Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa
File:                     34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa (raw, json)
Hash identifier:          zvXWi5nBiiQLCZWWYmwu9sOLexxpdHdTNXwkciRQh4M=
Subject key identifier:   07:F5:4E:60:88:9B:81:7C:1E:1F:63:01:6F:44:17:66:98:C9:95:D3
Certificate issuer:       /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
Certificate serial:       251FC08327841B35F3E6808810C703256F21F010
Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa
Signing time:             Thu 06 Jul 2023 13:52:39 +0000
ROA not before:           Thu 06 Jul 2023 13:47:39 +0000
ROA not after:            Thu 04 Jul 2024 13:52:39 +0000
asID:                     151487
IP address blocks:        45.145.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1f:c0:83:27:84:1b:35:f3:e6:80:88:10:c7:03:25:6f:21:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a
        Validity
            Not Before: Jul  6 13:47:39 2023 GMT
            Not After : Jul  4 13:52:39 2024 GMT
        Subject: CN=07F54E60889B817C1E1F63016F44176698C995D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:57:8b:23:3d:c4:54:f4:c0:31:24:d4:d6:
                    64:a4:63:a1:68:2f:73:25:27:1c:f4:e4:e0:4b:08:
                    06:fd:f0:21:13:0c:31:9a:1c:9a:2a:2b:6f:6e:a2:
                    c1:f0:b0:a0:47:73:74:d1:74:4d:d3:4b:34:ea:f4:
                    93:4a:4e:ec:1d:20:b0:47:f5:d5:7c:ca:36:a9:0a:
                    b1:53:a0:9c:b7:49:09:45:85:f1:e6:85:a9:bf:58:
                    df:ff:20:8b:a0:f9:d2:a6:56:b2:28:1a:4d:35:cb:
                    f6:ce:bb:bb:64:a0:d1:89:15:4d:df:c5:77:37:da:
                    82:6e:56:65:ef:e3:3b:bc:e9:4b:75:ae:5a:51:e6:
                    02:7a:8c:1e:c1:e6:a9:aa:86:83:8f:3e:8e:c5:34:
                    89:0f:d7:17:96:4a:57:f0:5b:7e:58:c4:8d:b9:75:
                    d0:cb:7e:16:c3:3d:53:a6:69:5f:d8:b1:da:30:82:
                    04:ac:90:2b:be:f9:2e:15:a5:29:92:86:95:72:23:
                    82:3a:64:4f:0d:24:dc:05:ad:41:69:b0:33:79:96:
                    2d:6d:4c:4e:76:d0:d3:1c:26:57:fb:d1:11:81:27:
                    d3:c5:a7:bb:41:10:1b:9f:e8:0f:c2:6e:eb:02:f0:
                    6a:74:45:8f:67:63:32:55:8d:a8:a0:70:85:01:57:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:4E:60:88:9B:81:7C:1E:1F:63:01:6F:44:17:66:98:C9:95:D3
            X509v3 Authority Key Identifier:
                keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:99:17:8c:33:23:90:12:5a:b9:dd:cb:b3:46:e4:d4:40:3a:
         1e:77:07:0e:1e:80:59:b2:45:7a:20:70:88:52:b9:66:bd:ff:
         09:fa:26:df:93:e4:a3:09:0e:8e:49:30:f5:4b:0e:5d:2b:24:
         11:c8:6f:c5:9c:95:1a:91:22:96:66:93:1d:d6:65:36:6a:c9:
         c6:5e:72:e0:66:b4:30:c6:9a:d9:3f:35:4f:20:ce:0c:8c:cd:
         7a:e1:67:2e:08:0f:12:60:1e:26:98:b8:9c:5a:37:39:1d:b4:
         8e:ee:e7:df:46:8a:89:f8:a6:5c:18:7c:cb:58:db:b5:f9:f4:
         7a:fa:d9:64:ef:64:28:bc:25:79:cf:53:55:c5:24:31:d3:77:
         a1:00:a4:5a:14:38:bd:2f:41:bb:18:9b:79:18:2a:32:37:15:
         95:94:50:04:03:e5:90:fc:a5:7e:ca:7d:ee:8b:e7:33:f8:5c:
         92:ad:15:0d:35:73:58:12:ba:b2:d3:9f:47:6d:3e:69:51:2e:
         e2:f3:a8:70:32:7b:11:71:e3:36:45:d9:25:9b:89:36:50:22:
         d1:55:77:6f:4e:a2:24:ff:59:bf:06:f2:b3:c1:5a:c6:92:22:
         19:2e:c1:01:e0:82:dd:20:3e:d2:45:6a:be:6c:05:ab:9c:87:
         24:45:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 11:06:44 2023 by rpki-client on console-fra.rpki-client.org