Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Oqg-Z2n_8ya5-kBPiFXU1Kg5src.roa
File:                     Oqg-Z2n_8ya5-kBPiFXU1Kg5src.roa (raw, json)
Hash identifier:          t6VU3EoAQtbclRnVAgO4soXqhWktDwkuGoQNTLB/5dI=
Subject key identifier:   3A:A8:3E:67:69:FF:F3:26:B9:FA:40:4F:88:55:D4:D4:A8:39:B2:B7
Certificate issuer:       /CN=366de22f152d2f1333a940e1e0bbd6b4d8beac48
Certificate serial:       05181393
Authority key identifier: 36:6D:E2:2F:15:2D:2F:13:33:A9:40:E1:E0:BB:D6:B4:D8:BE:AC:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Oqg-Z2n_8ya5-kBPiFXU1Kg5src.roa
Signing time:             Thu 28 Apr 2022 10:00:31 +0000
ROA not before:           Thu 28 Apr 2022 10:00:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203576
IP address blocks:        45.151.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85463955 (0x5181393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366de22f152d2f1333a940e1e0bbd6b4d8beac48
        Validity
            Not Before: Apr 28 10:00:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3aa83e6769fff326b9fa404f8855d4d4a839b2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:ce:f4:96:c6:f6:5d:7f:f8:bd:ef:c9:d6:
                    3e:68:02:d4:4e:a2:74:5e:43:5e:84:ec:43:44:31:
                    d1:1d:af:2d:ce:e7:fb:3b:18:60:38:62:e1:fd:11:
                    c2:c7:1e:3d:52:df:21:16:df:17:15:a8:0a:d7:20:
                    e2:06:8b:d3:f7:74:35:62:f5:2c:e4:5c:f7:6f:6a:
                    e4:ff:52:29:70:cd:c2:80:f1:d2:38:2f:72:b6:cd:
                    cc:1c:48:9d:b2:7a:74:5b:61:c5:f3:28:05:58:ad:
                    c5:22:dd:e2:c8:a0:79:d8:12:16:1a:93:85:5d:82:
                    67:73:05:6a:61:25:81:cd:84:3f:d9:5b:96:7d:93:
                    1f:2b:ef:46:36:16:03:86:73:32:5b:19:a3:93:52:
                    2d:44:80:01:4e:7e:3d:f7:a7:73:44:c9:7e:ca:c2:
                    bb:c8:cb:1d:50:ae:09:f8:fa:45:d1:b6:c2:04:4f:
                    5c:d0:71:54:66:b0:0d:69:8f:06:80:21:e1:0c:96:
                    a9:3b:9f:f8:79:fa:c6:70:f1:6a:54:ed:cc:1a:8e:
                    22:9d:62:97:f9:4e:6d:5d:47:4a:c6:86:e9:cf:3c:
                    d0:83:ef:2d:88:99:df:04:1a:56:e7:c4:3a:9b:2e:
                    b0:26:d5:ac:cf:67:fa:02:ed:67:44:38:a9:08:3b:
                    d5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A8:3E:67:69:FF:F3:26:B9:FA:40:4F:88:55:D4:D4:A8:39:B2:B7
            X509v3 Authority Key Identifier:
                keyid:36:6D:E2:2F:15:2D:2F:13:33:A9:40:E1:E0:BB:D6:B4:D8:BE:AC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Oqg-Z2n_8ya5-kBPiFXU1Kg5src.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:08:a7:07:4a:2b:7f:b7:6f:12:5a:81:c4:9f:06:da:24:6a:
         ed:f6:3a:33:97:39:e6:dc:0d:1c:3d:ca:19:3f:d5:67:b1:e0:
         6c:53:82:c6:a3:02:9d:02:ae:59:c1:09:72:07:c1:7d:cf:0e:
         24:48:5d:cc:89:43:59:14:58:49:23:af:cb:f8:80:dd:a1:a4:
         e2:03:fd:11:4b:44:56:47:c5:36:ba:4e:3b:74:44:78:4b:c8:
         dc:24:c4:36:36:fb:1d:40:51:63:d1:0c:db:db:d7:9a:a1:78:
         66:88:4c:05:22:a2:07:51:1d:19:35:38:39:1a:a1:e7:04:ba:
         39:2c:67:9c:e1:9d:de:ed:80:a1:55:01:08:33:44:aa:2a:43:
         fe:87:1f:89:1c:2a:8d:d8:bb:90:80:73:0b:3c:00:61:c3:a4:
         3f:22:46:18:5b:63:08:53:d8:0e:72:fa:f5:ca:d1:34:ce:2e:
         18:f3:d9:10:33:37:64:94:7c:3a:27:12:81:28:1e:b3:b5:4b:
         de:c8:bf:68:2e:6a:62:4b:55:e5:31:ba:1f:9e:8d:a7:fc:35:
         ff:95:02:92:dc:d6:32:92:82:00:fe:72:56:5d:7f:28:d0:e4:
         d5:ec:ea:33:d1:7e:af:75:ef:85:7e:9c:af:7c:16:17:d8:ab:
         6b:f4:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net