Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/Vg3UECdbcsvCye_vfXkIc3E55xc.roa
File:                     Vg3UECdbcsvCye_vfXkIc3E55xc.roa (raw, json)
Hash identifier:          Qj4tWVBA9MoHFG9++MacLOcsYX3eid8nZyw209QOx0I=
Subject key identifier:   56:0D:D4:10:27:5B:72:CB:C2:C9:EF:EF:7D:79:08:73:71:39:E7:17
Certificate issuer:       /CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Certificate serial:       0182249E31DF5C0C3E9076C492E13C500247
Authority key identifier: 10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/Vg3UECdbcsvCye_vfXkIc3E55xc.roa
Signing time:             Fri 22 Jul 2022 06:35:23 +0000
ROA not before:           Fri 22 Jul 2022 06:35:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.149.232.0/24 maxlen: 24
                          45.149.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:24:9e:31:df:5c:0c:3e:90:76:c4:92:e1:3c:50:02:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
        Validity
            Not Before: Jul 22 06:35:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=560dd410275b72cbc2c9efef7d7908737139e717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:f5:98:c4:fb:c5:de:7c:09:59:68:f4:b0:
                    1b:7b:3a:e9:de:d7:20:26:d7:ac:9b:1a:4c:2d:ad:
                    1f:73:07:4d:0f:fe:03:d2:27:8f:a5:73:2e:32:d3:
                    54:e4:50:7d:a7:2f:a6:a4:b0:5f:87:23:82:0f:83:
                    40:22:99:a9:52:f5:d7:15:9a:24:02:7f:43:b6:6e:
                    dd:d9:d4:97:61:60:ef:24:eb:80:69:d2:87:96:86:
                    f6:5d:06:35:d7:53:3c:40:5a:d1:9d:01:e4:0e:59:
                    98:89:8e:c1:a1:1e:20:7c:15:5c:fe:3c:4c:e7:c3:
                    f4:a9:22:86:07:ae:d8:99:11:a1:8e:ac:2c:08:d4:
                    12:41:d6:96:3f:b1:a6:eb:f3:53:33:dd:f1:dc:4c:
                    f8:5d:99:6e:4b:ae:69:72:78:45:6b:db:dc:34:f1:
                    14:9f:3b:65:ee:e0:47:93:bf:7c:a6:07:b9:c6:36:
                    b6:a2:fd:1d:1a:21:8f:27:85:49:2c:66:d6:29:6d:
                    2b:39:54:93:13:b4:26:e8:a6:3b:ee:45:f9:69:fd:
                    ee:56:2a:c8:10:48:a9:6b:4e:53:ca:c3:06:8a:ac:
                    d8:fd:07:94:0f:55:96:8c:fd:72:a5:b6:02:7b:55:
                    d8:7b:6e:4e:31:cd:6b:22:80:48:86:6e:a1:78:9e:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0D:D4:10:27:5B:72:CB:C2:C9:EF:EF:7D:79:08:73:71:39:E7:17
            X509v3 Authority Key Identifier:
                keyid:10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/Vg3UECdbcsvCye_vfXkIc3E55xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.232.0/24
                  45.149.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:c2:e8:40:73:2a:ae:46:f3:44:e8:d0:a0:94:51:86:37:
         36:ba:2d:f4:40:40:14:b2:c1:04:19:84:13:d2:2a:fd:72:97:
         42:c1:0f:e4:82:ff:66:35:8c:25:3c:38:d5:20:b1:62:68:c2:
         0a:05:18:66:d5:cd:21:3f:28:3e:92:6c:0b:0c:9c:cc:91:a3:
         49:e6:dd:6e:d8:c4:68:a3:0d:e7:85:cd:2b:47:6b:d1:18:37:
         74:f8:46:ae:85:53:c6:54:a2:72:a1:95:0a:7a:94:b0:d4:e4:
         e4:97:e6:b6:8e:38:3a:7b:40:29:d4:9d:ca:ca:22:0b:a5:2b:
         25:b0:61:ac:ac:b0:77:e4:fd:d1:fe:2b:eb:72:e6:7b:17:d6:
         ff:b5:bf:54:c2:c9:39:85:57:79:2f:46:a5:7b:d4:16:91:b8:
         00:c9:a0:d2:e5:2d:00:7a:b7:cd:87:f5:98:f7:4b:a0:68:af:
         86:a4:8e:a0:1c:e1:37:3f:8c:c2:d5:43:04:a6:3d:68:fa:59:
         74:fa:04:4c:c1:b8:7d:03:94:27:57:4d:df:e7:b0:db:6f:2b:
         a4:0f:68:71:07:e0:71:03:70:16:a4:63:22:41:a9:7c:80:3d:
         03:eb:55:ba:e7:11:23:0e:a1:60:75:7a:18:18:c1:d4:b8:ad:
         59:1c:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net