Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/XIchjJTfIrocXwYUlFUJGq_iq6g.roa
File:                     XIchjJTfIrocXwYUlFUJGq_iq6g.roa (raw, json)
Hash identifier:          NFw/xRoCr2714++rnPHRze3dLwr2gGVyD8ULvKnt4Zo=
Subject key identifier:   5C:87:21:8C:94:DF:22:BA:1C:5F:06:14:94:55:09:1A:AF:E2:AB:A8
Certificate issuer:       /CN=1048dd12120601282143285eba666b13b434798e
Certificate serial:       1F76FF
Authority key identifier: 10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/XIchjJTfIrocXwYUlFUJGq_iq6g.roa
Signing time:             Wed 26 Jan 2022 12:44:15 +0000
ROA not before:           Wed 26 Jan 2022 12:44:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141968
IP address blocks:        45.134.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062079 (0x1f76ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1048dd12120601282143285eba666b13b434798e
        Validity
            Not Before: Jan 26 12:44:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c87218c94df22ba1c5f06149455091aafe2aba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:fa:9c:a3:0a:27:41:a0:fc:63:fe:8e:a7:
                    21:67:70:2c:4e:a6:83:36:b9:e0:e8:a7:f3:b9:eb:
                    2d:8f:a2:22:31:63:8a:b0:c6:3d:d1:02:f2:46:72:
                    00:b4:d1:04:dc:c8:07:22:5b:64:38:66:52:4e:15:
                    b7:97:48:2d:77:56:e1:59:27:95:17:c0:0e:60:19:
                    e9:14:e3:10:29:3f:07:be:f8:04:50:74:a5:c0:68:
                    de:6f:3c:b0:96:56:2c:5f:a6:56:49:03:4f:b4:13:
                    dc:3f:5f:8e:17:77:44:46:a8:3f:70:a4:a0:e5:38:
                    5e:66:6d:6c:96:9e:01:6a:19:4d:f5:60:2f:1f:74:
                    23:fd:f3:a0:8d:06:f4:19:a4:01:a6:6c:40:93:3d:
                    76:81:09:b2:93:d9:cb:86:2b:ba:00:ac:57:5d:98:
                    2e:85:af:a2:b4:55:8c:38:c3:ab:e8:87:7b:3c:b0:
                    e1:b9:34:ba:d2:f8:c6:59:bb:9f:b5:5b:39:53:a9:
                    a0:4d:33:23:5d:90:26:a2:56:9a:49:b0:2a:c6:fe:
                    cf:a4:2d:64:8d:e9:3b:6e:83:74:83:2c:80:de:5e:
                    ad:f0:13:31:61:34:28:a0:84:8f:ba:7b:9e:f9:28:
                    d3:13:61:27:5b:4b:27:78:11:6e:b2:c5:d3:76:94:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:87:21:8C:94:DF:22:BA:1C:5F:06:14:94:55:09:1A:AF:E2:AB:A8
            X509v3 Authority Key Identifier:
                keyid:10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/XIchjJTfIrocXwYUlFUJGq_iq6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/EEjdEhIGASghQyheumZrE7Q0eY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:81:73:12:00:a5:48:ed:a6:84:d7:48:17:ee:33:49:13:
         1b:12:8b:75:e9:50:8d:82:70:fa:33:6a:c7:4a:20:c2:4e:26:
         f8:34:81:81:3f:ab:43:ab:42:b2:86:fc:86:f1:ff:a6:eb:97:
         0b:54:36:16:62:d1:d8:c6:a0:15:5b:eb:67:7e:fb:92:49:26:
         b1:01:b3:d6:f9:5b:62:09:d7:a5:71:a3:2c:0e:69:eb:4a:eb:
         ab:6b:bb:3a:7e:6c:5a:14:6f:13:69:35:c9:86:13:8a:49:a6:
         38:78:64:b9:ee:47:d9:96:af:ce:11:d7:d6:f5:e3:2f:fb:c2:
         f9:44:74:ea:ce:17:b4:66:0c:13:3e:fd:2a:b2:a3:d5:87:5c:
         21:65:66:05:a7:d8:fd:ae:e0:b7:16:00:63:69:1c:04:6c:25:
         bc:ef:78:ea:22:bb:b7:4d:42:77:2d:c7:f4:f7:1d:57:7f:2c:
         3e:30:b3:53:07:e4:1b:da:78:35:c8:a4:cb:77:5d:be:5f:48:
         97:d9:68:93:43:c6:e3:a5:d8:53:6b:c9:87:42:98:9e:9c:5e:
         19:8f:73:5a:7c:9d:a1:21:45:18:18:f7:cf:05:b7:1a:79:05:
         7a:57:fc:5c:dc:df:b1:9d:82:f9:8c:05:a2:49:f7:c1:1c:ae:
         32:83:9a:d8
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDH3b/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NDhkZDEyMTIwNjAxMjgyMTQzMjg1ZWJhNjY2YjEzYjQzNDc5OGUwHhcNMjIwMTI2
MTI0NDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1Yzg3MjE4Yzk0ZGYy
MmJhMWM1ZjA2MTQ5NDU1MDkxYWFmZTJhYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiH36nKMKJ0Gg/GP+jqchZ3AsTqaDNrng6Kfzuestj6IiMWOK
sMY90QLyRnIAtNEE3MgHIltkOGZSThW3l0gtd1bhWSeVF8AOYBnpFOMQKT8HvvgE
UHSlwGjebzywllYsX6ZWSQNPtBPcP1+OF3dERqg/cKSg5TheZm1slp4BahlN9WAv
H3Qj/fOgjQb0GaQBpmxAkz12gQmyk9nLhiu6AKxXXZguha+itFWMOMOr6Id7PLDh
uTS60vjGWbuftVs5U6mgTTMjXZAmolaaSbAqxv7PpC1kjek7boN0gyyA3l6t8BMx
YTQooISPunue+SjTE2EnW0sneBFussXTdpQBJQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFyHIYyU3yK6HF8GFJRVCRqv4quoMB8GA1UdIwQYMBaAFBBI3RISBgEoIUMo
XrpmaxO0NHmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RUVqZEVoSUdBU2doUXloZXVtWnJFN1EwZVk0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85Mi83ODBkMDktZjBjZS00OTI1LWJkNjgtMDVhYzlmYjVjNGRjLzEv
WEljaGpKVGZJcm9jWHdZVWxGVUpHcV9pcTZnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83
ODBkMDktZjBjZS00OTI1LWJkNjgtMDVhYzlmYjVjNGRjLzEvRUVqZEVoSUdBU2do
UXloZXVtWnJFN1EwZVk0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYYIMA0GCSqGSIb3DQEBCwUAA4IB
AQAWK4FzEgClSO2mhNdIF+4zSRMbEot16VCNgnD6M2rHSiDCTib4NIGBP6tDq0Ky
hvyG8f+m65cLVDYWYtHYxqAVW+tnfvuSSSaxAbPW+VtiCdelcaMsDmnrSuura7s6
fmxaFG8TaTXJhhOKSaY4eGS57kfZlq/OEdfW9eMv+8L5RHTqzhe0ZgwTPv0qsqPV
h1whZWYFp9j9ruC3FgBjaRwEbCW873jqIru3TUJ3Lcf09x1Xfyw+MLNTB+Qb2ng1
yKTLd12+X0iX2WiTQ8bjpdhTa8mHQpienF4Zj3NafJ2hIUUYGPfPBbcaeQV6V/xc
3N+xnYL5jAWiSffBHK4yg5rY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:32 2023 by rpki-client on console-fra.rpki-client.org