Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/MmDZuh4wp1CyVcsK7gI2IEYcT-Q.roa
File:                     MmDZuh4wp1CyVcsK7gI2IEYcT-Q.roa (raw, json)
Hash identifier:          bHMTvjer3nLdKcAYo9UbCLnRo/Kt4a5HZgCXvrbj/Yo=
Subject key identifier:   32:60:D9:BA:1E:30:A7:50:B2:55:CB:0A:EE:02:36:20:46:1C:4F:E4
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       0DA54181
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/MmDZuh4wp1CyVcsK7gI2IEYcT-Q.roa
Signing time:             Sat 01 Jan 2022 08:59:31 +0000
ROA not before:           Sat 01 Jan 2022 08:59:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:728:1808::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228934017 (0xda54181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 08:59:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3260d9ba1e30a750b255cb0aee023620461c4fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:21:a0:bd:ac:78:ff:38:af:36:b6:c5:e6:
                    e2:b1:f6:a9:64:c4:8f:f8:95:5a:2d:6f:c4:08:17:
                    4d:97:0c:79:c3:8f:07:ab:3d:71:fa:70:0c:aa:ac:
                    10:d2:49:d3:9d:93:58:c6:68:14:f9:90:6a:29:44:
                    96:26:69:87:85:2a:98:00:9b:a2:3a:6f:f6:0b:fb:
                    db:9f:65:d6:86:0e:9e:7e:7f:24:79:71:64:4b:13:
                    bf:f3:6a:67:f1:9d:8f:54:db:4e:17:17:06:39:c0:
                    20:b2:0b:1d:69:73:f1:78:bd:4f:12:b3:fd:a4:aa:
                    a3:b4:28:c3:57:2f:a5:90:66:1e:df:83:5d:28:ba:
                    6e:e1:0a:8c:35:7d:d3:09:02:cc:c6:ae:a1:15:bf:
                    f7:4c:63:4c:f9:c8:20:e0:11:cd:f7:ca:9c:82:1f:
                    f2:88:5b:87:8a:ab:c6:0d:be:91:f2:ff:6e:9a:98:
                    3a:f0:39:40:2a:bd:66:96:56:12:c1:b1:f4:f9:ab:
                    87:3b:6a:9b:99:4a:95:03:08:44:b6:cf:2a:ab:c3:
                    5e:ab:4a:63:c1:32:15:7d:b0:b7:0b:bd:d8:bb:9f:
                    31:85:f0:6f:6f:db:05:1c:8c:fb:4f:4f:86:be:b8:
                    43:f5:87:00:49:12:39:c7:95:82:d1:18:c5:00:3d:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:D9:BA:1E:30:A7:50:B2:55:CB:0A:EE:02:36:20:46:1C:4F:E4
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/MmDZuh4wp1CyVcsK7gI2IEYcT-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:728:1808::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:c2:99:13:21:ef:65:35:6b:9e:d7:a1:f3:2f:f9:7a:bb:00:
         5a:8c:96:68:96:f2:81:de:c9:44:88:a0:01:0b:f0:3f:8c:10:
         ac:e3:47:e9:84:a1:1a:c8:39:24:3e:a0:39:fa:8b:53:32:03:
         24:b8:9d:5d:13:d9:63:26:cf:da:60:6e:8e:fe:e7:8d:60:4f:
         8a:94:28:1d:0f:85:a1:4c:9c:4d:b0:f4:5f:13:68:a3:42:d1:
         9b:a4:13:36:6b:bd:2a:ff:2b:54:02:ff:1c:2c:9d:aa:a1:72:
         2c:eb:8f:58:04:91:3b:a5:19:96:08:14:c9:e3:0f:92:12:73:
         7c:23:0d:1d:c3:33:5f:26:cd:0f:43:69:c3:a3:3e:b0:d0:15:
         60:0e:dc:e3:e7:c7:dd:a1:e1:fb:d5:0a:34:21:03:97:a7:3d:
         c6:ae:d6:47:97:10:10:de:b0:e3:e2:45:01:1e:74:3a:ba:33:
         39:21:ff:88:d9:1d:56:67:6e:a5:a2:15:61:16:16:91:21:f6:
         57:99:62:e0:93:1a:c2:53:0c:c0:3b:87:b4:b4:26:97:f6:e5:
         39:5d:46:33:02:7b:69:05:fa:5a:78:3a:3a:d5:79:7d:cc:56:
         36:95:dc:03:68:f0:88:71:83:b3:d7:0b:f8:c2:15:cf:9d:5a:
         0b:54:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----