Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/n3Zc51Cjh-GLrciptyieExQH7yk.roa
File:                     n3Zc51Cjh-GLrciptyieExQH7yk.roa (raw, json)
Hash identifier:          8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=
Subject key identifier:   9F:76:5C:E7:50:A3:87:E1:8B:AD:C8:A9:B7:28:9E:13:14:07:EF:29
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0195EB942793C8A2B0127E8A6A061DD02327
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/n3Zc51Cjh-GLrciptyieExQH7yk.roa
Signing time:             Mon 31 Mar 2025 09:41:49 +0000
ROA not before:           Mon 31 Mar 2025 09:41:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25693
IP address blocks:        45.146.234.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:eb:94:27:93:c8:a2:b0:12:7e:8a:6a:06:1d:d0:23:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Mar 31 09:41:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9f765ce750a387e18badc8a9b7289e131407ef29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:90:bd:e1:89:69:94:bf:39:e5:02:9b:d8:
                    11:d3:12:2c:28:c6:89:b6:50:63:ec:80:25:83:d7:
                    42:0b:d4:d4:70:3e:0f:10:54:1c:b3:c5:52:42:50:
                    1c:03:97:99:6d:ef:5d:39:55:22:02:34:a1:ea:23:
                    2a:4f:d3:3f:3f:d5:be:16:63:aa:87:a9:3f:8d:10:
                    b5:de:12:19:90:66:6b:c9:64:f1:28:0f:f6:7a:51:
                    81:da:c0:eb:63:a5:67:c6:48:60:62:88:1c:32:57:
                    00:08:44:9c:be:aa:4e:4d:b1:b8:63:03:45:d8:c3:
                    9b:42:6b:46:41:fe:3d:dd:c8:68:ed:4e:cc:6d:39:
                    0e:4e:9f:23:cf:fb:68:8d:0e:12:8c:59:1f:e3:66:
                    88:5f:aa:01:fa:46:d2:e4:1e:70:e2:74:da:1e:d1:
                    8a:2d:03:a9:00:05:e6:44:a2:76:9a:ff:34:59:6b:
                    8f:1c:e6:66:4f:5c:53:f9:a9:a4:76:25:18:2f:84:
                    31:ec:58:9c:0f:11:13:6b:d5:66:63:84:6c:9a:e0:
                    88:8d:17:da:75:ab:08:94:eb:f8:36:1d:a3:b4:68:
                    8c:81:e4:35:76:be:68:58:41:5f:08:bb:7f:8f:00:
                    ab:51:41:64:44:f7:5d:6c:4b:48:23:c2:18:c2:47:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:5C:E7:50:A3:87:E1:8B:AD:C8:A9:B7:28:9E:13:14:07:EF:29
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/n3Zc51Cjh-GLrciptyieExQH7yk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:94:7b:e3:c9:9e:12:07:58:2d:ab:f8:1d:39:19:76:79:
         82:54:b2:d8:2c:d6:41:69:41:21:b0:fb:fd:61:0b:37:9b:fe:
         16:3e:de:68:7f:ae:76:4c:98:61:c0:22:cd:26:9e:af:a3:24:
         6e:f4:43:e4:ec:b4:5d:55:c9:e0:bc:a9:a0:73:f2:f9:f3:51:
         1c:c1:3d:3b:ab:b4:2c:b1:ee:c8:e4:0b:ce:39:93:17:09:50:
         08:9c:db:d6:52:84:5b:77:49:d4:7c:34:0f:b1:65:57:8a:bc:
         5a:3e:79:b4:aa:c7:50:43:d1:a8:b2:27:79:6c:53:c9:15:11:
         71:0c:0e:7c:c7:26:32:24:5a:04:a2:2f:03:80:fa:a6:b7:40:
         39:9d:ee:fc:39:c0:2a:34:99:2b:82:83:dd:84:7b:9d:6b:ae:
         68:b5:05:35:39:c9:80:9c:fa:04:cf:5d:ac:7e:c9:f5:d7:ab:
         ab:81:80:91:d1:9b:d7:25:ae:71:cc:3a:60:d0:ca:0d:93:3f:
         50:07:da:b6:bb:32:19:dd:52:eb:d4:6d:10:6a:f4:a4:52:78:
         4c:bc:73:6c:0c:d7:44:23:fb:e8:05:67:78:33:fa:3d:e6:f9:
         4d:93:30:f0:17:bc:a7:40:ef:3d:6c:51:ac:e2:ae:ad:27:bc:
         f4:ea:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----