Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/YNuKwCOCIdxThdzDYLlKOLHpvTo.roa
File:                     YNuKwCOCIdxThdzDYLlKOLHpvTo.roa (raw, json)
Hash identifier:          lRvbIDEPqMiwouZPHNIBwRNQFfqE+WKXAkon+BQzqGU=
Subject key identifier:   60:DB:8A:C0:23:82:21:DC:53:85:DC:C3:60:B9:4A:38:B1:E9:BD:3A
Certificate issuer:       /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial:       0182D6A6278EA7EA56B95C99625FB3A23995
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/YNuKwCOCIdxThdzDYLlKOLHpvTo.roa
Signing time:             Thu 25 Aug 2022 20:16:29 +0000
ROA not before:           Thu 25 Aug 2022 20:16:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        45.81.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d6:a6:27:8e:a7:ea:56:b9:5c:99:62:5f:b3:a2:39:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
        Validity
            Not Before: Aug 25 20:16:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60db8ac0238221dc5385dcc360b94a38b1e9bd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:29:74:4c:ea:d8:26:60:dc:b5:5b:0f:9d:
                    25:4a:e1:16:ef:1f:e2:d9:50:6c:bc:34:b7:cf:7d:
                    24:a7:53:3d:c4:c9:41:38:35:fc:6b:c2:e0:c5:13:
                    64:8b:5a:2c:c6:9b:4d:98:d9:f9:d9:61:2a:57:ae:
                    20:41:dd:1a:32:52:b8:4e:62:cc:63:8f:70:60:6c:
                    5e:a0:37:e0:dc:6c:9e:de:18:26:1a:17:2e:cc:a9:
                    e9:5e:74:99:58:07:ac:dc:1f:a4:cd:59:d2:63:6e:
                    90:fb:1d:59:28:ce:e3:8c:c4:c3:f9:f2:da:52:02:
                    a0:69:fb:81:25:38:62:22:d3:fe:73:68:79:de:de:
                    e9:e5:39:6f:2c:5a:0e:79:ef:b6:93:be:d3:87:fc:
                    8a:fe:83:df:55:a2:46:32:c6:cb:f0:35:e3:fd:2a:
                    87:02:c8:78:1f:ae:a2:a9:85:e4:64:dc:a1:c8:94:
                    bc:08:91:eb:34:5d:71:62:10:98:f6:9f:be:e4:7c:
                    9b:14:8a:3a:f8:0e:7d:e7:1d:19:0b:d6:79:f7:9b:
                    52:34:52:c0:9a:52:67:99:71:1c:32:16:a2:18:80:
                    32:ea:aa:39:11:23:34:e0:fe:14:0d:28:3a:2e:d1:
                    a7:bb:ff:e8:8d:46:f7:3a:d1:e4:de:9c:22:ea:77:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:8A:C0:23:82:21:DC:53:85:DC:C3:60:B9:4A:38:B1:E9:BD:3A
            X509v3 Authority Key Identifier:
                keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/YNuKwCOCIdxThdzDYLlKOLHpvTo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:5e:c5:9b:05:0d:04:ab:7c:52:fa:fa:8e:99:b0:62:e5:
         53:de:dc:4f:14:d3:e6:ad:a5:ce:ae:0e:7c:49:5a:cd:26:ba:
         b0:ea:fb:85:89:10:50:f4:3f:db:02:c4:47:f2:c1:4f:3d:e2:
         04:dc:39:ef:b4:ff:4f:41:ba:0d:4d:20:89:07:42:5b:8d:b5:
         6e:58:80:f8:19:e0:0b:10:67:71:41:13:b9:77:34:8e:9b:e3:
         e0:c8:d4:e5:f6:72:0d:5d:88:33:e8:1c:fc:ea:88:26:c4:06:
         0d:14:1b:df:b0:2a:9c:37:3b:46:2a:06:52:8c:d7:e0:65:66:
         b7:6c:ef:12:be:f0:26:ba:0d:4e:e1:14:b7:39:ca:28:db:8a:
         77:5b:e9:6e:71:87:2f:4b:2b:47:2f:99:55:20:f1:30:28:02:
         8d:fc:97:10:1e:18:12:a1:7f:9b:6c:e8:2b:cc:96:e1:3b:00:
         ef:9d:1a:9d:8b:e0:6e:bf:29:1e:10:d4:f5:85:d2:57:fd:a4:
         36:13:60:bb:4c:b3:c8:e3:9d:68:e1:4a:25:e1:04:35:d7:e0:
         1b:05:c7:62:d4:6a:70:f9:53:f4:b0:ed:40:06:29:d3:6e:69:
         c5:0f:2d:52:39:5a:08:6d:3f:d5:df:32:d0:e5:28:54:d4:a9:
         a8:d6:a9:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLWpieOp+pWuVyZYl+zojmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWUxMzJjMzdmMDUxMTdkYWI5NGFmMTg2OWE3MTQ5YzY0
MDhkODAwHhcNMjIwODI1MjAxNjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGRiOGFjMDIzODIyMWRjNTM4NWRjYzM2MGI5NGEzOGIxZTliZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU8pdEzq2CZg3LVbD50lSuEW7x/i
2VBsvDS3z30kp1M9xMlBODX8a8LgxRNki1osxptNmNn52WEqV64gQd0aMlK4TmLM
Y49wYGxeoDfg3Gye3hgmGhcuzKnpXnSZWAes3B+kzVnSY26Q+x1ZKM7jjMTD+fLa
UgKgafuBJThiItP+c2h53t7p5TlvLFoOee+2k77Th/yK/oPfVaJGMsbL8DXj/SqH
Ash4H66iqYXkZNyhyJS8CJHrNF1xYhCY9p++5HybFIo6+A595x0ZC9Z595tSNFLA
mlJnmXEcMhaiGIAy6qo5ESM04P4UDSg6LtGnu//ojUb3OtHk3pwi6nd9wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGDbisAjgiHcU4Xcw2C5Sjix6b06MB8GA1UdIwQY
MBaAFEJeEyw38FEX2rlK8YaacUnGQI2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWw0VExEZndVUmZhdVVyeGhwcHhTY1pBallBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82OTgxN2QtNDJlOC00NWExLTlkNTQt
M2FkYTRkNGFlZDVhLzEvWU51S3dDT0NJZHhUaGR6RFlMbEtPTEhwdlRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82OTgxN2QtNDJlOC00NWExLTlkNTQtM2FkYTRkNGFlZDVh
LzEvUWw0VExEZndVUmZhdVVyeGhwcHhTY1pBallBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVE4MA0G
CSqGSIb3DQEBCwUAA4IBAQCiVl7FmwUNBKt8Uvr6jpmwYuVT3txPFNPmraXOrg58
SVrNJrqw6vuFiRBQ9D/bAsRH8sFPPeIE3DnvtP9PQboNTSCJB0JbjbVuWID4GeAL
EGdxQRO5dzSOm+PgyNTl9nINXYgz6Bz86ogmxAYNFBvfsCqcNztGKgZSjNfgZWa3
bO8SvvAmug1O4RS3Ocoo24p3W+lucYcvSytHL5lVIPEwKAKN/JcQHhgSoX+bbOgr
zJbhOwDvnRqdi+BuvykeENT1hdJX/aQ2E2C7TLPI451o4Uol4QQ11+AbBcdi1Gpw
+VP0sO1ABinTbmnFDy1SOVoIbT/V3zLQ5ShU1Kmo1qka
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org