Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/tcc9Tsyn6d-96WPt_XbJBv60zew.roa
File:                     tcc9Tsyn6d-96WPt_XbJBv60zew.roa (raw, json)
Hash identifier:          J6Nb5VpR4KUZjwsP+R+io+86T3laLyrcYfLrTF5fPlI=
Subject key identifier:   B5:C7:3D:4E:CC:A7:E9:DF:BD:E9:63:ED:FD:76:C9:06:FE:B4:CD:EC
Certificate issuer:       /CN=38a74eb96804cff1af2351bf5a6b7b0c25e6425b
Certificate serial:       0188726C7B6A197CF6183EC25EFC8976145B
Authority key identifier: 38:A7:4E:B9:68:04:CF:F1:AF:23:51:BF:5A:6B:7B:0C:25:E6:42:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKdOuWgEz_GvI1G_Wmt7DCXmQls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/tcc9Tsyn6d-96WPt_XbJBv60zew.roa
Signing time:             Wed 31 May 2023 15:28:12 +0000
ROA not before:           Wed 31 May 2023 15:28:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209523
IP address blocks:        45.158.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:72:6c:7b:6a:19:7c:f6:18:3e:c2:5e:fc:89:76:14:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a74eb96804cff1af2351bf5a6b7b0c25e6425b
        Validity
            Not Before: May 31 15:28:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5c73d4ecca7e9dfbde963edfd76c906feb4cdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:9d:2b:94:99:b7:f7:30:5e:77:bd:3f:18:
                    7c:1b:63:28:39:37:97:ad:59:a6:f1:d7:cf:0a:77:
                    ae:70:4e:01:41:67:92:67:06:52:3a:6a:da:65:26:
                    17:b6:00:ce:4e:2a:76:24:80:8d:65:5c:39:21:b5:
                    80:90:50:70:d8:9f:b4:b4:52:3d:e2:1a:5a:04:67:
                    32:bf:5c:32:eb:79:b2:d2:54:a2:14:ad:f1:11:ea:
                    0f:21:77:ec:85:2f:ed:89:47:86:da:a4:35:1a:d5:
                    d4:ff:c4:aa:01:46:e8:c7:09:3e:4b:94:30:a1:df:
                    21:f3:1e:66:95:69:07:33:12:88:ec:a8:13:54:6c:
                    2c:b6:ae:9b:9c:02:e5:f4:b3:48:b4:d3:21:45:b8:
                    95:58:59:6d:8f:6d:ea:7f:2f:06:b2:80:ef:26:b3:
                    66:0b:0f:b8:60:9d:5d:09:7a:9f:48:b6:af:76:9a:
                    b2:5d:5d:95:28:dc:c4:ae:ad:8d:30:79:3b:9c:4d:
                    0b:09:ad:5b:f9:43:35:ef:d1:35:e6:0f:0b:48:dc:
                    a4:ee:5b:94:36:8d:ad:88:75:d5:00:2a:ac:11:01:
                    6e:1e:91:c9:18:e1:45:24:77:d9:f4:11:7d:59:55:
                    85:97:63:56:42:01:b7:26:31:a3:ba:8f:b8:35:8d:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:3D:4E:CC:A7:E9:DF:BD:E9:63:ED:FD:76:C9:06:FE:B4:CD:EC
            X509v3 Authority Key Identifier:
                keyid:38:A7:4E:B9:68:04:CF:F1:AF:23:51:BF:5A:6B:7B:0C:25:E6:42:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKdOuWgEz_GvI1G_Wmt7DCXmQls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/tcc9Tsyn6d-96WPt_XbJBv60zew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1629b9-c75f-41d1-ba05-0aa5850ac521/1/OKdOuWgEz_GvI1G_Wmt7DCXmQls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:20:41:99:e9:c6:02:02:07:f3:60:eb:8f:34:1f:08:ed:
         47:2a:4e:fb:1f:eb:cd:71:d1:29:63:ef:e3:c0:bc:77:da:aa:
         a3:7b:81:ad:dc:c1:d4:ee:bf:56:af:fd:a5:dd:e0:08:28:49:
         0c:99:49:d2:4b:5e:c8:f6:d5:21:65:47:4c:95:17:2c:f5:38:
         33:ee:d8:fa:2d:2e:a7:c4:5b:d6:bb:5d:5c:61:ae:7e:9b:8f:
         e7:2d:a6:9a:a6:4f:74:af:25:40:83:c2:a8:c1:59:cc:da:e8:
         f2:0f:12:e1:00:dc:80:65:65:22:ac:26:03:f0:3f:cc:9b:c1:
         3a:4e:f3:0e:3d:05:f9:a9:a6:16:03:b5:c5:9e:48:55:3a:f3:
         2a:db:0a:4e:aa:0e:2d:f5:b8:8c:83:fc:f8:f7:87:b0:f8:e2:
         4f:2c:7b:db:dd:14:49:ea:2c:52:a2:54:5e:0f:dd:98:82:9c:
         47:fd:c4:96:93:01:5f:13:94:75:49:1f:f2:da:dd:ad:fb:a6:
         48:04:9b:17:7a:0f:67:ee:41:b7:83:e0:87:00:7d:3b:be:b1:
         15:4c:6f:0a:f0:22:1d:23:60:cb:a0:bd:97:96:3c:1c:06:38:
         ba:ae:d8:43:3a:e2:d7:b0:75:04:8c:9d:67:1e:7f:c7:b1:cd:
         a9:9a:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----