Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/w9GMzer6cnNKMiXo6A-6mpolx88.roa
File:                     w9GMzer6cnNKMiXo6A-6mpolx88.roa (raw, json)
Hash identifier:          kFkMlm8BpF6TdCXiTowNCqFsxv2z3LQq+peAzOSnbO8=
Subject key identifier:   C3:D1:8C:CD:EA:FA:72:73:4A:32:25:E8:E8:0F:BA:9A:9A:25:C7:CF
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       018570304855CA0ABC8E2B4CD2531CBEA7B7
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/w9GMzer6cnNKMiXo6A-6mpolx88.roa
Signing time:             Mon 02 Jan 2023 01:54:50 +0000
ROA not before:           Mon 02 Jan 2023 01:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14445
IP address blocks:        45.149.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:48:55:ca:0a:bc:8e:2b:4c:d2:53:1c:be:a7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Jan  2 01:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3d18ccdeafa72734a3225e8e80fba9a9a25c7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:85:da:45:41:5d:e2:de:f1:34:20:e9:96:
                    73:3d:3b:9f:ca:67:e6:52:4e:58:70:06:26:27:15:
                    d6:c0:f2:1b:7a:9f:b2:ad:32:7e:bb:35:19:ee:d1:
                    d1:34:ae:ad:7e:7a:29:d4:4b:5b:98:85:22:12:cb:
                    af:28:c8:88:e8:ea:dc:bb:0f:28:5b:33:bd:b6:30:
                    c5:c2:c6:6e:d6:75:9d:87:62:7c:ef:e9:87:b3:e9:
                    0c:28:17:f9:4b:a8:8a:03:b3:b7:db:a3:37:5a:ec:
                    7c:00:d7:9c:a5:26:a7:ab:1c:53:e8:45:84:4a:14:
                    13:5a:ba:ef:04:69:7f:84:25:eb:4b:30:c5:8d:1b:
                    8b:39:66:cb:f1:92:a8:5c:92:b1:24:1a:2e:3b:55:
                    d0:8f:6c:76:fc:e1:d8:5f:2c:b6:3d:e4:43:58:77:
                    d7:83:40:d7:0a:1b:e1:db:0e:3b:7d:df:64:c2:6d:
                    84:46:27:21:55:bd:7f:c5:6c:01:40:90:73:1c:84:
                    61:1a:50:55:22:38:db:25:88:b0:8f:d4:2c:6a:2f:
                    5f:ab:ad:d6:4c:c4:9f:92:38:ef:9e:ec:88:26:85:
                    18:85:f3:bf:8f:f1:63:6a:3e:e9:1e:49:65:47:7f:
                    c6:13:8c:c5:de:b2:42:6f:09:fb:19:d2:ea:cb:33:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D1:8C:CD:EA:FA:72:73:4A:32:25:E8:E8:0F:BA:9A:9A:25:C7:CF
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/w9GMzer6cnNKMiXo6A-6mpolx88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:04:18:46:fb:a4:93:4f:9c:04:01:53:69:be:d3:58:0a:fb:
         6b:54:4f:aa:0c:8f:6a:54:a2:26:1a:47:73:eb:57:a5:ae:ef:
         74:66:d1:25:d3:12:75:e3:8b:96:5d:6b:9d:75:a1:7b:48:87:
         c4:9a:89:92:1e:74:4b:d4:04:86:6d:b7:40:71:38:3f:9a:8b:
         2b:97:3e:05:91:89:c5:73:19:0b:55:fa:a3:cd:bc:2f:ff:4c:
         f0:76:c9:c8:b6:2d:18:fd:9c:96:11:98:82:a8:1e:7f:d0:24:
         21:85:8c:64:25:d7:7a:ed:b7:98:ae:f9:4e:9b:e9:e2:84:81:
         1a:f4:24:73:76:91:7d:ed:8d:ac:b3:3d:31:7d:5d:fc:f0:6a:
         11:84:8c:ac:63:ec:dc:87:03:0b:f9:21:89:12:32:2b:cd:ac:
         b3:7d:c5:1d:08:37:f6:f3:b9:18:02:b6:a5:27:b2:a3:5f:0e:
         a3:28:b0:7e:1d:dd:65:39:54:80:c3:c7:91:ec:73:67:1b:4b:
         08:ca:19:f5:95:d8:3d:dd:e0:a1:4e:b0:cd:34:c2:01:66:8e:
         09:aa:67:aa:85:ca:7b:1d:bb:66:df:c8:69:34:70:55:4d:5a:
         48:55:53:6f:19:6d:3b:9f:19:e8:df:f3:e6:b5:f6:bb:fc:52:
         73:f4:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org