Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Eon8Hd57dKPR8NZA6SsLcuCNS3U.roa
File:                     Eon8Hd57dKPR8NZA6SsLcuCNS3U.roa (raw, json)
Hash identifier:          DWpwiD2Yd1mpV9fAouxBSJ8CZdkIjR4snFkBMZCOy2A=
Subject key identifier:   12:89:FC:1D:DE:7B:74:A3:D1:F0:D6:40:E9:2B:0B:72:E0:8D:4B:75
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0186AB87FA3788DAFC84531A393295435AB4
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Eon8Hd57dKPR8NZA6SsLcuCNS3U.roa
Signing time:             Sat 04 Mar 2023 07:31:00 +0000
ROA not before:           Sat 04 Mar 2023 07:31:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212609
IP address blocks:        45.13.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ab:87:fa:37:88:da:fc:84:53:1a:39:32:95:43:5a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar  4 07:31:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1289fc1dde7b74a3d1f0d640e92b0b72e08d4b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:53:9b:21:8f:1e:96:01:92:93:fb:6d:5f:
                    1d:f6:88:35:97:a0:46:06:a3:a8:92:5f:ac:f6:da:
                    b5:90:3e:1e:fa:d6:86:ca:d1:b7:d2:7d:62:dc:0b:
                    e1:05:26:56:2e:b9:78:e5:bd:79:a6:4e:5a:54:e5:
                    aa:0a:ac:ab:de:2b:6c:28:8f:6b:49:1b:60:11:0d:
                    a0:78:30:81:3e:b5:00:e8:e5:79:ed:ba:84:55:d6:
                    ea:08:af:01:07:32:11:cd:55:42:74:13:e2:4d:2d:
                    29:79:34:d4:fc:5b:b9:37:de:3e:59:70:ee:0b:c0:
                    b2:c5:74:41:63:14:2c:b4:3d:2d:ce:bb:44:da:74:
                    a4:d2:4f:85:1a:b0:f6:4f:1c:64:fe:23:fd:49:d8:
                    e4:c1:73:85:7b:3b:9e:c2:4f:01:01:fb:53:ae:95:
                    2f:a7:67:3f:f6:dd:c7:50:1a:4b:3b:4b:63:97:7a:
                    e0:03:ff:e3:48:a7:23:de:50:a0:0f:86:61:9f:96:
                    85:d7:e7:24:da:c2:27:b8:66:11:6e:b5:ed:53:3c:
                    cf:12:84:31:2b:84:27:b4:9a:c1:49:c0:73:b1:21:
                    ec:e0:b9:56:f6:88:e9:62:b8:b4:a7:c2:36:65:65:
                    fa:f4:4b:ec:a5:42:06:dc:c1:93:a2:01:00:b9:cd:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:89:FC:1D:DE:7B:74:A3:D1:F0:D6:40:E9:2B:0B:72:E0:8D:4B:75
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Eon8Hd57dKPR8NZA6SsLcuCNS3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:3f:ec:3f:91:a3:8b:d3:d1:f2:7a:1e:91:20:3c:bf:a9:f6:
         0c:72:b1:18:a2:7a:ff:94:aa:e7:d6:47:0c:d9:3e:55:38:ae:
         b6:4f:97:4a:17:db:4d:ca:2a:e9:2a:59:40:a5:49:e0:e5:24:
         ea:9d:33:90:14:10:08:45:20:c0:53:b7:46:8f:ec:a8:87:60:
         5e:fa:83:3f:e7:5d:7b:93:41:36:d5:4e:08:c7:a7:6e:86:70:
         1a:c0:29:a4:54:1e:d3:0d:81:28:7f:8f:96:da:fb:1a:33:8d:
         0d:af:3f:78:38:2c:e8:d4:07:de:57:ae:f9:7a:d0:49:9b:29:
         df:87:67:56:8d:81:3e:32:7e:10:17:2b:61:d4:85:6e:07:46:
         af:99:5d:6b:84:6a:bc:2f:43:0f:7d:71:85:57:26:62:2a:eb:
         f8:49:d1:8e:e8:81:d3:9d:15:cb:86:2b:7d:7c:c6:00:08:fe:
         f3:ad:76:45:55:3d:d4:da:7b:ae:bc:5c:1b:97:78:97:c8:af:
         de:23:34:ac:8b:ea:4d:c8:7b:57:81:ff:4a:69:6d:e3:a8:46:
         38:fb:76:bc:f0:58:01:8e:41:f5:f4:ab:50:a3:7e:78:da:12:
         35:47:95:62:12:a8:68:e9:2d:21:24:2c:cb:76:32:96:08:28:
         bd:be:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----