c:cb:d0:
         62:77:d7:41:f8:a5:a1:16:35:7b:9f:f9:f0:7c:04:91:7a:86:
         ea:cf:02:ba:d1:66:80:69:bb:d0:b5:bb:0f:e3:81:a9:d2:9c:
         b6:e9:61:3d:2a:d2:96:b6:a2:79:51:11:61:48:e4:a7:85:19:
         57:49:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org