Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/v7CqAQRLRfY8JIz4xzzpeJrfXDE.roa
File:                     v7CqAQRLRfY8JIz4xzzpeJrfXDE.roa (raw, json)
Hash identifier:          PK912Te1ap3/aLxqfKPAcLgfdtgmMH6jFRRlTtk+sM4=
Subject key identifier:   BF:B0:AA:01:04:4B:45:F6:3C:24:8C:F8:C7:3C:E9:78:9A:DF:5C:31
Certificate issuer:       /CN=9a303cea5cec8574e5f5e9c6d92be071eb3a3669
Certificate serial:       0504C530
Authority key identifier: 9A:30:3C:EA:5C:EC:85:74:E5:F5:E9:C6:D9:2B:E0:71:EB:3A:36:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjA86lzshXTl9enG2Svgces6Nmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/v7CqAQRLRfY8JIz4xzzpeJrfXDE.roa
Signing time:             Sat 01 Jan 2022 12:54:02 +0000
ROA not before:           Sat 01 Jan 2022 12:54:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        45.149.80.0/24 maxlen: 24
                          45.149.82.0/24 maxlen: 24
                          45.149.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84198704 (0x504c530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a303cea5cec8574e5f5e9c6d92be071eb3a3669
        Validity
            Not Before: Jan  1 12:54:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bfb0aa01044b45f63c248cf8c73ce9789adf5c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:d6:a5:5d:67:15:70:80:20:44:2c:f5:42:
                    3a:c3:d3:0d:01:3e:64:a7:d9:29:4e:df:08:73:5d:
                    d9:3a:8e:7b:dc:cd:16:f1:d6:a6:57:88:77:67:5c:
                    63:77:65:e3:5c:3e:a9:fc:91:73:a7:f9:15:c1:7e:
                    ed:4b:6e:c4:04:23:8a:23:f4:1c:42:e5:58:d9:23:
                    c7:96:3f:23:0c:8a:86:9b:67:6f:fc:9f:fa:08:05:
                    e9:a7:04:e0:93:31:fd:89:4f:58:2b:8a:a6:06:3f:
                    f8:0d:27:a7:fb:62:75:13:c8:e7:c2:19:11:54:d2:
                    7b:fd:7a:4d:d1:08:c2:dc:c9:26:3e:3e:95:db:8c:
                    84:84:e2:45:1a:77:69:09:c5:91:e3:b4:c0:f7:4f:
                    34:1d:48:20:3b:e7:fd:be:07:0e:7d:de:56:95:53:
                    40:59:d9:3f:cb:81:e1:7d:4d:de:34:08:74:91:d9:
                    48:d2:68:40:d8:9e:26:8d:c7:10:f1:4c:ae:06:d4:
                    57:f6:1e:0a:17:09:1b:93:45:ad:ac:dd:0b:64:55:
                    dc:58:d9:d8:21:cb:e1:57:50:0c:87:88:dc:e3:0a:
                    dc:29:eb:e2:9e:58:f2:ea:e6:33:80:2d:ca:0a:88:
                    3b:d1:cd:06:28:08:0f:82:aa:41:53:3c:87:17:d5:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B0:AA:01:04:4B:45:F6:3C:24:8C:F8:C7:3C:E9:78:9A:DF:5C:31
            X509v3 Authority Key Identifier:
                keyid:9A:30:3C:EA:5C:EC:85:74:E5:F5:E9:C6:D9:2B:E0:71:EB:3A:36:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjA86lzshXTl9enG2Svgces6Nmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/v7CqAQRLRfY8JIz4xzzpeJrfXDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d8d224-78c6-4cc7-9187-257b8de7e607/1/mjA86lzshXTl9enG2Svgces6Nmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.80.0-45.149.82.255

    Signature Algorithm: sha256WithRSAEncryption
         27:84:06:8c:45:76:c5:41:a5:5c:d0:a1:e7:9a:fd:2d:93:4e:
         1d:6e:96:1d:a5:3b:89:a2:05:0a:fc:3d:7c:1a:04:03:96:fc:
         82:3e:d0:66:7e:a9:86:ee:f7:a2:f1:14:e8:b3:49:29:73:6e:
         05:e9:a0:1d:31:48:7a:d7:aa:65:62:54:e5:18:75:a0:b9:ce:
         c2:a5:15:3c:13:2b:ad:7d:54:70:c8:e0:94:6b:d8:2a:de:1c:
         17:85:b6:ee:43:05:c1:21:07:2e:36:b9:28:6f:8a:f9:cd:3b:
         f6:9d:06:cc:82:27:74:41:4f:e7:19:d0:8b:9c:6d:86:d3:8e:
         21:0a:30:25:42:a0:b5:44:f5:7a:f6:65:9e:43:9b:e9:1a:2f:
         8b:ec:65:57:a8:56:18:69:dd:a0:b2:76:e7:26:10:ce:a4:eb:
         40:3e:00:dc:ef:8e:12:0a:82:23:51:d7:a9:bc:e5:53:82:92:
         70:b0:dc:05:83:ae:85:36:a0:d4:4b:8f:0b:19:a6:3f:04:a2:
         c7:bd:05:58:9f:a4:90:80:2a:d8:74:07:68:85:0b:b2:da:67:
         ce:05:ce:18:a2:cf:e7:a1:8d:10:64:a0:38:3e:d8:ab:9c:26:
         4d:d0:45:00:8c:a6:9b:13:55:38:a0:5a:48:f9:f4:6a:c7:2c:
         cd:db:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org