Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa
File:                     7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa (raw, json)
Hash identifier:          KF5h3JFPC5idlnhq/utVjlVePPK1dDTk7/7xxnax2ZA=
Subject key identifier:   ED:18:30:C6:FF:D2:C5:D5:56:6E:58:0A:AB:53:1F:FE:4E:41:CC:ED
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01835B7EA8752FAB008255870BD29F78F00A
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa
Signing time:             Tue 20 Sep 2022 15:22:50 +0000
ROA not before:           Tue 20 Sep 2022 15:22:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35908
IP address blocks:        45.13.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5b:7e:a8:75:2f:ab:00:82:55:87:0b:d2:9f:78:f0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Sep 20 15:22:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed1830c6ffd2c5d5566e580aab531ffe4e41cced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:43:61:a9:bc:f8:be:78:b3:04:5a:80:19:
                    6c:54:30:25:7c:69:ff:2b:8f:08:47:c9:a4:7b:53:
                    e9:d5:c7:7e:0a:e3:65:11:8c:56:23:c6:80:40:dd:
                    c5:0c:aa:92:aa:39:2a:c9:5c:ba:ef:0a:ca:b6:86:
                    87:55:39:c6:6d:27:df:60:d8:e0:5d:d1:d6:d4:0d:
                    21:36:71:9b:7a:04:7f:b1:3d:7f:07:e4:8f:21:98:
                    0a:53:90:9b:f2:98:6c:48:32:19:1a:0a:63:68:77:
                    12:74:1a:d9:33:6c:49:e5:1b:78:45:9f:e4:15:a4:
                    2d:16:c6:44:45:28:69:52:d4:63:80:f1:b1:cc:51:
                    37:5e:c1:99:37:97:77:28:c5:72:fc:87:94:b7:4a:
                    6b:e2:bd:f3:78:7a:a6:76:2e:5e:cd:0e:26:fb:a7:
                    ff:f3:98:e9:ef:65:61:04:40:eb:27:ed:ab:3b:b0:
                    7b:3e:3c:f8:57:c6:b2:2d:39:b4:87:fe:a4:7a:99:
                    64:0c:fc:8b:ce:41:ed:10:30:6c:65:e1:cf:56:30:
                    a8:c6:cc:f7:b5:39:a1:e4:65:b2:10:f6:b7:f4:39:
                    d2:bd:5a:6a:2a:f9:32:80:72:28:52:4e:26:35:c3:
                    bc:2f:12:d7:d5:21:53:4f:80:93:82:2b:f0:5a:80:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:18:30:C6:FF:D2:C5:D5:56:6E:58:0A:AB:53:1F:FE:4E:41:CC:ED
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:33:af:94:ef:08:90:2c:70:80:d4:df:5c:23:ca:75:28:8d:
         23:c3:5f:c8:2f:87:7a:aa:cf:a3:75:7a:cf:14:af:4a:0e:a4:
         e7:c2:f7:75:1d:5f:86:fc:d9:35:7e:7f:5d:da:23:36:b7:29:
         09:29:b0:a0:91:b5:78:3b:cd:cc:8e:d8:18:bd:73:46:0e:b1:
         8c:00:83:1c:98:b8:17:1a:c1:d8:16:59:9e:94:1a:7d:78:68:
         71:12:c5:f4:50:ab:e8:3e:30:97:79:95:10:c8:3f:89:6b:14:
         61:06:2e:9e:57:24:51:dc:1b:fd:4f:61:68:6a:97:b9:f3:ae:
         95:18:7a:bf:c9:e9:5b:7e:4b:cf:68:5c:85:f0:84:ad:b5:be:
         aa:35:12:da:1a:3b:24:42:41:af:b3:91:42:2d:4c:b6:df:6b:
         6a:bd:f3:6f:f1:db:f4:11:71:ab:81:6e:b8:b4:92:a2:6d:d5:
         aa:4e:48:ee:ac:4e:c5:6f:66:44:9e:f1:1b:68:4a:f8:60:10:
         aa:39:2d:2a:c1:ee:6f:5b:d7:a5:4a:60:97:4e:b2:c4:be:a7:
         a5:fa:d7:d2:bc:4f:b0:c8:7d:54:01:1a:29:11:2e:44:82:d8:
         2a:c3:99:87:e2:0f:97:12:2f:e3:7e:2a:12:9c:c5:6e:88:90:
         b3:b3:38:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNbfqh1L6sAglWHC9KfePAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjIwOTIwMTUyMjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDE4MzBjNmZmZDJjNWQ1NTY2ZTU4MGFhYjUzMWZmZTRlNDFjY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni1DYam8+L54swRagBlsVDAlfGn/
K48IR8mke1Pp1cd+CuNlEYxWI8aAQN3FDKqSqjkqyVy67wrKtoaHVTnGbSffYNjg
XdHW1A0hNnGbegR/sT1/B+SPIZgKU5Cb8phsSDIZGgpjaHcSdBrZM2xJ5Rt4RZ/k
FaQtFsZERShpUtRjgPGxzFE3XsGZN5d3KMVy/IeUt0pr4r3zeHqmdi5ezQ4m+6f/
85jp72VhBEDrJ+2rO7B7Pjz4V8ayLTm0h/6keplkDPyLzkHtEDBsZeHPVjCoxsz3
tTmh5GWyEPa39DnSvVpqKvkygHIoUk4mNcO8LxLX1SFTT4CTgivwWoASLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0YMMb/0sXVVm5YCqtTH/5OQcztMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvN1Jnd3h2X1N4ZFZXYmxnS3ExTWZfazVCek8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2WMA0G
CSqGSIb3DQEBCwUAA4IBAQB/M6+U7wiQLHCA1N9cI8p1KI0jw1/IL4d6qs+jdXrP
FK9KDqTnwvd1HV+G/Nk1fn9d2iM2tykJKbCgkbV4O83MjtgYvXNGDrGMAIMcmLgX
GsHYFlmelBp9eGhxEsX0UKvoPjCXeZUQyD+JaxRhBi6eVyRR3Bv9T2Foape5866V
GHq/yelbfkvPaFyF8ISttb6qNRLaGjskQkGvs5FCLUy232tqvfNv8dv0EXGrgW64
tJKibdWqTkjurE7Fb2ZEnvEbaEr4YBCqOS0qwe5vW9elSmCXTrLEvqel+tfSvE+w
yH1UARopES5Egtgqw5mH4g+XEi/jfioSnMVuiJCzszhj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org