Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Iu-qmKVeMhZ8VDiD55cG-a2-rsw.roa
File:                     Iu-qmKVeMhZ8VDiD55cG-a2-rsw.roa (raw, json)
Hash identifier:          Bss4xvaRRXHQQ3ffGrSgsexBTRiZKzYDm/vNp3DyJ20=
Subject key identifier:   22:EF:AA:98:A5:5E:32:16:7C:54:38:83:E7:97:06:F9:AD:BE:AE:CC
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       0DA588DC
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Iu-qmKVeMhZ8VDiD55cG-a2-rsw.roa
Signing time:             Sat 01 Jan 2022 08:59:32 +0000
ROA not before:           Sat 01 Jan 2022 08:59:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18994
IP address blocks:        62.73.169.48/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228952284 (0xda588dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 08:59:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22efaa98a55e32167c543883e79706f9adbeaecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c8:c0:46:9f:3c:40:96:3f:c2:c8:e7:83:17:
                    5d:1a:31:c5:b1:04:ac:fd:f3:be:cc:53:ba:51:ec:
                    b4:e6:bc:b2:c2:03:6b:54:15:80:72:7d:53:f9:98:
                    13:bc:57:08:2f:30:d7:1f:93:84:e0:97:a8:7a:7d:
                    ad:fd:03:01:0b:99:26:60:9e:d8:0b:0e:f5:e5:18:
                    94:4f:1b:a9:46:31:65:ad:ec:54:ef:bf:6c:95:f0:
                    b3:84:9e:ab:f0:74:0e:96:ef:0f:e7:00:9e:2e:6c:
                    0d:03:f6:a0:52:7a:9f:fd:8a:55:87:da:08:b6:eb:
                    0a:90:7a:ea:9e:79:22:ab:c3:c8:29:4d:03:e0:ef:
                    cd:d5:05:ac:ef:68:3c:51:52:1f:b3:05:20:70:09:
                    56:3d:5d:2a:f8:5c:bb:cd:0d:80:c5:a0:cd:5e:4b:
                    78:71:b2:a8:58:91:ca:8f:e6:ab:57:e9:e2:22:d3:
                    b6:85:5d:e9:91:71:10:5e:dc:d1:01:54:fe:9e:e0:
                    49:6b:73:19:13:5a:fb:92:54:07:4a:91:e2:d9:4d:
                    5d:45:12:29:47:96:c1:4a:ed:a9:b4:4b:97:9c:ab:
                    c4:1d:80:94:d8:8d:8f:ca:37:f4:fd:a2:ec:fb:8b:
                    02:8b:62:52:aa:f3:9a:29:0c:af:cf:a0:c2:0b:59:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EF:AA:98:A5:5E:32:16:7C:54:38:83:E7:97:06:F9:AD:BE:AE:CC
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Iu-qmKVeMhZ8VDiD55cG-a2-rsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.73.169.48/29

    Signature Algorithm: sha256WithRSAEncryption
         4b:08:74:29:61:55:36:50:f1:95:df:5d:34:48:66:ea:bc:d3:
         f9:68:3b:63:0d:9a:af:85:a8:0a:02:37:cf:b9:74:7c:8b:c1:
         e1:a3:d4:8a:ed:53:51:40:47:79:fe:ac:47:5f:55:c6:87:49:
         2d:97:02:e9:09:ce:0f:26:7d:3e:b0:a7:38:0d:67:e9:7b:93:
         9a:93:23:71:1f:09:57:1b:e1:8b:24:ec:da:3e:9c:5f:db:38:
         a5:f2:cb:a4:88:1f:e5:e9:7e:e1:d3:90:81:12:e4:40:77:08:
         9e:f3:b2:b3:4a:db:cd:b6:af:9e:08:e8:51:99:ac:3a:4b:3c:
         a4:c4:09:87:0b:df:69:d8:f3:8f:78:db:de:4d:95:1a:17:ea:
         ae:07:16:8a:5b:44:04:80:50:b4:86:1a:99:d9:4b:92:a1:0d:
         9f:f7:b6:85:21:e1:18:51:26:02:dc:75:e4:1f:9f:50:93:00:
         b5:34:df:9b:cb:f7:35:a4:1e:44:cc:23:4e:75:f2:ba:30:f2:
         b9:ed:34:ea:34:fa:5c:aa:7d:00:bc:c7:86:4f:5a:c6:8e:d2:
         89:17:f3:2a:dc:3f:8b:d1:50:7e:b9:3d:ed:4f:a3:9e:d5:a8:
         6e:56:c0:f4:13:55:ba:47:ad:d6:4f:66:95:96:13:5a:83:00:
         38:cd:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----