Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/kq6InCJJKDGXEybI9mOViOstyC8.roa
File:                     kq6InCJJKDGXEybI9mOViOstyC8.roa (raw, json)
Hash identifier:          MA6G3QMUikDtblqC7idA+4VYrp7PQs2CjxwQJzw0n20=
Subject key identifier:   92:AE:88:9C:22:49:28:31:97:13:26:C8:F6:63:95:88:EB:2D:C8:2F
Certificate issuer:       /CN=826f8bc1ec4e4dfc02eecc2de4a9edcc4697a3bd
Certificate serial:       01856C9CA080C19B4468B3AA6DE9EEE15E95
Authority key identifier: 82:6F:8B:C1:EC:4E:4D:FC:02:EE:CC:2D:E4:A9:ED:CC:46:97:A3:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gm-LwexOTfwC7swt5KntzEaXo70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/kq6InCJJKDGXEybI9mOViOstyC8.roa
Signing time:             Sun 01 Jan 2023 09:14:42 +0000
ROA not before:           Sun 01 Jan 2023 09:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208162
IP address blocks:        45.149.236.0/22 maxlen: 22
                          2a0f:7e00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:9c:a0:80:c1:9b:44:68:b3:aa:6d:e9:ee:e1:5e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826f8bc1ec4e4dfc02eecc2de4a9edcc4697a3bd
        Validity
            Not Before: Jan  1 09:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92ae889c22492831971326c8f6639588eb2dc82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:37:c9:98:70:3f:68:55:48:0f:20:20:9e:
                    3a:f6:09:2e:49:07:39:69:94:cc:79:8b:7d:80:5b:
                    f4:66:8e:9d:22:1a:b3:13:cf:b7:2a:d5:ec:fd:e1:
                    52:cd:33:83:0e:47:36:e7:2b:9e:fe:04:56:d0:d7:
                    77:4b:88:71:db:b0:17:1f:a2:ae:13:87:9b:1d:d4:
                    25:78:41:f3:86:87:39:73:76:31:04:c2:cc:2e:eb:
                    35:42:84:fe:59:60:80:2d:4e:82:25:78:05:51:4e:
                    f3:25:c6:5a:6d:f5:68:6f:05:ec:a8:d2:21:f8:31:
                    d0:02:6c:cc:e4:63:81:57:e1:29:44:7b:0d:2c:2e:
                    20:b0:49:a6:e6:21:8f:0d:e0:69:0e:52:52:17:a9:
                    9c:85:b3:8c:d1:ed:de:44:93:17:dd:eb:bc:34:dd:
                    0e:55:4d:5c:02:23:bb:1a:16:4d:52:32:8d:4e:58:
                    5d:d8:64:b4:f4:f1:48:c8:ec:1b:54:c7:b2:df:8a:
                    f0:99:3a:c6:e7:f2:09:4e:9d:da:7c:12:11:f3:93:
                    36:be:b4:57:ef:03:d9:23:a9:5f:5f:ed:2c:c7:12:
                    b3:af:7b:d4:06:40:98:f8:2a:15:a5:a4:ee:ce:43:
                    97:ba:2f:bc:74:c2:da:50:4f:a2:8c:97:ab:89:6f:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AE:88:9C:22:49:28:31:97:13:26:C8:F6:63:95:88:EB:2D:C8:2F
            X509v3 Authority Key Identifier:
                keyid:82:6F:8B:C1:EC:4E:4D:FC:02:EE:CC:2D:E4:A9:ED:CC:46:97:A3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm-LwexOTfwC7swt5KntzEaXo70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/kq6InCJJKDGXEybI9mOViOstyC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/gm-LwexOTfwC7swt5KntzEaXo70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.236.0/22
                IPv6:
                  2a0f:7e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:8c:20:d8:1f:fa:56:1d:e2:73:5c:6f:25:21:4f:70:82:59:
         db:db:e2:93:d1:06:8a:06:83:a3:b2:c3:73:9a:72:64:6b:89:
         09:3a:5f:8d:dc:5b:a3:d2:c2:26:93:98:74:72:42:41:4b:48:
         fd:d9:a4:e4:3a:14:b4:0d:d9:21:0e:0b:07:d5:40:77:ef:69:
         d8:ba:38:87:63:14:d0:5a:8f:a9:8e:55:e0:bd:f0:6e:fb:4d:
         16:7f:b5:43:9d:80:cc:bd:05:66:c4:e3:b0:3f:3a:f0:d0:1a:
         0e:6c:30:53:5d:db:1b:3a:c7:4a:8d:22:cf:97:ed:cd:d1:b7:
         03:6d:5e:19:e7:36:37:70:99:b8:06:7b:66:c1:2c:cf:24:80:
         f5:00:8b:1c:5b:68:a9:89:3a:54:69:98:92:d1:66:28:7e:73:
         ed:69:5f:00:d7:95:47:40:3c:89:02:3b:4c:43:da:73:0d:1d:
         2f:ee:62:e5:b5:b4:2a:e0:b8:3f:6d:98:df:4c:36:21:f1:b0:
         13:ce:b3:ce:bc:4b:6c:70:8f:bf:3f:79:1f:d8:51:c5:4e:27:
         87:e6:03:e7:94:47:cf:18:ee:d5:d9:7f:2e:e0:0e:7a:0a:86:
         42:fa:7e:cc:5d:8c:21:08:c6:19:a1:40:f1:12:9f:8b:1a:ca:
         37:7f:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----