Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/L1R0G7ozXMtS-13Ie3lFFW4gZbE.roa
File:                     L1R0G7ozXMtS-13Ie3lFFW4gZbE.roa (raw, json)
Hash identifier:          A+WMHrAoKlrxfkr/gTMyNMKGd+sX6gGoLl2di+CYH0w=
Subject key identifier:   2F:54:74:1B:BA:33:5C:CB:52:FB:5D:C8:7B:79:45:15:6E:20:65:B1
Certificate issuer:       /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial:       018EC5E4
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/L1R0G7ozXMtS-13Ie3lFFW4gZbE.roa
Signing time:             Mon 13 Jun 2022 05:30:02 +0000
ROA not before:           Mon 13 Jun 2022 05:30:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136038
IP address blocks:        45.91.226.0/24 maxlen: 24
                          45.91.225.0/24 maxlen: 24
                          45.91.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26133988 (0x18ec5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
        Validity
            Not Before: Jun 13 05:30:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f54741bba335ccb52fb5dc87b7945156e2065b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:91:82:74:98:3a:a2:ab:32:f9:a8:28:d2:
                    52:64:8b:9a:ea:34:ae:b6:ed:ac:b9:ce:91:a6:4c:
                    81:1f:03:4f:71:c4:5d:ef:de:5e:c8:83:7c:39:ac:
                    6c:e1:9c:de:18:dc:56:ec:a9:67:81:7a:8c:62:85:
                    12:bb:88:36:d8:e8:fa:3b:d0:c8:60:31:bf:c7:a2:
                    da:40:ab:f9:e3:30:58:ef:c0:97:c1:9b:cd:5b:c7:
                    fd:b0:79:67:8f:ee:39:ef:82:42:85:18:5b:71:2a:
                    9e:c9:46:f9:ee:74:9f:ae:d2:0a:ab:56:c9:96:12:
                    94:63:ff:e5:fa:da:fb:cd:76:a6:6d:2f:e8:b6:a3:
                    ea:c0:f4:fc:c2:ba:c9:6d:74:59:3b:d5:4f:b6:1b:
                    17:0f:05:d0:4c:79:f8:88:44:dd:77:4b:94:98:7e:
                    b2:ee:90:21:b3:f4:77:63:ca:ba:a1:6f:aa:80:a8:
                    c9:47:2d:ec:e2:97:95:9a:70:49:df:8e:66:21:4c:
                    11:28:39:52:e1:de:68:a5:02:00:94:d1:9c:6e:fd:
                    08:4d:4c:eb:c4:ea:fb:91:29:d1:c3:2f:cc:04:8e:
                    09:31:26:c2:16:fc:86:49:9b:5c:99:d3:98:3a:c9:
                    ef:d8:61:df:10:26:9e:77:f8:eb:ee:1a:11:ed:de:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:54:74:1B:BA:33:5C:CB:52:FB:5D:C8:7B:79:45:15:6E:20:65:B1
            X509v3 Authority Key Identifier:
                keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/L1R0G7ozXMtS-13Ie3lFFW4gZbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.225.0-45.91.227.255

    Signature Algorithm: sha256WithRSAEncryption
         36:96:b1:15:69:39:00:e5:24:b1:f3:7d:d6:03:3c:7f:db:58:
         dc:23:51:80:b4:8e:0d:6e:b1:93:d7:d0:e6:02:84:cb:f0:04:
         29:e8:37:99:ba:76:39:6f:bf:9c:20:dd:f3:26:d5:72:8f:e9:
         91:a0:2b:81:ef:0a:1d:12:d3:ec:41:fe:7b:39:e6:3c:c9:41:
         cd:20:9c:df:14:c1:08:38:2e:5d:79:cb:49:79:cb:12:87:de:
         b2:51:44:a7:2a:78:52:a3:4d:f0:0e:62:15:b1:6e:63:a1:f7:
         9a:3e:6f:0c:69:bb:8d:10:94:47:80:4b:4c:60:e4:72:3e:e7:
         b8:b2:0b:22:bf:1a:d4:6d:da:cb:96:c4:f5:a6:1e:f7:88:68:
         90:b5:e2:d0:b9:30:5d:be:50:72:f9:91:ea:2c:49:31:de:0f:
         97:60:56:37:f3:45:e0:48:fe:21:da:60:5d:82:79:dd:b3:a5:
         fe:7b:ec:a9:e1:c1:aa:60:01:1c:a4:7a:35:cd:d2:f6:d8:38:
         35:f6:71:c6:5e:4b:2e:73:76:57:d3:e6:00:71:2e:67:15:93:
         9c:2d:77:23:50:5d:4c:cb:cd:4c:88:4b:51:05:67:bc:73:0f:
         a6:61:a7:b8:38:0b:40:6d:e7:0f:aa:c2:dc:75:1c:25:9c:a7:
         01:e2:8d:31
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAY7F5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MmRhMDYyNTk1MzRkYzQ1MjA4OWQyOTFhZDI3N2VlYWMxNmNkNDJhMB4XDTIyMDYx
MzA1MzAwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmY1NDc0MWJiYTMz
NWNjYjUyZmI1ZGM4N2I3OTQ1MTU2ZTIwNjViMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+DkYJ0mDqiqzL5qCjSUmSLmuo0rrbtrLnOkaZMgR8DT3HE
Xe/eXsiDfDmsbOGc3hjcVuypZ4F6jGKFEruINtjo+jvQyGAxv8ei2kCr+eMwWO/A
l8GbzVvH/bB5Z4/uOe+CQoUYW3EqnslG+e50n67SCqtWyZYSlGP/5fra+812pm0v
6Laj6sD0/MK6yW10WTvVT7YbFw8F0Ex5+IhE3XdLlJh+su6QIbP0d2PKuqFvqoCo
yUct7OKXlZpwSd+OZiFMESg5UuHeaKUCAJTRnG79CE1M68Tq+5Ep0cMvzASOCTEm
whb8hkmbXJnTmDrJ79hh3xAmnnf46+4aEe3e09sCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQvVHQbujNcy1L7Xch7eUUVbiBlsTAfBgNVHSMEGDAWgBQC2gYllTTcRSCJ
0pGtJ37qwWzUKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0F0b0dKWlUwM0VVZ2lkS1JyU2QtNnNGczFDby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvM2Y1YzIxLTdiM2ItNDBmNy04ODUxLWNkMzJmMGQ0MDg2Yi8x
L0wxUjBHN296WE10Uy0xM0llM2xGRlc0Z1piRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
M2Y1YzIxLTdiM2ItNDBmNy04ODUxLWNkMzJmMGQ0MDg2Yi8xL0F0b0dKWlUwM0VV
Z2lkS1JyU2QtNnNGczFDby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALVvhAwQCLVvgMA0GCSqGSIb3
DQEBCwUAA4IBAQA2lrEVaTkA5SSx833WAzx/21jcI1GAtI4NbrGT19DmAoTL8AQp
6DeZunY5b7+cIN3zJtVyj+mRoCuB7wodEtPsQf57OeY8yUHNIJzfFMEIOC5dectJ
ecsSh96yUUSnKnhSo03wDmIVsW5jofeaPm8MabuNEJRHgEtMYORyPue4sgsivxrU
bdrLlsT1ph73iGiQteLQuTBdvlBy+ZHqLEkx3g+XYFY380XgSP4h2mBdgnnds6X+
e+yp4cGqYAEcpHo1zdL22Dg19nHGXksuc3ZX0+YAcS5nFZOcLXcjUF1My81MiEtR
BWe8cw+mYae4OAtAbecPqsLcdRwlnKcB4o0x
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net