Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/NG1J98o0_Gvx7b_lnuNdjjCGpIc.roa
File:                     NG1J98o0_Gvx7b_lnuNdjjCGpIc.roa (raw, json)
Hash identifier:          UwA15Uz391txJNmk55gEwXSVbj5u6gO8qrOvfWBvp0k=
Subject key identifier:   34:6D:49:F7:CA:34:FC:6B:F1:ED:BF:E5:9E:E3:5D:8E:30:86:A4:87
Certificate issuer:       /CN=d793a8d736beb92be16d193b101f93be55325919
Certificate serial:       08FEE50A
Authority key identifier: D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/NG1J98o0_Gvx7b_lnuNdjjCGpIc.roa
Signing time:             Sat 18 Jun 2022 08:36:44 +0000
ROA not before:           Sat 18 Jun 2022 08:36:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        5.180.152.0/22 maxlen: 24
                          5.180.153.0/24 maxlen: 24
                          45.145.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150922506 (0x8fee50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d793a8d736beb92be16d193b101f93be55325919
        Validity
            Not Before: Jun 18 08:36:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=346d49f7ca34fc6bf1edbfe59ee35d8e3086a487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:ae:7b:53:f1:98:9a:24:2b:42:0e:c1:5c:
                    75:85:7d:38:16:1f:02:2d:4b:30:fa:34:af:d0:74:
                    f8:bf:ab:39:cb:30:8d:95:84:10:26:2d:80:d2:57:
                    b6:8e:96:56:dc:27:03:23:6e:aa:b1:ba:18:64:07:
                    71:e7:aa:84:64:ad:7c:9e:e6:2d:e4:1b:3e:60:bc:
                    a8:27:a4:92:eb:26:42:58:8b:93:a9:4f:43:f6:1c:
                    7b:13:36:c2:8a:c2:4a:6a:b1:97:7e:64:d3:cb:dd:
                    cf:f8:f8:7d:5a:35:bb:ee:28:44:39:76:06:f8:ee:
                    08:40:db:0e:ba:1c:c4:ad:1d:a4:8a:07:94:7a:3e:
                    df:99:f4:f2:a8:42:e4:5c:d6:c7:b2:0d:31:8b:7b:
                    24:56:a8:51:d9:fe:db:4e:b5:9d:bc:a5:12:4a:e7:
                    1c:22:99:3c:61:ad:5c:72:34:df:9e:21:3a:2f:f7:
                    7f:87:08:d7:a4:95:47:1f:d5:a8:bb:87:31:fa:4b:
                    ba:56:d5:15:99:27:f8:7f:0f:d7:8f:98:69:20:e7:
                    f8:38:6c:3b:51:f5:cb:a1:5b:e7:8c:d6:1c:b9:a1:
                    e2:09:87:f9:d2:28:82:93:96:f9:7a:f6:ce:4f:bf:
                    69:eb:88:87:55:2e:97:41:a5:f0:9f:31:56:09:66:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6D:49:F7:CA:34:FC:6B:F1:ED:BF:E5:9E:E3:5D:8E:30:86:A4:87
            X509v3 Authority Key Identifier:
                keyid:D7:93:A8:D7:36:BE:B9:2B:E1:6D:19:3B:10:1F:93:BE:55:32:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15Oo1za-uSvhbRk7EB-TvlUyWRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/NG1J98o0_Gvx7b_lnuNdjjCGpIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8a87df-760b-45ae-9a34-3e6a9ad01ac5/1/15Oo1za-uSvhbRk7EB-TvlUyWRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.152.0/22
                  45.145.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ac:cc:3f:9a:b6:2d:9f:71:92:47:a5:f2:4d:33:ca:ed:0a:
         ef:b4:b9:b8:62:a6:c1:5f:fa:4c:6d:8b:80:68:09:48:96:2c:
         c3:78:d2:25:d4:08:85:e4:5d:d5:7e:3d:6b:4d:c5:3d:ec:11:
         fe:df:8f:c2:dc:07:49:b2:49:8c:5f:62:ba:3c:80:47:e9:8b:
         59:4a:93:c9:b5:b7:bd:e9:2f:e8:93:74:6a:bd:69:da:a3:e7:
         f4:ed:f2:2f:b5:8f:0d:26:d8:2a:8c:f6:26:bd:e6:9e:7f:08:
         10:5b:1f:af:16:71:41:ff:79:98:a3:1d:a8:1f:06:90:6c:e9:
         58:85:e0:e0:3f:57:d7:d6:67:d0:e3:ca:95:aa:ab:bb:15:0a:
         56:88:d0:01:39:95:c6:2b:af:77:d0:70:29:7d:f0:e5:29:00:
         f5:87:96:38:68:60:f4:0e:64:6b:75:f5:50:f0:e2:75:69:42:
         0d:3f:2e:64:43:05:3d:43:5e:ba:b3:e3:d7:34:2d:97:bc:17:
         ba:20:27:88:b6:72:94:99:32:90:1c:b8:f6:5e:5c:f5:57:c5:
         ef:ad:00:4c:17:1f:5d:81:c8:51:bd:36:20:97:58:9c:8c:77:
         c8:9f:8c:a3:39:38:56:93:42:44:6a:c1:d3:91:ec:bb:e6:b3:
         ef:17:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org