Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/1tSvH4RNSu7UD2qtT1EWm04Zry4.roa
File:                     1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (raw, json)
Hash identifier:          q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=
Subject key identifier:   D6:D4:AF:1F:84:4D:4A:EE:D4:0F:6A:AD:4F:51:16:9B:4E:19:AF:2E
Certificate issuer:       /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial:       01941FFA8D80B689D4D7A766BC94C3E4D83E
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/1tSvH4RNSu7UD2qtT1EWm04Zry4.roa
Signing time:             Wed 01 Jan 2025 03:48:21 +0000
ROA not before:           Wed 01 Jan 2025 03:48:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39257
IP address blocks:        45.67.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:8d:80:b6:89:d4:d7:a7:66:bc:94:c3:e4:d8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
        Validity
            Not Before: Jan  1 03:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d6d4af1f844d4aeed40f6aad4f51169b4e19af2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:7d:6b:cb:80:d1:fe:0f:d7:d5:40:13:90:
                    82:9b:48:0e:97:ff:b6:11:47:1f:0f:d1:a7:c6:8b:
                    58:0a:6a:23:0b:05:b5:17:59:f0:47:f7:78:aa:06:
                    24:cc:cb:81:7e:03:10:1a:21:18:d0:63:8f:95:fe:
                    d3:46:c3:7a:2a:10:2b:f6:c5:98:28:85:3f:bb:4a:
                    de:f0:d5:c6:0b:ed:49:76:44:30:fc:ed:e1:ad:cc:
                    60:0a:19:91:d1:12:ad:a9:d5:33:62:06:5d:62:6b:
                    8c:b2:a1:f0:34:15:67:0f:14:73:7d:55:e3:d2:d3:
                    b3:dc:86:18:33:5e:85:13:19:97:7b:4f:fe:de:4d:
                    b0:c3:9d:e7:7c:b1:cd:3c:be:e0:d1:45:63:dc:45:
                    98:c0:b8:71:69:77:eb:a5:6b:55:e7:5f:9a:cc:5c:
                    30:80:05:8a:97:d0:eb:de:4c:7b:be:93:12:f3:ac:
                    d3:8f:ff:fa:be:7c:89:93:c0:35:ce:03:7b:43:4c:
                    91:ce:8d:55:23:51:b7:04:18:2e:d1:be:4c:27:7a:
                    55:6f:25:7c:57:fa:ae:9d:57:a2:9b:8c:9f:b4:d9:
                    f8:69:39:82:44:83:62:74:e8:1f:71:e1:7b:61:29:
                    c6:6f:6c:ef:94:9c:5e:77:8e:4d:ee:b3:88:0a:87:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D4:AF:1F:84:4D:4A:EE:D4:0F:6A:AD:4F:51:16:9B:4E:19:AF:2E
            X509v3 Authority Key Identifier:
                keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/1tSvH4RNSu7UD2qtT1EWm04Zry4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:c2:aa:e4:dc:1b:96:d8:03:1f:24:6e:40:8d:f0:bd:7d:
         32:25:a8:50:b7:10:d4:bb:12:f8:98:7a:67:3b:8e:e6:ff:8a:
         72:4c:12:81:0e:41:80:c0:68:7b:0b:0a:c8:ae:75:83:ee:34:
         ee:40:1f:07:70:1c:3a:b7:04:ec:52:8a:7b:26:48:fc:b1:41:
         cb:35:6e:25:58:bb:23:65:df:73:bf:75:bd:9f:36:21:43:34:
         3f:21:a7:ca:25:6f:a1:be:ca:a9:6b:7a:02:af:a0:b8:b7:0e:
         6b:9d:e1:a6:9f:59:86:89:ba:6d:57:11:89:9f:b7:07:ed:32:
         5e:7b:3f:dd:58:78:00:91:2f:e8:6b:74:42:ba:09:eb:63:b6:
         97:50:4e:28:6e:8d:c5:d1:ac:0a:f3:b7:51:47:28:b5:74:28:
         79:88:92:ee:6b:e9:41:bf:67:b8:37:41:10:01:e3:f0:07:04:
         bf:fe:01:18:9f:24:ed:e7:c8:9a:81:46:7a:87:ba:49:fe:e5:
         89:0d:48:a2:fd:21:71:1a:52:b3:6f:8c:1a:fb:48:21:a5:56:
         bd:db:8d:95:b2:6f:4e:39:d7:b0:66:18:54:d1:58:40:f5:06:
         c5:c6:27:7a:43:b2:59:d5:64:6a:80:28:22:dc:c7:02:45:82:
         d9:6c:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----