Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/_NIcciuWqp-auuPGYWQT_LOhxFM.roa
File:                     _NIcciuWqp-auuPGYWQT_LOhxFM.roa (raw, json)
Hash identifier:          4cwMWmUYQuKeoAr5VsAaVtnIoCEhFT3ePoy7YhQqqeE=
Subject key identifier:   FC:D2:1C:72:2B:96:AA:9F:9A:BA:E3:C6:61:64:13:FC:B3:A1:C4:53
Certificate issuer:       /CN=6c9b33fd0bf5f364f4894a7c32c36217aa5b4ab2
Certificate serial:       0181F465FE889DAD87850937274142D8D03A
Authority key identifier: 6C:9B:33:FD:0B:F5:F3:64:F4:89:4A:7C:32:C3:62:17:AA:5B:4A:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJsz_Qv182T0iUp8MsNiF6pbSrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/_NIcciuWqp-auuPGYWQT_LOhxFM.roa
Signing time:             Tue 12 Jul 2022 21:52:13 +0000
ROA not before:           Tue 12 Jul 2022 21:52:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        62.233.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:65:fe:88:9d:ad:87:85:09:37:27:41:42:d8:d0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9b33fd0bf5f364f4894a7c32c36217aa5b4ab2
        Validity
            Not Before: Jul 12 21:52:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcd21c722b96aa9f9abae3c6616413fcb3a1c453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:bd:39:f2:e9:3a:de:1d:d6:6a:47:d9:bd:
                    5b:c4:cd:c1:f8:66:f7:e8:4a:83:89:95:63:b0:00:
                    01:c8:c1:5b:75:8c:eb:12:17:49:3b:c3:7e:87:ee:
                    5f:e8:0f:5a:98:a2:98:37:df:45:fb:26:fb:29:4f:
                    9f:5e:ed:aa:49:62:78:1b:5d:98:f6:f8:2a:93:fc:
                    2a:9e:a0:b4:d4:6e:1a:cc:d8:f0:95:77:dd:58:da:
                    79:97:93:b9:8e:ff:ae:89:ff:8a:93:f0:55:46:95:
                    98:06:2d:e7:c2:e7:f1:99:c6:47:11:a2:97:8e:2c:
                    8a:af:8f:18:ae:21:d4:08:ec:a0:da:20:d0:3a:87:
                    6d:d9:0f:ed:4d:07:58:a2:d0:06:52:13:ac:25:77:
                    c7:6d:e0:d6:5e:e2:7a:3e:3d:c1:da:e8:c6:e1:f8:
                    d4:09:67:31:cf:23:c5:58:dc:b4:37:a2:0a:97:55:
                    44:b1:b2:5b:45:ec:14:12:b8:d4:ac:80:b5:59:9a:
                    54:66:cd:74:90:f9:af:f2:c2:9d:81:f1:ac:c6:07:
                    6c:a4:57:f2:97:75:eb:01:c8:df:f4:b9:0d:d7:b3:
                    a3:b6:ab:0f:6e:ba:cf:17:03:cd:08:26:69:3f:c4:
                    a8:be:1f:f9:51:ec:4a:77:82:cc:fc:8d:74:5f:79:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:1C:72:2B:96:AA:9F:9A:BA:E3:C6:61:64:13:FC:B3:A1:C4:53
            X509v3 Authority Key Identifier:
                keyid:6C:9B:33:FD:0B:F5:F3:64:F4:89:4A:7C:32:C3:62:17:AA:5B:4A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJsz_Qv182T0iUp8MsNiF6pbSrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/_NIcciuWqp-auuPGYWQT_LOhxFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/bJsz_Qv182T0iUp8MsNiF6pbSrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:54:bc:3e:3c:57:83:f8:c9:49:a6:c8:08:7b:c1:b1:52:c3:
         0a:1e:06:3d:33:dd:2d:a0:d0:88:d0:8a:3d:05:25:34:20:00:
         59:b5:18:db:01:f2:1b:6d:f9:32:b5:f8:35:01:bb:c4:b4:bf:
         dd:40:22:3f:53:56:ee:88:71:29:3f:8b:58:98:7f:5c:28:06:
         64:a9:97:3c:44:cb:04:c9:94:1d:6d:03:3a:78:12:6f:c6:3f:
         98:ab:9a:ec:de:85:96:3c:0f:aa:c9:af:80:a2:09:87:73:04:
         72:c1:51:35:b4:f3:87:9f:1a:c9:f6:43:74:bc:29:2d:96:4e:
         5b:b6:a2:82:e5:16:31:77:95:4f:11:f5:db:f4:c8:de:94:a6:
         47:d0:36:43:d2:59:ea:20:a2:db:ad:30:8c:bb:d2:30:de:37:
         5c:17:86:78:3e:97:de:4b:8c:2b:50:fa:ec:c3:af:e9:60:7d:
         72:b6:86:1e:f6:a0:c1:59:be:09:49:cc:3f:0b:26:b7:67:d4:
         82:90:a3:ce:ce:28:0e:d7:42:6e:eb:5f:58:c7:03:05:b1:d5:
         5c:be:61:42:0c:7f:9c:7d:b6:ac:16:9c:63:10:be:47:de:8d:
         a9:24:bf:89:5d:2e:78:bc:02:30:7b:77:35:a5:7c:f1:2d:7c:
         24:c3:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org