Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/qjKdRlCSeh9D0ND6p6IC1Jde72w.roa
File:                     qjKdRlCSeh9D0ND6p6IC1Jde72w.roa (raw, json)
Hash identifier:          AndFCcmP3tHP8TmSuoAxtX1q5dA3wqH7PoGoY1bvr2Y=
Subject key identifier:   AA:32:9D:46:50:92:7A:1F:43:D0:D0:FA:A7:A2:02:D4:97:5E:EF:6C
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       0DB13A7F
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/qjKdRlCSeh9D0ND6p6IC1Jde72w.roa
Signing time:             Sat 01 Jan 2022 08:59:37 +0000
ROA not before:           Sat 01 Jan 2022 08:59:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     394808
IP address blocks:        83.231.150.192/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229718655 (0xdb13a7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 08:59:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa329d4650927a1f43d0d0faa7a202d4975eef6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:ed:3b:31:ab:33:44:7b:ea:85:db:5a:36:
                    3b:d4:a0:96:a6:f4:94:44:19:94:5b:ed:48:7b:63:
                    45:57:8d:cc:41:b1:84:cf:ff:8e:7f:91:05:57:bd:
                    b2:a2:0c:3f:39:58:58:99:eb:43:bd:c2:6d:ae:5f:
                    ab:8e:2e:03:bf:a1:d0:2a:46:6b:a0:7e:1d:b5:73:
                    eb:87:20:38:21:29:45:90:41:2a:7e:a6:0a:d6:20:
                    d7:d2:7f:1d:fa:9c:2b:40:1d:9b:d3:a8:b5:1f:49:
                    c2:31:3f:43:9d:a4:2d:58:04:0c:4c:cd:f8:b9:ec:
                    d5:53:26:c3:e1:02:1d:47:e4:21:2e:6d:8c:0e:40:
                    c8:96:54:f4:a6:2b:57:25:c2:9b:bb:00:5b:ea:15:
                    9d:03:e1:59:c5:fa:e7:8a:94:50:c6:73:0c:c7:97:
                    bc:ca:f4:fa:22:86:8a:b4:a1:97:6e:1a:3a:71:de:
                    33:91:f5:56:66:02:2f:e6:bf:bc:77:cf:a9:00:44:
                    ac:4c:d5:ee:92:a5:3a:3b:da:3c:f5:18:4e:13:d7:
                    c5:92:ae:7b:98:10:6a:c0:47:1c:22:29:53:fd:d8:
                    01:13:e4:d9:4f:c7:e0:bd:26:5e:3a:40:0a:9e:bd:
                    a6:cc:f7:c5:1c:da:cb:73:ea:bd:5f:90:10:6a:20:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:32:9D:46:50:92:7A:1F:43:D0:D0:FA:A7:A2:02:D4:97:5E:EF:6C
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/qjKdRlCSeh9D0ND6p6IC1Jde72w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.231.150.192/27

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:eb:ae:ac:c2:ac:8c:59:ad:e5:c5:c4:da:bb:23:22:dd:
         da:5d:8b:15:de:63:90:8b:1b:da:00:c4:3c:2a:ea:98:8c:11:
         de:fc:5b:9f:fc:22:18:ee:be:32:06:61:c8:56:4a:c2:5f:e5:
         c1:bf:d3:82:3f:73:af:23:b2:3f:6a:36:eb:55:18:fd:70:f2:
         77:1f:9b:db:ec:80:0c:fc:11:73:37:61:e4:cb:72:65:39:d4:
         cf:4c:ff:a6:f2:8e:84:f8:33:ec:ad:9b:26:c4:08:17:7c:da:
         bb:7b:71:89:05:1c:14:21:fe:a1:b9:1c:68:44:ad:40:13:b5:
         74:02:6f:cd:b6:d3:b1:33:30:91:1b:07:b2:09:57:ac:13:ff:
         b2:15:6b:f4:a7:98:13:fd:ba:f0:46:0c:44:c4:f2:7e:63:15:
         72:78:28:f6:be:fc:ad:00:29:37:14:82:be:d7:c4:ea:69:1d:
         5d:9c:99:78:89:08:10:91:89:dd:c3:7c:f1:5f:aa:71:2c:2c:
         bb:c5:b9:4a:8b:e2:3e:99:8f:9a:95:e9:96:7d:94:5f:c9:67:
         d8:a7:b2:f1:24:cb:d4:54:88:89:c3:96:fb:a2:bd:24:a7:bc:
         3f:5c:17:d2:1a:f0:88:69:68:8c:ca:4e:e1:48:74:28:f3:d0:
         78:de:ea:f6
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEDbE6fzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWRhYjUwN2MwODk3NmNjMjlkMTc3MzczZGU2MjdhMWNlODZlZmFlMB4XDTIyMDEw
MTA4NTkzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWEzMjlkNDY1MDky
N2ExZjQzZDBkMGZhYTdhMjAyZDQ5NzVlZWY2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMut7TsxqzNEe+qF21o2O9Sglqb0lEQZlFvtSHtjRVeNzEGx
hM//jn+RBVe9sqIMPzlYWJnrQ73Cba5fq44uA7+h0CpGa6B+HbVz64cgOCEpRZBB
Kn6mCtYg19J/HfqcK0Adm9OotR9JwjE/Q52kLVgEDEzN+Lns1VMmw+ECHUfkIS5t
jA5AyJZU9KYrVyXCm7sAW+oVnQPhWcX654qUUMZzDMeXvMr0+iKGirShl24aOnHe
M5H1VmYCL+a/vHfPqQBErEzV7pKlOjvaPPUYThPXxZKue5gQasBHHCIpU/3YARPk
2U/H4L0mXjpACp69psz3xRzay3PqvV+QEGogFGUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSqMp1GUJJ6H0PQ0PqnogLUl17vbDAfBgNVHSMEGDAWgBRF2rUHwIl2zCnR
dzc95iehzobvrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JkcTFCOENKZHN3cDBYYzNQZVlub2M2Rzc2NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvOWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8x
L3FqS2RSbENTZWg5RDBORDZwNklDMUpkZTcydy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
OWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8xL1JkcTFCOENKZHN3
cDBYYzNQZVlub2M2Rzc2NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBVPnlsAwDQYJKoZIhvcNAQELBQAD
ggEBAFKc666swqyMWa3lxcTauyMi3dpdixXeY5CLG9oAxDwq6piMEd78W5/8Ihju
vjIGYchWSsJf5cG/04I/c68jsj9qNutVGP1w8ncfm9vsgAz8EXM3YeTLcmU51M9M
/6byjoT4M+ytmybECBd82rt7cYkFHBQh/qG5HGhErUATtXQCb82207EzMJEbB7IJ
V6wT/7IVa/SnmBP9uvBGDETE8n5jFXJ4KPa+/K0AKTcUgr7XxOppHV2cmXiJCBCR
id3DfPFfqnEsLLvFuUqL4j6Zj5qV6ZZ9lF/JZ9insvEky9RUiInDlvuivSSnvD9c
F9Ia8IhpaIzKTuFIdCjz0Hje6vY=
-----END CERTIFICATE-----