Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/tZAzIdiID8EowW_8Waw4OoSqWYk.roa
File:                     tZAzIdiID8EowW_8Waw4OoSqWYk.roa (raw, json)
Hash identifier:          ynoDk3Td+/zmfAiFIedPoBA2sB/0DPdIERrkF76bHlA=
Subject key identifier:   B5:90:33:21:D8:88:0F:C1:28:C1:6F:FC:59:AC:38:3A:84:AA:59:89
Certificate issuer:       /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial:       01824417BF11003C9B9E34AD9CB14130AEEC
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/tZAzIdiID8EowW_8Waw4OoSqWYk.roa
Signing time:             Thu 28 Jul 2022 09:16:23 +0000
ROA not before:           Thu 28 Jul 2022 09:16:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400031
IP address blocks:        45.155.157.0/24 maxlen: 24
                          45.155.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:44:17:bf:11:00:3c:9b:9e:34:ad:9c:b1:41:30:ae:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
        Validity
            Not Before: Jul 28 09:16:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5903321d8880fc128c16ffc59ac383a84aa5989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:ff:c7:17:8c:cc:ff:40:69:75:d4:d0:fc:
                    ac:e8:e2:76:a5:cd:f5:1c:1e:96:8b:a9:5a:39:cf:
                    11:8a:d7:55:e8:1b:de:80:33:f9:a1:33:8e:ad:d1:
                    f8:3e:9e:fa:51:c0:ca:85:2a:ae:c6:77:fc:9f:c6:
                    61:19:a2:11:cb:1a:05:86:19:da:73:c1:ac:1b:4c:
                    c1:e1:97:b8:de:64:b5:a4:5a:7c:c8:c7:20:4b:3e:
                    97:e3:46:4c:59:fe:cb:ac:c4:e3:55:7e:2e:ee:78:
                    26:5f:f3:9f:ed:b0:4f:a2:dd:6d:8a:e7:53:b5:0c:
                    f5:78:17:45:63:b7:27:a7:25:6b:21:37:13:15:0a:
                    ca:61:d3:db:7c:32:53:ad:b7:e9:ac:0d:c0:0a:62:
                    9d:ab:dd:20:84:38:d7:2d:a6:f0:91:ae:7e:f9:07:
                    49:ae:01:07:2c:73:ce:5f:a1:f8:58:55:fc:67:7c:
                    cd:71:fe:6c:59:7c:88:73:56:17:00:2a:a7:48:65:
                    05:61:49:30:02:ed:62:3c:4c:cc:9d:c4:69:df:8d:
                    8c:26:a2:b4:ea:00:72:b7:37:06:28:28:19:24:3a:
                    61:f4:6f:86:03:1a:a8:43:9e:7b:d9:18:6d:0c:50:
                    23:55:2f:60:e7:06:0c:f1:d8:ac:61:7d:c1:a8:14:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:90:33:21:D8:88:0F:C1:28:C1:6F:FC:59:AC:38:3A:84:AA:59:89
            X509v3 Authority Key Identifier:
                keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/tZAzIdiID8EowW_8Waw4OoSqWYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:44:a7:15:cd:b3:1f:fd:25:5a:e2:0b:96:a9:40:9c:91:
         dc:84:52:ca:bc:6f:9a:b2:39:8f:b8:33:34:38:fd:f8:49:a6:
         af:5e:8f:47:f3:30:91:3f:1e:dc:4d:11:5e:f9:32:67:0c:33:
         5d:0b:3e:4a:cc:02:2f:f6:23:02:c8:0e:8f:a9:53:e0:84:33:
         fd:eb:9e:53:b9:96:0f:3b:b5:cb:56:a8:f7:db:c2:f0:96:32:
         34:10:e4:29:15:2d:d3:b2:22:0f:0c:00:52:6c:cb:96:8a:23:
         30:72:60:07:dd:01:32:b4:41:fc:e0:c4:a2:5c:52:e6:c0:9c:
         4d:11:4d:f6:18:9f:7f:13:a6:15:8e:c4:a5:ea:f7:74:60:c5:
         b5:35:bb:0e:c1:88:27:8c:4a:a0:25:38:c1:42:0c:46:03:95:
         81:f1:bb:82:fe:6b:c4:55:44:15:97:09:6a:90:18:dc:be:1c:
         7c:ff:aa:99:5c:8b:63:17:1d:5e:48:d8:14:b8:a8:14:35:6b:
         7d:7a:bd:a6:2c:78:04:e0:97:81:06:ad:f6:b6:27:7a:0c:35:
         e1:96:ca:1d:18:f8:ad:49:23:f7:10:54:cf:22:bc:13:35:30:
         f2:4d:da:bd:75:3e:fa:3a:96:61:85:ba:fc:5c:91:8d:62:65:
         a8:89:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org