Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/YGKaMmNu78fuMRQcKBVdsOGi80U.roa
File:                     YGKaMmNu78fuMRQcKBVdsOGi80U.roa (raw, json)
Hash identifier:          0vpUCDdHI3lzmz0nba5ReeIINofu0Xqnsq+eb/WnVZA=
Subject key identifier:   60:62:9A:32:63:6E:EF:C7:EE:31:14:1C:28:15:5D:B0:E1:A2:F3:45
Certificate issuer:       /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial:       0183E64A4AD3FFA03B623CE8D6DF67142273
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/YGKaMmNu78fuMRQcKBVdsOGi80U.roa
Signing time:             Mon 17 Oct 2022 14:12:51 +0000
ROA not before:           Mon 17 Oct 2022 14:12:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        45.84.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e6:4a:4a:d3:ff:a0:3b:62:3c:e8:d6:df:67:14:22:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
        Validity
            Not Before: Oct 17 14:12:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60629a32636eefc7ee31141c28155db0e1a2f345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:67:6d:4d:fd:52:07:15:66:25:37:57:5b:
                    47:6e:ec:4e:f8:d0:a9:5f:de:46:0b:d4:cc:75:b7:
                    25:3c:ba:f5:4f:ef:03:04:ef:1a:5a:aa:4e:81:f4:
                    3e:05:90:25:d9:2c:82:46:71:05:20:bb:e8:f1:ed:
                    ad:fb:8f:41:cb:0e:37:3d:ea:65:cb:a4:38:05:6a:
                    49:56:58:d4:c8:63:4d:0e:95:73:5d:2b:08:0c:8e:
                    ec:ad:af:52:64:fb:6a:13:25:85:26:4f:cd:cc:59:
                    c4:45:b6:d9:47:47:9a:d7:90:20:ad:d5:6d:a3:c5:
                    67:db:65:2a:73:0c:18:ae:99:47:52:bd:c5:cf:b6:
                    90:e0:7b:f4:2c:49:89:b7:c8:fd:be:fe:1e:08:47:
                    c6:b9:62:d9:a7:3c:f9:ee:01:f2:97:73:4b:ac:35:
                    7a:f5:57:3f:97:9b:59:55:4e:a7:d1:01:ee:9a:6c:
                    c7:8d:da:50:a6:89:c9:6d:68:78:1e:c0:67:08:7f:
                    a3:ff:f8:29:bc:7b:4e:82:81:84:2f:35:70:b1:a0:
                    b4:9a:b2:17:e3:c1:ce:96:a4:0c:ba:0d:83:6a:5b:
                    3a:fe:65:c2:56:a8:d0:31:bf:56:63:0f:5d:6b:f3:
                    42:b3:9f:57:59:ad:03:ae:50:60:51:42:58:ce:45:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:62:9A:32:63:6E:EF:C7:EE:31:14:1C:28:15:5D:B0:E1:A2:F3:45
            X509v3 Authority Key Identifier:
                keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/YGKaMmNu78fuMRQcKBVdsOGi80U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:64:e3:10:ad:f0:b6:0a:9c:d1:da:27:b9:e8:bf:29:54:84:
         a8:a9:23:ce:e1:01:08:67:d3:46:3d:94:fb:62:e5:01:91:17:
         7c:24:6b:3f:ff:ba:93:e7:c5:a6:03:48:10:64:e1:d2:bb:4a:
         02:ca:f4:51:a9:62:b8:92:c5:49:98:dc:a8:f4:dd:bf:ab:76:
         d6:0a:d6:f5:a4:37:b6:70:8f:4b:8a:29:26:f5:d4:bc:73:ee:
         50:cf:29:0b:72:fc:f3:3e:18:f1:7c:d0:e5:9d:6b:d5:4f:1d:
         66:85:c9:ad:d6:41:21:f3:0c:63:7a:05:29:5d:55:84:ea:d1:
         d6:cb:bd:ec:49:56:91:85:e9:82:79:7c:34:7b:71:84:67:61:
         9f:57:eb:0a:37:30:e2:d0:f1:c7:e0:b4:ef:80:a0:da:36:a0:
         d3:f8:f1:90:ed:7b:a8:8b:4f:56:d0:c3:c7:2b:ca:26:63:b8:
         8c:be:6a:33:d8:a7:68:53:89:aa:e2:57:04:6e:e6:0f:63:07:
         a8:8c:17:e8:7e:7c:d1:cf:0a:97:d7:90:c4:9e:fb:74:f2:6a:
         03:10:4f:4d:ab:c8:71:f9:a4:78:46:d8:6f:ae:52:ce:9d:44:
         03:22:92:92:ba:fa:73:03:a8:a6:f8:62:34:9e:3b:4b:51:53:
         8d:fc:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net