Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/WPCRGLeltSJ3YXo9id1i5ppsRw4.roa
File:                     WPCRGLeltSJ3YXo9id1i5ppsRw4.roa (raw, json)
Hash identifier:          XvpGDNA3BMBDAmGYF6lZbS8+WVJqVHEpsQax4jq6kCo=
Subject key identifier:   58:F0:91:18:B7:A5:B5:22:77:61:7A:3D:89:DD:62:E6:9A:6C:47:0E
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       0194274641DD4BA5DFDC76DFBD9B877C488A
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/WPCRGLeltSJ3YXo9id1i5ppsRw4.roa
Signing time:             Thu 02 Jan 2025 13:48:23 +0000
ROA not before:           Thu 02 Jan 2025 13:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41789
IP address blocks:        45.82.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:46:41:dd:4b:a5:df:dc:76:df:bd:9b:87:7c:48:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Jan  2 13:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=58f09118b7a5b52277617a3d89dd62e69a6c470e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:54:5f:9a:a4:f4:6c:3a:55:cb:d7:02:d3:6f:
                    2e:f4:d8:be:30:bb:9f:b3:54:6c:36:bb:6e:25:95:
                    d6:b2:a8:46:95:66:df:79:5d:39:ff:37:8a:44:a3:
                    d2:9d:09:41:b2:a9:41:7f:16:97:03:d3:03:ae:06:
                    f1:73:12:93:51:fe:2a:22:cc:a1:7b:90:59:68:46:
                    87:64:2a:68:a7:ef:fd:7a:65:92:5e:c9:c8:0d:96:
                    38:17:a4:aa:e5:f2:09:97:f7:68:7b:29:9d:ad:2b:
                    ee:f4:c8:9a:a6:07:5a:b4:31:4a:a9:6a:d3:4b:98:
                    b5:06:e8:60:a7:ba:92:8b:2b:39:f2:ce:8d:40:48:
                    0e:64:71:e9:e4:66:53:f9:38:de:10:e5:52:0a:f3:
                    46:9f:da:32:e3:84:ac:6e:71:ad:19:23:0d:35:e5:
                    30:8d:39:00:42:38:64:70:6a:22:a1:ec:ea:e5:8a:
                    47:97:f1:f3:f0:7c:cc:4a:d6:cf:0c:3b:d2:5c:59:
                    b2:00:73:ff:8a:12:f0:a5:a6:2b:28:dd:51:dd:1a:
                    48:61:d0:dc:8c:d7:60:51:d6:39:7e:b6:a6:d6:12:
                    41:44:7b:1e:e8:b4:99:1c:b4:56:08:c8:4b:2b:16:
                    40:8a:c0:66:39:4b:99:74:c4:fe:9e:e7:d5:3c:c1:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:91:18:B7:A5:B5:22:77:61:7A:3D:89:DD:62:E6:9A:6C:47:0E
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/WPCRGLeltSJ3YXo9id1i5ppsRw4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:be:92:31:7a:37:b4:f8:57:41:51:3f:59:b7:c5:69:f9:
         e2:3b:2c:46:b2:6c:4d:65:63:b4:b8:9a:71:ca:3f:5c:fe:5d:
         04:c7:db:c1:cd:e7:cd:19:c3:c3:39:60:98:1b:2a:2d:91:84:
         f8:04:dd:f0:e4:18:f5:6d:7f:ea:a2:0c:e8:43:3d:85:dd:d0:
         fb:14:10:0b:4b:5e:2f:b8:35:a8:cf:24:cb:43:26:2b:53:88:
         b3:e6:0c:ad:88:1f:5c:90:2d:0a:0c:2c:a8:e8:ea:cf:9e:82:
         f3:78:0d:de:e7:25:de:62:97:76:fc:81:ab:f7:62:da:97:d1:
         61:b1:81:95:22:f6:d9:a5:63:d4:82:3c:a4:ef:7b:b8:97:82:
         19:a7:49:27:6d:17:37:c1:d5:33:a9:55:33:51:d9:fa:9e:30:
         ff:10:63:f0:24:e9:ae:85:a5:59:26:98:e9:75:9e:fb:f2:39:
         bf:af:28:9d:00:71:4e:e0:4d:a3:24:04:e5:79:6e:bf:08:e5:
         fe:a5:2e:1e:40:a9:00:5f:dd:e3:76:d3:11:26:f1:fc:a4:ea:
         d3:41:d6:8b:39:70:80:d8:84:9e:b5:bb:9b:52:8e:6d:3e:85:
         f9:60:f1:19:4f:c2:f6:27:a4:ed:9d:86:e6:ae:42:b3:40:91:
         37:07:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----