Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/xttPErq24JpvGQFUmdIKUonPydg.roa
File:                     xttPErq24JpvGQFUmdIKUonPydg.roa (raw, json)
Hash identifier:          EXsdx73/cZ2lnxyU/vkRNmxjswpF3xFK0Qztdwy77cA=
Subject key identifier:   C6:DB:4F:12:BA:B6:E0:9A:6F:19:01:54:99:D2:0A:52:89:CF:C9:D8
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       097B1869
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/xttPErq24JpvGQFUmdIKUonPydg.roa
Signing time:             Tue 01 Mar 2022 16:36:55 +0000
ROA not before:           Tue 01 Mar 2022 16:36:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62579
IP address blocks:        45.13.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159062121 (0x97b1869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar  1 16:36:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6db4f12bab6e09a6f19015499d20a5289cfc9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:1f:77:a7:a3:58:ab:3f:1d:34:a4:84:e5:
                    db:ce:97:28:07:1b:8d:c2:e7:23:8d:f8:77:5a:47:
                    ec:0e:8b:ed:52:8b:71:bf:20:41:9a:8b:89:2a:80:
                    3e:b6:5b:e0:cc:5b:8b:6f:41:95:ec:ea:85:c3:41:
                    ac:b6:c6:3c:8d:80:42:e6:ac:04:8b:b7:da:3b:61:
                    bd:4c:42:72:3b:d5:ab:c1:8d:ab:db:91:be:27:66:
                    35:c1:fe:06:ee:f8:c8:b4:7d:59:4d:75:4e:cf:a2:
                    a3:11:78:8a:ec:7e:8b:fb:13:76:df:5b:21:f1:f4:
                    61:be:55:d9:fd:b8:bc:c2:c9:62:97:57:c5:fa:eb:
                    71:7c:a4:c8:ca:5f:e7:0f:15:46:07:39:14:6e:62:
                    a7:02:3b:f8:fb:5f:70:33:a4:ec:d2:9b:82:88:3b:
                    40:bd:fe:ff:f7:2d:11:bb:17:01:20:88:d6:fa:94:
                    b6:da:15:92:1a:c3:db:43:b2:68:19:0d:af:4c:6f:
                    9e:f4:3c:86:56:4f:a1:b2:3c:df:f9:29:89:b2:ae:
                    8e:19:ad:0f:12:a1:66:91:46:66:f3:27:28:58:29:
                    e1:ce:aa:e2:d1:18:ef:b2:3e:fc:f1:d5:47:27:f0:
                    c7:22:1e:3d:3d:64:54:a9:9c:01:af:bf:18:ae:ab:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:4F:12:BA:B6:E0:9A:6F:19:01:54:99:D2:0A:52:89:CF:C9:D8
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/xttPErq24JpvGQFUmdIKUonPydg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:fb:de:53:f2:7e:1b:54:d9:d7:57:89:8e:b1:ce:2a:cb:
         aa:30:49:92:e5:c1:75:f4:4a:64:ce:f1:b3:d6:45:cd:00:fa:
         b4:88:d1:cc:ab:d5:18:76:4b:f8:bb:82:36:fe:e5:bc:4d:5e:
         9c:94:19:25:a4:71:f6:53:3b:90:62:eb:65:16:36:d1:9b:b7:
         5e:37:f3:94:5e:36:02:bc:d5:b4:47:b6:80:5b:c3:5e:9e:2a:
         4a:f8:f3:3a:e7:02:37:e7:e0:6a:54:c4:ea:db:22:c6:ac:01:
         11:e6:21:c0:cb:39:e5:92:46:c2:62:79:01:42:a7:09:0e:12:
         a4:3c:4f:a5:57:e6:25:93:3a:e2:3c:51:bf:4f:86:ab:3b:de:
         86:a7:2b:2b:72:97:21:24:d1:30:77:bd:67:72:7c:ea:32:a6:
         d5:b4:79:81:50:cf:13:c2:52:3e:35:ee:9f:88:ce:d7:36:cc:
         a5:2c:c9:a4:f4:29:cd:72:11:3b:ae:b6:39:b2:57:91:49:0d:
         88:2e:92:cf:d0:72:51:88:f4:91:5f:05:06:eb:df:3a:73:fb:
         11:78:d4:32:72:e1:7d:5f:a5:19:61:36:70:93:51:d4:42:9f:
         4e:90:d9:77:bf:aa:01:2e:80:93:63:e8:39:64:df:75:55:38:
         a1:47:3b:06
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECXsYaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MmZhNzY1YTM5MzM2OWM5NmQ4ZDgzNmYyM2Y3NmU2NzQ4OWM3ZGRlMB4XDTIyMDMw
MTE2MzY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzZkYjRmMTJiYWI2
ZTA5YTZmMTkwMTU0OTlkMjBhNTI4OWNmYzlkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6kH3eno1irPx00pITl286XKAcbjcLnI434d1pH7A6L7VKL
cb8gQZqLiSqAPrZb4Mxbi29BlezqhcNBrLbGPI2AQuasBIu32jthvUxCcjvVq8GN
q9uRvidmNcH+Bu74yLR9WU11Ts+ioxF4iux+i/sTdt9bIfH0Yb5V2f24vMLJYpdX
xfrrcXykyMpf5w8VRgc5FG5ipwI7+PtfcDOk7NKbgog7QL3+//ctEbsXASCI1vqU
ttoVkhrD20OyaBkNr0xvnvQ8hlZPobI83/kpibKujhmtDxKhZpFGZvMnKFgp4c6q
4tEY77I+/PHVRyfwxyIePT1kVKmcAa+/GK6r0O0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTG208Surbgmm8ZAVSZ0gpSic/J2DAfBgNVHSMEGDAWgBRi+nZaOTNpyW2N
g28j925nSJx93jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1l2cDJXamt6YWNsdGpZTnZJX2R1WjBpY2ZkNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvYWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8x
L3h0dFBFcnEyNEpwdkdRRlVtZElLVW9uUHlkZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
YWRmZjgwLWIyMDctNGZiZC1iZjVlLTA3ZGQxYjRjNTVkOS8xL1l2cDJXamt6YWNs
dGpZTnZJX2R1WjBpY2ZkNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0NlzANBgkqhkiG9w0BAQsFAAOC
AQEAavn73lPyfhtU2ddXiY6xzirLqjBJkuXBdfRKZM7xs9ZFzQD6tIjRzKvVGHZL
+LuCNv7lvE1enJQZJaRx9lM7kGLrZRY20Zu3XjfzlF42ArzVtEe2gFvDXp4qSvjz
OucCN+fgalTE6tsixqwBEeYhwMs55ZJGwmJ5AUKnCQ4SpDxPpVfmJZM64jxRv0+G
qzvehqcrK3KXISTRMHe9Z3J86jKm1bR5gVDPE8JSPjXun4jO1zbMpSzJpPQpzXIR
O662ObJXkUkNiC6Sz9ByUYj0kV8FBuvfOnP7EXjUMnLhfV+lGWE2cJNR1EKfTpDZ
d7+qAS6Ak2PoOWTfdVU4oUc7Bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org