Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/JvSI_1QKEjeKLRPuVvk_mx6Utjo.roa
File:                     JvSI_1QKEjeKLRPuVvk_mx6Utjo.roa (raw, json)
Hash identifier:          qDSXda0d7c2MJnmboVYp97PLtsS5sqwa3ss9tSWe+NU=
Subject key identifier:   26:F4:88:FF:54:0A:12:37:8A:2D:13:EE:56:F9:3F:9B:1E:94:B6:3A
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       05B74D5F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/JvSI_1QKEjeKLRPuVvk_mx6Utjo.roa
Signing time:             Sat 01 Jan 2022 02:57:37 +0000
ROA not before:           Sat 01 Jan 2022 02:57:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45250
IP address blocks:        45.88.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95898975 (0x5b74d5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Jan  1 02:57:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26f488ff540a12378a2d13ee56f93f9b1e94b63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:fd:14:f0:4d:14:06:54:d9:2b:d2:1f:bf:
                    1c:ba:d9:77:d9:6e:9d:74:2a:40:a9:34:3a:d5:d3:
                    42:0c:bf:5c:e9:c3:a1:ce:a6:12:e7:d9:6b:5a:e5:
                    d9:92:93:4a:fc:9a:8e:b5:78:e4:b0:ab:95:50:f0:
                    43:6a:07:90:63:a6:20:4b:e4:44:ea:00:fa:08:b9:
                    12:1a:04:11:1a:95:ba:f4:56:4b:59:a1:a6:dc:1f:
                    35:78:e2:74:ff:82:0e:e0:47:66:43:84:86:e8:0e:
                    d0:22:1d:19:77:d4:9f:7d:17:89:a4:87:5b:cd:51:
                    12:b1:14:94:4e:6d:fd:45:22:aa:3b:ec:81:4a:cc:
                    63:5e:2d:c6:5e:68:4a:cc:e9:24:30:72:e2:dc:1f:
                    78:07:3f:fd:3d:3b:8c:b7:7c:88:e5:55:55:41:5f:
                    96:0b:6a:4a:6f:4b:3c:a1:8a:b1:b1:fd:2d:98:15:
                    dd:9c:99:8c:4f:25:78:13:8d:62:89:d5:45:48:a2:
                    3a:e5:31:82:c4:4f:77:ae:24:b7:a4:59:8a:16:fe:
                    d8:4a:5a:22:a0:5e:58:99:58:69:fd:2b:c9:9d:fb:
                    ac:6a:ea:8a:67:28:0a:17:e9:1c:3b:f3:50:f2:f8:
                    49:5f:29:83:d6:8f:0a:57:a5:a8:40:7f:91:54:f4:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F4:88:FF:54:0A:12:37:8A:2D:13:EE:56:F9:3F:9B:1E:94:B6:3A
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/JvSI_1QKEjeKLRPuVvk_mx6Utjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:3b:f1:87:50:54:91:7d:c4:19:0a:16:c5:8e:e3:87:96:e5:
         b7:48:ec:a1:e3:56:c1:b7:6d:f4:cf:98:29:88:10:23:ff:7d:
         6a:36:d5:5a:76:86:4d:fb:03:0a:59:06:90:ed:99:73:b2:32:
         3d:3e:ae:a5:aa:e7:03:cf:0e:a7:97:fc:0a:b5:4d:cf:7a:7b:
         a0:fb:4f:2c:be:10:37:f2:9e:99:45:46:a6:f6:79:e9:69:1d:
         cb:f0:1b:c1:08:54:3a:e8:3d:7a:60:a0:25:6b:54:76:29:9b:
         89:c1:cb:99:87:20:83:c2:ae:29:9b:8e:0b:47:6a:69:eb:20:
         27:e6:89:ed:22:38:93:82:7f:86:f2:23:19:26:e0:e1:93:ae:
         75:0f:d5:09:12:4b:dc:1e:cc:2c:3e:ce:a6:8b:fd:b1:95:95:
         ba:51:1a:7d:2e:18:c6:f6:ae:4a:63:3f:8f:62:39:94:aa:c4:
         0b:87:ba:29:de:c8:71:25:e3:02:47:e0:f8:3b:50:51:f0:47:
         69:05:94:d3:d9:78:d6:46:0d:ad:c1:c4:c6:70:e6:f1:01:9e:
         49:8d:cc:ac:55:52:4f:81:02:00:0b:15:9d:85:12:dc:66:43:
         91:ba:45:7d:dd:39:4c:dd:83:5c:ce:fa:7a:76:0a:e4:88:3b:
         d8:39:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org