Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/JmL-62plaj3v5qj90OXSOZDCRFE.roa
File:                     JmL-62plaj3v5qj90OXSOZDCRFE.roa (raw, json)
Hash identifier:          g62mlyQQTg814zHJremPNJVqi4zB0Q9l9zxUXqjwmQ8=
Subject key identifier:   26:62:FE:EB:6A:65:6A:3D:EF:E6:A8:FD:D0:E5:D2:39:90:C2:44:51
Certificate issuer:       /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial:       0186FB93B73964A7DB4071BDC427854765C3
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/JmL-62plaj3v5qj90OXSOZDCRFE.roa
Signing time:             Sun 19 Mar 2023 20:33:27 +0000
ROA not before:           Sun 19 Mar 2023 20:33:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        45.142.112.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fb:93:b7:39:64:a7:db:40:71:bd:c4:27:85:47:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
        Validity
            Not Before: Mar 19 20:33:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2662feeb6a656a3defe6a8fdd0e5d23990c24451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:6a:01:9a:27:b6:bf:20:d2:03:4a:2a:c8:
                    92:41:cc:c9:52:3b:07:eb:86:48:16:f3:12:ea:30:
                    71:91:87:ca:d9:97:64:fd:1e:0d:fe:96:70:dc:fb:
                    fa:6c:af:21:b6:17:f1:06:8b:07:3c:53:7b:1f:66:
                    a6:a2:9b:2d:8f:4e:81:a4:84:66:fd:e4:fa:2c:23:
                    df:2c:86:e2:10:b1:8e:c2:63:b6:b9:aa:9c:75:3e:
                    87:2d:9b:0d:b3:4c:72:a0:0c:60:0d:b9:56:6e:70:
                    68:e8:80:b3:7a:2f:37:c8:b4:5b:c4:14:cb:72:94:
                    5e:9a:55:60:95:ef:8a:a1:4e:c7:0d:a3:6e:0b:2b:
                    40:e0:53:d3:65:73:9b:70:a5:87:bd:95:e5:5a:04:
                    4d:b9:eb:b1:a3:9a:2e:30:7f:02:33:58:7b:6e:fb:
                    9e:41:bc:53:41:30:79:29:74:d1:e2:b6:0a:f6:21:
                    11:e7:13:7f:8b:82:a2:5e:7a:b2:4d:36:47:45:f1:
                    af:6a:1d:83:7d:82:90:99:77:b6:1b:e5:35:96:19:
                    3e:54:93:af:f4:07:ff:fb:af:fe:b2:04:62:dd:84:
                    46:26:f2:64:49:06:32:f3:7e:d9:3c:45:22:62:93:
                    1b:e0:0c:7f:3a:fc:cf:19:31:70:43:f1:21:84:6c:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:62:FE:EB:6A:65:6A:3D:EF:E6:A8:FD:D0:E5:D2:39:90:C2:44:51
            X509v3 Authority Key Identifier:
                keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/JmL-62plaj3v5qj90OXSOZDCRFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:13:a5:b3:fa:78:6c:71:22:85:c9:f3:d8:6a:b3:3b:79:
         a7:21:89:73:2b:ad:97:40:1b:f1:15:07:9a:54:10:15:cb:bc:
         5c:ac:8c:ab:14:33:98:8d:32:7d:b9:33:53:59:02:eb:dd:3e:
         b0:48:65:de:7a:b6:e0:8c:2b:0a:6b:6b:96:8e:20:77:a6:58:
         a3:ba:21:5c:31:60:6d:88:97:b4:10:34:89:d8:84:9a:5a:74:
         93:27:aa:0c:fb:ec:76:37:67:ac:be:23:db:72:c2:51:aa:9f:
         03:02:59:23:f0:ad:73:68:7c:58:27:67:eb:e1:05:6f:d8:39:
         24:cb:ad:90:a8:4e:83:75:50:75:bc:0b:e2:d3:f2:84:4e:8f:
         e2:aa:27:57:3c:99:9e:4f:83:06:35:0d:85:bf:e5:ba:1b:1a:
         f4:24:d1:06:0d:6b:d4:a1:f6:63:0a:e3:f8:c6:53:ca:aa:9d:
         10:81:a9:58:72:1a:21:77:a1:06:c9:35:07:8c:5a:60:b7:aa:
         8c:43:bb:3d:49:75:f0:e0:7e:7e:30:92:87:3b:46:3f:33:12:
         17:bb:4d:c6:4e:d3:fc:18:fa:43:d7:80:b8:82:8d:c1:ca:60:
         1d:b7:0f:a9:c4:95:4a:58:80:64:19:91:da:27:66:58:35:f3:
         01:61:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 15:13:51 2023 by rpki-client on console-fra.rpki-client.org