Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Mc-czyAg4xh6qdAoMVuXfL3TliQ.roa
File:                     Mc-czyAg4xh6qdAoMVuXfL3TliQ.roa (raw, json)
Hash identifier:          XE7U/7aA4DrkxZ24H/DO3NaKOMBTFma9wPzDGJYIllg=
Subject key identifier:   31:CF:9C:CF:20:20:E3:18:7A:A9:D0:28:31:5B:97:7C:BD:D3:96:24
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       01856F022678FB247E5D4A357ED4AB687F17
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Mc-czyAg4xh6qdAoMVuXfL3TliQ.roa
Signing time:             Sun 01 Jan 2023 20:24:49 +0000
ROA not before:           Sun 01 Jan 2023 20:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46746
IP address blocks:        82.112.107.0/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:26:78:fb:24:7e:5d:4a:35:7e:d4:ab:68:7f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 20:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=31cf9ccf2020e3187aa9d028315b977cbdd39624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:4c:af:ea:95:a7:f0:80:25:c5:57:44:c0:
                    9c:ef:46:4d:4a:3e:1d:03:57:d2:ab:44:75:82:b0:
                    fe:9e:d6:5a:3a:87:df:22:40:5d:0f:ff:8b:06:a6:
                    13:1d:f1:d6:f4:a1:60:c2:db:ab:37:2c:be:0b:ee:
                    16:00:4a:c2:c3:48:1c:16:fa:e4:4c:bc:de:84:d9:
                    0b:1e:49:4a:f0:6a:af:98:13:b0:30:7d:b5:37:27:
                    96:bd:dc:9a:0e:8e:db:a4:0c:3d:5a:e5:64:b5:7f:
                    67:25:39:1b:22:c5:25:26:ea:cd:41:39:c3:e7:99:
                    84:4f:a8:a7:38:79:87:70:b7:36:46:a9:c4:85:32:
                    26:b0:c3:58:c3:a8:f9:36:8e:be:5d:56:cd:16:21:
                    9c:fe:8c:df:6c:3f:12:26:0a:27:cb:25:69:11:98:
                    20:22:57:67:cd:28:50:27:ff:7e:8d:a2:ca:fc:e4:
                    97:aa:96:29:b8:a8:4a:90:f8:f4:24:5d:c2:5b:ba:
                    5c:00:94:f3:57:61:af:22:fe:af:f1:98:73:db:c8:
                    67:d8:95:c9:de:77:6d:03:23:cc:64:31:5b:03:29:
                    59:1d:2a:b9:d3:e0:bd:14:de:2e:6b:8e:af:c6:4f:
                    21:50:c7:a1:e0:9d:90:69:ca:7e:34:1f:ee:56:4e:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:9C:CF:20:20:E3:18:7A:A9:D0:28:31:5B:97:7C:BD:D3:96:24
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Mc-czyAg4xh6qdAoMVuXfL3TliQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.112.107.0/28

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:a1:c9:03:3d:bc:12:46:33:6a:9a:7a:98:98:d5:68:b1:
         d1:ad:3d:4f:ec:99:bf:25:ff:27:b0:94:17:2f:6e:1a:42:13:
         49:05:cd:0e:14:98:11:f2:97:fc:ce:3a:5f:82:f5:ee:95:5c:
         29:f4:94:cb:ca:9c:99:6c:d9:06:09:13:7a:a7:8f:e6:5b:2d:
         f4:25:93:77:aa:12:a6:80:c6:ee:9d:02:03:dd:7a:5d:22:3f:
         f1:e3:e2:b9:b4:19:00:e1:37:15:6e:5a:eb:01:8f:82:8f:f0:
         58:c8:e7:dd:19:e2:35:ce:28:a6:9c:72:71:fa:64:e7:68:74:
         db:42:af:10:75:d0:8e:c2:ed:f2:32:cb:7f:82:99:0d:5b:3b:
         ee:34:f9:be:3e:20:8f:88:80:c4:dd:c7:18:ea:11:11:55:cf:
         28:6e:a9:ee:5a:1b:76:db:9b:d2:77:9e:eb:c5:bd:4a:e6:42:
         be:3e:36:ec:58:fa:cb:de:9d:ad:94:67:e2:da:c9:57:d4:1f:
         60:2d:00:d4:6e:8f:65:4e:c4:9a:cf:30:4b:3f:e3:86:a3:dd:
         d1:0c:99:f2:83:5d:61:e4:dc:9e:55:cc:20:40:b5:0e:ab:77:
         0a:b1:0f:bc:e2:80:ef:3f:a8:fc:8d:6d:fb:1a:30:ba:47:00:
         a6:db:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----