Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-169xIxfHJWgppShkUh9-G2NXdw.roa
File:                     1-169xIxfHJWgppShkUh9-G2NXdw.roa (raw, json)
Hash identifier:          o7qOiPdbmIvh/4k20wTb1e85yPhFxr07PNEsJ3Sw944=
Subject key identifier:   FB:5E:BD:C4:8C:5F:1C:95:A0:A6:94:A1:91:48:7D:F8:6D:8D:5D:DC
Certificate issuer:       /CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Certificate serial:       09D5804B
Authority key identifier: FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-169xIxfHJWgppShkUh9-G2NXdw.roa
Signing time:             Fri 17 Jun 2022 11:17:47 +0000
ROA not before:           Fri 17 Jun 2022 11:17:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202265
IP address blocks:        45.87.161.0/24 maxlen: 24
                          45.87.160.0/24 maxlen: 24
                          2a04:5b81:1fff::/48 maxlen: 48
                          2a04:5b80:53::/48 maxlen: 48
                          2a04:5b81:1000::/40 maxlen: 48
                          2a04:5b87:1::/48 maxlen: 48
                          2a04:5b84:1::/48 maxlen: 48
                          2a04:5b81:2020::/44 maxlen: 44
                          2a04:5b82::/44 maxlen: 44
                          2a04:5b81:2010::/44 maxlen: 48
                          2a04:5b82:8::/48 maxlen: 48
                          2a04:5b80:200::/48 maxlen: 48
                          2a04:5b80::/48 maxlen: 48
                          2a04:5b80:300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164986955 (0x9d5804b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
        Validity
            Not Before: Jun 17 11:17:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb5ebdc48c5f1c95a0a694a191487df86d8d5ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:a6:5f:02:26:7f:9b:13:c0:ee:75:82:37:
                    88:a9:5b:a8:04:86:49:1e:b9:4e:8a:6c:73:14:2b:
                    b3:2a:5e:dd:9b:f8:8e:b4:48:b2:15:2b:f4:ea:d8:
                    ec:49:1e:30:3f:d8:07:e8:9c:29:fc:99:f2:72:79:
                    d4:b3:cb:17:96:2e:5e:29:0e:db:bd:3c:98:f8:32:
                    ad:8f:ef:6c:4b:b2:6c:86:a5:c1:72:c6:1e:48:60:
                    d7:28:79:3f:76:26:58:83:ef:c1:ca:94:24:63:59:
                    89:1f:85:82:1b:eb:23:44:3d:d8:d3:61:db:a4:6c:
                    d4:02:1a:9f:c0:8b:34:a5:d0:a9:f3:48:c7:57:c9:
                    e0:75:d1:77:dc:fa:9b:d5:56:64:ca:b4:e1:dd:b4:
                    04:6e:f6:a5:a0:a3:2a:51:37:b7:6d:03:73:58:f8:
                    91:8d:45:db:50:62:13:86:32:7c:08:6f:8d:2a:fd:
                    3b:51:8e:b6:83:1d:6c:67:2d:d4:e9:29:cf:c8:e4:
                    33:9e:78:ff:05:62:82:16:42:39:af:d0:be:3d:61:
                    5e:d4:94:b0:9a:54:f4:1d:30:b4:e5:a2:d8:2d:a1:
                    c6:bf:3e:5e:70:c2:ee:dd:81:7c:69:62:2b:15:b9:
                    2f:ad:4f:8d:38:97:75:03:81:88:9b:d6:ed:48:e2:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5E:BD:C4:8C:5F:1C:95:A0:A6:94:A1:91:48:7D:F8:6D:8D:5D:DC
            X509v3 Authority Key Identifier:
                keyid:FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-169xIxfHJWgppShkUh9-G2NXdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.160.0/23
                IPv6:
                  2a04:5b80::/48
                  2a04:5b80:53::/48
                  2a04:5b80:200::/48
                  2a04:5b80:300::/48
                  2a04:5b81:1000::/40
                  2a04:5b81:1fff::/48
                  2a04:5b81:2010::-2a04:5b81:202f:ffff:ffff:ffff:ffff:ffff
                  2a04:5b82::/44
                  2a04:5b84:1::/48
                  2a04:5b87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:e8:b9:73:8e:64:a8:75:89:30:f4:a4:4f:d4:33:10:6d:
         31:de:ce:69:40:2d:fe:73:91:b5:70:fb:93:c2:56:73:df:80:
         a3:67:89:e3:db:f1:80:23:4e:f6:0e:df:ab:0b:9e:cf:1d:95:
         5b:1d:db:f1:1d:3a:81:ea:1c:22:69:ac:5c:d3:c7:07:c0:11:
         a2:05:f3:91:ea:14:ba:a9:7f:ab:1e:76:b8:11:2d:7b:39:68:
         23:6d:fe:76:b1:24:ea:3f:1b:1c:1c:23:d0:b0:12:69:1f:04:
         a1:01:f0:78:de:64:76:9c:af:2c:2a:fe:68:3b:ec:30:3b:51:
         5f:e4:cc:49:16:9a:43:c2:ac:6c:08:84:4c:73:b2:66:e1:4d:
         67:c8:59:37:8e:17:a6:f0:33:af:4e:7f:b4:f8:53:06:c5:12:
         a7:8d:1e:f2:f7:cc:eb:a2:9b:cc:bd:a8:e4:ae:b4:33:3e:9f:
         de:2f:1e:c5:3c:18:0b:62:72:8c:65:a9:65:d9:49:af:c7:4a:
         9f:a3:f0:e2:84:12:e7:fe:a9:f4:18:f8:cf:da:ae:55:d1:3c:
         68:18:32:85:12:88:38:a8:f1:4e:47:33:05:d8:31:9f:18:05:
         1f:4f:95:82:b9:4c:56:6e:46:42:49:81:cf:e4:e3:52:33:5e:
         d7:87:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----