Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/wEUoYILpf8RdZGXEDYkpz5hCeuM.roa
File:                     wEUoYILpf8RdZGXEDYkpz5hCeuM.roa (raw, json)
Hash identifier:          EjaySdEPRgcM62d2TSna+6Gi5IzAeCi20qWK3GHjFKU=
Subject key identifier:   C0:45:28:60:82:E9:7F:C4:5D:64:65:C4:0D:89:29:CF:98:42:7A:E3
Certificate issuer:       /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial:       0185737A98B204A213E30B3843B247997B38
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/wEUoYILpf8RdZGXEDYkpz5hCeuM.roa
Signing time:             Mon 02 Jan 2023 17:14:52 +0000
ROA not before:           Mon 02 Jan 2023 17:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62563
IP address blocks:        45.135.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:7a:98:b2:04:a2:13:e3:0b:38:43:b2:47:99:7b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
        Validity
            Not Before: Jan  2 17:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c045286082e97fc45d6465c40d8929cf98427ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:e6:53:31:14:6a:78:8c:a2:28:90:67:69:
                    f2:7e:7d:e3:46:bd:92:f1:c4:72:3a:7b:d1:f2:9a:
                    0b:ca:db:5a:09:24:88:e0:f4:7d:57:a9:d2:90:c0:
                    5a:b8:a7:2a:43:14:61:fb:31:81:8b:c1:58:d3:e2:
                    f9:30:c4:ca:4f:13:15:08:92:45:aa:d0:96:e0:ba:
                    2b:42:2b:95:3f:99:9e:6c:96:c5:2e:56:c9:69:c1:
                    b0:fc:14:32:8c:f9:05:8b:f8:60:f7:40:16:83:66:
                    20:72:9a:5e:3a:28:db:4b:ce:c1:4d:d0:e1:df:3a:
                    55:ba:3e:c9:c2:3e:d1:30:b2:ce:43:0e:24:5c:cf:
                    6c:df:d4:11:16:ad:61:77:04:ad:f3:64:6c:bd:9b:
                    ff:ec:86:9b:89:ba:d7:75:3c:b9:22:38:3b:15:5a:
                    28:76:c4:7c:01:a4:df:0e:07:29:ac:7f:1e:f4:fc:
                    73:09:5f:ec:d3:a1:2c:52:54:31:64:75:98:96:ed:
                    19:e0:e3:e8:93:c5:49:eb:59:b8:8d:04:2e:33:d3:
                    00:0b:2f:ed:85:e7:85:61:48:f0:6f:57:b8:b8:a8:
                    0f:c7:0f:1b:4d:ea:b7:2a:31:b1:08:e8:2a:99:81:
                    6c:e5:dc:cb:13:4e:ed:a0:3d:33:60:f5:8d:38:3e:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:45:28:60:82:E9:7F:C4:5D:64:65:C4:0D:89:29:CF:98:42:7A:E3
            X509v3 Authority Key Identifier:
                keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/wEUoYILpf8RdZGXEDYkpz5hCeuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:b2:87:7f:9e:68:b5:a5:25:98:21:c0:6f:49:b9:3f:93:bb:
         77:dc:6d:47:1c:8a:1b:fd:47:8d:22:3a:a8:7e:d5:d2:30:e5:
         73:2c:84:73:ca:3e:2f:7d:10:ca:cf:44:3d:75:04:42:b0:64:
         97:39:f3:a7:1f:f2:87:ee:c1:f7:b8:2d:8c:02:b0:7c:a8:7b:
         0d:fc:a6:2c:c1:29:84:76:9f:00:63:1a:ea:33:35:b7:aa:ed:
         66:79:4a:2d:64:35:7e:11:a7:8d:27:7d:65:5f:5c:fd:96:b7:
         3f:26:e1:cb:9c:f0:5c:1c:5c:0d:fd:7c:0a:f8:cf:6c:47:ac:
         72:77:ce:21:8a:bd:f1:92:00:5d:c8:6d:5c:5e:7c:6b:de:f7:
         10:00:ff:84:b6:b5:6e:87:ae:18:b6:ab:de:ca:9a:49:cf:21:
         aa:53:e7:d1:de:49:62:64:bb:f1:5c:4c:43:d3:a7:b9:e4:5d:
         d5:5e:f6:94:b2:4f:9f:68:60:b4:e0:50:c6:bb:a3:cd:85:2d:
         8b:eb:bf:f8:77:96:71:3e:f6:48:db:3b:24:b3:45:ba:ac:ae:
         18:b5:58:2c:3c:8f:cd:ae:93:0a:98:e7:5b:af:8a:f0:e2:18:
         98:3b:6e:43:67:54:25:ba:66:f2:47:a0:7e:f9:56:88:6c:84:
         0d:ed:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:30:33 2023 by rpki-client on console-fra.rpki-client.org