Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/asWCy0nsk0sQK6axdzRqY8Iw2FU.roa
File:                     asWCy0nsk0sQK6axdzRqY8Iw2FU.roa (raw, json)
Hash identifier:          jDDJ24euI6BXBU2wtfz/A3Eg2EqC2Uw+p3WMf6OBqYw=
Subject key identifier:   6A:C5:82:CB:49:EC:93:4B:10:2B:A6:B1:77:34:6A:63:C2:30:D8:55
Certificate issuer:       /CN=1643543a4f2617274b60419908944dd7d2084be4
Certificate serial:       4FCFB6
Authority key identifier: 16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkNUOk8mFydLYEGZCJRN19IIS-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/asWCy0nsk0sQK6axdzRqY8Iw2FU.roa
Signing time:             Sat 01 Jan 2022 01:58:37 +0000
ROA not before:           Sat 01 Jan 2022 01:58:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        45.141.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5230518 (0x4fcfb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1643543a4f2617274b60419908944dd7d2084be4
        Validity
            Not Before: Jan  1 01:58:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ac582cb49ec934b102ba6b177346a63c230d855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:00:91:51:0d:21:b2:f7:8c:aa:02:de:b7:61:
                    fd:a3:98:e0:b1:38:6c:5c:1e:ed:0c:26:6e:57:6f:
                    14:58:16:d8:e0:15:8e:56:4c:96:9e:d8:4b:f4:07:
                    1d:6c:b8:be:c5:82:7d:53:0f:d0:c6:f9:cb:06:8f:
                    21:bd:8c:ad:3d:c2:00:bc:26:c5:ea:79:7c:90:d0:
                    75:cb:3e:3d:0f:d3:3b:6c:98:b1:98:48:48:bc:9f:
                    1f:bc:06:9f:46:58:1a:b9:e0:22:cd:69:3c:3e:1d:
                    73:ac:3d:3c:e3:86:88:dc:a4:f4:b9:4d:2f:81:51:
                    1e:89:0a:27:b9:47:44:9a:d8:69:c4:8f:b8:59:b6:
                    2d:6c:d6:7d:a2:77:77:ac:51:4a:a4:a5:66:4d:af:
                    91:3b:e4:68:54:5a:e3:01:87:8f:fa:9b:20:71:55:
                    43:60:34:3a:a8:d9:05:a3:fc:60:37:09:db:cf:4e:
                    37:84:e6:16:32:fd:cb:1f:fd:88:c1:cd:0f:d8:f3:
                    8e:19:c6:57:0c:c4:25:23:73:7d:cb:79:31:0b:49:
                    af:f5:ed:2a:b1:e1:dc:3a:4f:6c:5a:1e:3e:24:c4:
                    05:3e:10:ec:ff:9a:1a:ed:98:42:11:68:ce:cb:5e:
                    6a:b7:a3:4e:5b:10:94:ef:40:f7:ac:fe:39:0a:3a:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C5:82:CB:49:EC:93:4B:10:2B:A6:B1:77:34:6A:63:C2:30:D8:55
            X509v3 Authority Key Identifier:
                keyid:16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkNUOk8mFydLYEGZCJRN19IIS-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/asWCy0nsk0sQK6axdzRqY8Iw2FU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:bc:b7:76:a8:26:ff:49:e2:27:e9:64:1f:b3:c2:4a:d9:
         f2:d2:61:40:68:a6:d0:0d:ec:60:73:b3:42:3c:0b:25:fd:ff:
         29:a3:66:9a:52:5d:39:ba:24:18:71:28:74:b6:ee:97:25:57:
         82:df:75:b5:e7:1a:69:24:91:ff:67:56:2b:e0:53:9e:a3:ef:
         4a:a5:ba:4c:2c:9a:d7:82:10:d0:d4:67:16:aa:87:8d:0e:d2:
         37:64:38:0e:2c:fd:bb:3a:3f:3a:04:4d:2b:50:18:22:be:20:
         9b:6e:19:3b:e9:c7:1a:5d:dc:6d:15:65:95:63:10:92:bb:4c:
         0d:66:37:f0:ef:8e:c6:1d:1a:bd:14:f3:21:dd:3b:33:68:1d:
         48:bf:76:d0:3d:91:9d:86:16:43:c9:02:15:5d:59:87:d0:07:
         60:0f:99:3c:cf:17:6c:9d:82:14:1d:ed:02:74:4d:76:ed:5a:
         51:14:7e:8a:d7:ca:8f:35:b7:09:4c:9e:e5:25:e7:f2:87:d5:
         57:c4:f4:d1:20:36:2b:68:84:24:dc:60:ed:9d:58:4a:ce:54:
         f3:71:b1:e8:67:c5:21:25:45:f0:c2:96:92:9e:36:8b:8f:da:
         32:fb:1d:54:fe:64:61:a6:a9:c8:f3:f0:a9:59:b8:0d:b9:ee:
         f5:aa:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net