Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/bZfGM7vku_4MRdHZaFo-RpvsdPs.roa
File:                     bZfGM7vku_4MRdHZaFo-RpvsdPs.roa (raw, json)
Hash identifier:          +UUb2FHs6xwu4hSVSk/hdEfa1kVMMi0LM7spTQzyHwM=
Subject key identifier:   6D:97:C6:33:BB:E4:BB:FE:0C:45:D1:D9:68:5A:3E:46:9B:EC:74:FB
Certificate issuer:       /CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Certificate serial:       0855F2B2
Authority key identifier: FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/bZfGM7vku_4MRdHZaFo-RpvsdPs.roa
Signing time:             Sat 01 Jan 2022 12:02:09 +0000
ROA not before:           Sat 01 Jan 2022 12:02:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202265
IP address blocks:        45.87.161.0/24 maxlen: 24
                          45.87.160.0/24 maxlen: 24
                          2a04:5b81:1fff::/48 maxlen: 48
                          2a04:5b80:53::/48 maxlen: 48
                          2a04:5b81:1000::/40 maxlen: 48
                          2a04:5b82::/32 maxlen: 32
                          2a04:5b87:1::/48 maxlen: 48
                          2a04:5b84:1::/48 maxlen: 48
                          2a04:5b81:2010::/44 maxlen: 44
                          2a04:5b82::/44 maxlen: 44
                          2a04:5b81:2050::/44 maxlen: 48
                          2a04:5b82:8::/48 maxlen: 48
                          2a04:5b80:300::/48 maxlen: 48
                          2a04:5b80::/48 maxlen: 48
                          2a04:5b80:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139850418 (0x855f2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
        Validity
            Not Before: Jan  1 12:02:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d97c633bbe4bbfe0c45d1d9685a3e469bec74fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:47:ac:4d:19:4c:07:cc:86:a6:7f:f0:e7:
                    18:0b:6f:9c:f4:94:e3:3e:40:24:8a:2d:f5:bf:6c:
                    ce:df:3d:dd:46:85:cb:d2:03:70:19:27:18:6f:87:
                    d8:6b:40:33:e4:a8:80:7c:4a:8b:b2:81:90:b0:ad:
                    f8:02:49:ea:ff:78:e1:da:52:24:fc:e5:84:b1:61:
                    3d:16:2d:83:a5:36:0b:65:1e:48:0a:dd:26:76:1d:
                    e6:4c:ae:e5:da:e1:e6:4f:ce:62:40:40:67:b7:22:
                    a3:38:4e:f2:75:75:f4:24:55:1e:c0:6b:dd:2e:fa:
                    97:7f:55:64:b5:78:bf:d5:01:79:10:47:4b:c7:8b:
                    7d:c1:23:fb:0f:03:d5:54:e1:4f:fa:5b:c4:39:07:
                    c5:22:bb:55:d7:e7:84:84:35:36:ab:47:d5:de:11:
                    38:b0:6b:bf:64:64:13:8e:e0:a0:13:8e:28:8d:16:
                    21:0b:02:38:4c:34:5f:51:cb:20:72:f7:e0:b4:76:
                    a1:e8:e0:d1:7c:34:36:01:a1:d5:46:da:e1:01:10:
                    57:cb:7e:47:89:d9:74:04:e9:a1:3c:3f:a1:d8:39:
                    f6:94:5c:69:05:25:93:0c:92:4c:7e:36:ae:7f:34:
                    d5:2b:92:02:0d:37:3a:5c:98:03:99:10:fc:5a:3d:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:97:C6:33:BB:E4:BB:FE:0C:45:D1:D9:68:5A:3E:46:9B:EC:74:FB
            X509v3 Authority Key Identifier:
                keyid:FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/bZfGM7vku_4MRdHZaFo-RpvsdPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.160.0/23
                IPv6:
                  2a04:5b80::/48
                  2a04:5b80:53::/48
                  2a04:5b80:200::/48
                  2a04:5b80:300::/48
                  2a04:5b81:1000::/40
                  2a04:5b81:1fff::/48
                  2a04:5b81:2010::/44
                  2a04:5b81:2050::/44
                  2a04:5b82::/32
                  2a04:5b84:1::/48
                  2a04:5b87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:20:c3:cd:96:08:9b:26:e2:3b:b4:4b:de:57:f2:cf:6f:
         ad:9c:29:db:06:23:72:c8:52:5c:13:83:27:b8:5e:06:47:a6:
         bb:ca:46:cb:a3:da:30:93:9b:dd:fa:5f:1e:3d:5f:fe:c7:32:
         d2:eb:d5:61:0e:08:a8:d1:83:6f:4a:88:e8:b1:24:65:d1:b8:
         ce:13:32:9b:89:dc:62:63:88:73:88:5a:1b:86:0b:b7:c9:fe:
         c7:2f:d2:f5:b3:c5:42:64:6d:42:f6:bd:b6:c3:46:be:92:7e:
         51:11:ea:d8:88:e0:d7:3a:55:39:d2:f9:a3:48:a6:76:01:64:
         fc:60:56:24:75:61:0e:b0:d5:a1:37:42:b6:c3:2f:f8:29:1e:
         a2:8b:fe:0b:1f:c6:51:ee:71:19:d2:38:7f:69:97:db:68:31:
         fa:23:6c:bd:c3:87:d9:2c:ff:68:26:c8:0e:09:50:ab:65:59:
         9f:68:3c:3c:12:b6:2e:1d:de:ec:41:8b:e5:d8:fd:e9:a3:34:
         4d:7d:51:f4:68:8b:b0:f2:0a:ad:6d:8c:05:a9:fc:e3:94:dc:
         5d:2a:20:a6:c6:e4:c1:f3:24:5e:97:98:b3:6d:b2:61:4e:be:
         83:af:30:70:40:e4:c3:ec:96:54:a7:c9:c1:bd:c8:67:5a:f6:
         71:9f:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----