Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/VTmQE9GSioIWYxE8-3PTUMr977U.roa
File:                     VTmQE9GSioIWYxE8-3PTUMr977U.roa (raw, json)
Hash identifier:          Epes08iG1ImmTJKdYwwnzJGhtKRYcikvHkgWVi8Lo/4=
Subject key identifier:   55:39:90:13:D1:92:8A:82:16:63:11:3C:FB:73:D3:50:CA:FD:EF:B5
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0184A071AF9FA418E207F7228E65BB82433A
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/VTmQE9GSioIWYxE8-3PTUMr977U.roa
Signing time:             Tue 22 Nov 2022 17:45:15 +0000
ROA not before:           Tue 22 Nov 2022 17:45:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55154
IP address blocks:        45.13.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a0:71:af:9f:a4:18:e2:07:f7:22:8e:65:bb:82:43:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Nov 22 17:45:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55399013d1928a821663113cfb73d350cafdefb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:d2:5b:ca:47:d9:d9:fb:1a:fb:8d:27:89:
                    52:42:c2:c6:fc:9b:ac:a7:dc:85:4f:14:20:71:18:
                    68:f8:ec:88:03:3e:95:41:d5:f0:35:05:d2:da:30:
                    e0:c8:c8:ad:bf:bc:46:7f:ec:51:6f:90:96:f9:b3:
                    ef:9d:61:d9:dc:69:b3:5a:44:46:22:23:e3:a8:c8:
                    52:ea:a9:43:b7:3a:c0:fb:4d:a9:95:34:e6:9f:18:
                    47:67:dd:e2:05:3e:ef:f8:88:4d:64:b4:36:bc:d8:
                    09:bb:1f:bf:ad:1e:8d:71:9e:c7:28:98:b2:ea:51:
                    6c:8e:92:2e:26:27:70:4d:ce:b3:56:a2:e7:86:c8:
                    fb:c0:6e:bb:70:3c:ef:52:68:61:a2:c1:fd:42:a8:
                    fd:98:a9:ef:f1:b5:15:f0:b5:dd:22:f4:12:36:c2:
                    23:1e:32:f5:1c:47:55:cc:d0:4e:5d:23:f5:5f:fc:
                    53:86:5b:c8:8e:2e:18:31:61:50:7c:3d:1c:b4:c7:
                    5b:cb:2b:5f:80:b6:c9:fd:f1:60:7f:f0:0b:3f:5f:
                    db:06:fc:0d:78:d9:e3:b4:a2:71:ad:83:4b:41:5f:
                    eb:43:bc:91:2b:69:e3:7f:bb:8c:9a:23:36:10:f1:
                    3e:5c:88:9d:21:15:d9:23:6a:64:df:a8:07:0e:ad:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:39:90:13:D1:92:8A:82:16:63:11:3C:FB:73:D3:50:CA:FD:EF:B5
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/VTmQE9GSioIWYxE8-3PTUMr977U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:4f:24:79:db:f8:df:6c:9e:f9:eb:f9:23:74:82:60:cb:
         3f:4e:17:8c:13:3d:18:3b:76:1b:66:7a:bc:95:f3:64:29:84:
         94:bd:c1:d8:8d:d9:46:9b:c9:bb:c9:a1:39:b1:a3:0c:e0:0a:
         57:54:a3:ff:b6:c1:1a:54:0d:0a:7d:7b:22:27:2b:f7:7a:9e:
         fd:e3:d2:c3:7a:6e:bd:6b:b8:d6:23:ef:01:d9:a3:c8:cc:5f:
         b4:0f:57:9d:1c:b8:d9:e6:ef:c1:c0:d9:ed:2d:56:55:5c:4f:
         74:8f:7d:6d:a8:79:c2:36:0f:cd:b3:2a:49:da:97:0b:a8:53:
         91:98:be:5d:82:92:43:28:20:5f:a7:d0:e0:92:e4:73:65:c7:
         75:c6:1a:51:67:e2:56:2b:65:84:c5:90:1a:ad:e4:f9:53:e4:
         76:2f:54:7a:d1:7f:39:7b:23:40:87:eb:60:7c:10:4c:92:7e:
         4f:44:f2:3d:3c:b9:6c:fc:41:a5:04:d7:79:84:0a:52:a0:fe:
         f9:e2:af:18:36:f0:44:68:eb:d2:16:5c:74:25:98:18:d3:7b:
         0b:2f:67:88:12:ab:94:a0:b9:8f:19:f1:93:dd:96:5e:5f:1b:
         16:01:63:58:6d:c5:49:87:5c:1d:73:5b:46:58:fc:b4:9f:1f:
         9f:88:9d:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSgca+fpBjiB/cijmW7gkM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjIxMTIyMTc0NTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTM5OTAxM2QxOTI4YTgyMTY2MzExM2NmYjczZDM1MGNhZmRlZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4rSW8pH2dn7GvuNJ4lSQsLG/Jus
p9yFTxQgcRho+OyIAz6VQdXwNQXS2jDgyMitv7xGf+xRb5CW+bPvnWHZ3GmzWkRG
IiPjqMhS6qlDtzrA+02plTTmnxhHZ93iBT7v+IhNZLQ2vNgJux+/rR6NcZ7HKJiy
6lFsjpIuJidwTc6zVqLnhsj7wG67cDzvUmhhosH9Qqj9mKnv8bUV8LXdIvQSNsIj
HjL1HEdVzNBOXSP1X/xThlvIji4YMWFQfD0ctMdbyytfgLbJ/fFgf/ALP1/bBvwN
eNnjtKJxrYNLQV/rQ7yRK2njf7uMmiM2EPE+XIidIRXZI2pk36gHDq0pvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFU5kBPRkoqCFmMRPPtz01DK/e+1MB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvVlRtUUU5R1Npb0lXWXhFOC0zUFRVTXI5NzdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2WMA0G
CSqGSIb3DQEBCwUAA4IBAQBxfk8kedv432ye+ev5I3SCYMs/TheMEz0YO3YbZnq8
lfNkKYSUvcHYjdlGm8m7yaE5saMM4ApXVKP/tsEaVA0KfXsiJyv3ep7949LDem69
a7jWI+8B2aPIzF+0D1edHLjZ5u/BwNntLVZVXE90j31tqHnCNg/NsypJ2pcLqFOR
mL5dgpJDKCBfp9DgkuRzZcd1xhpRZ+JWK2WExZAareT5U+R2L1R60X85eyNAh+tg
fBBMkn5PRPI9PLls/EGlBNd5hApSoP754q8YNvBEaOvSFlx0JZgY03sLL2eIEquU
oLmPGfGT3ZZeXxsWAWNYbcVJh1wdc1tGWPy0nx+fiJ34
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org