Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/1-BeWsQERgFijb3xB6ZWWgxgV_Iw.roa
File:                     1-BeWsQERgFijb3xB6ZWWgxgV_Iw.roa (raw, json)
Hash identifier:          SgGIurHQWmxpcTO4RCcXKqdPzHuXf6+Z/2E/rELTqlo=
Subject key identifier:   F8:17:96:B1:01:11:80:58:A3:6F:7C:41:E9:95:96:83:18:15:FC:8C
Certificate issuer:       /CN=285db3930538f3d11a75ee0685849ef037d4c0fb
Certificate serial:       07377726
Authority key identifier: 28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/1-BeWsQERgFijb3xB6ZWWgxgV_Iw.roa
Signing time:             Sat 01 Jan 2022 16:02:07 +0000
ROA not before:           Sat 01 Jan 2022 16:02:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39351
IP address blocks:        45.159.212.0/22 maxlen: 22
                          2a0f:8980::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121075494 (0x7377726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285db3930538f3d11a75ee0685849ef037d4c0fb
        Validity
            Not Before: Jan  1 16:02:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f81796b101118058a36f7c41e99596831815fc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:c6:ca:a8:c9:f7:07:c9:66:a1:77:73:93:
                    ba:40:2a:3e:40:eb:dd:9d:f4:79:a2:23:ec:9f:c1:
                    f5:c5:95:33:59:ae:1a:e6:32:82:7c:8b:03:4b:ea:
                    c0:b3:2d:d8:60:3e:25:23:e2:83:3b:43:b1:bd:10:
                    e4:68:60:a6:0a:d1:78:d6:9c:58:9a:0c:c1:2e:52:
                    eb:3b:74:81:80:f3:fe:03:49:7b:fc:2c:af:1f:51:
                    b8:5a:02:a7:48:b0:34:a2:12:2d:14:40:37:e2:ba:
                    b3:92:13:b7:d7:cc:1f:83:f4:44:a1:1a:03:df:44:
                    61:14:3b:ad:0a:0b:d0:eb:4d:d0:a5:30:54:74:18:
                    82:d3:48:e7:89:10:ed:cb:e1:c2:8f:c3:e1:ff:67:
                    a7:e0:75:2a:5c:93:f9:97:e3:60:ac:bd:a3:ca:2f:
                    a7:ef:4f:1b:e9:fe:41:c4:ab:5c:08:b8:a2:e2:8e:
                    96:74:5a:44:3e:63:92:dc:1d:30:24:17:63:d1:5e:
                    15:b1:bb:41:5f:3a:20:a0:79:fa:6f:55:18:20:00:
                    63:ad:df:52:e1:16:e6:9f:84:3d:ba:f8:c0:46:d1:
                    e9:9d:8e:3d:18:66:a0:e4:a9:8a:0d:68:0d:6d:17:
                    40:a5:26:6a:ed:47:40:94:98:a6:4f:46:13:dc:5a:
                    c8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:17:96:B1:01:11:80:58:A3:6F:7C:41:E9:95:96:83:18:15:FC:8C
            X509v3 Authority Key Identifier:
                keyid:28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/1-BeWsQERgFijb3xB6ZWWgxgV_Iw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.212.0/22
                IPv6:
                  2a0f:8980::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:81:44:a1:1e:cb:2d:b8:0a:0c:6f:41:11:73:2f:87:3a:3e:
         44:d7:e9:b9:3a:67:20:0e:9e:62:83:e8:62:8e:b9:50:a1:d3:
         54:e0:18:26:0b:db:76:75:a0:de:15:40:d8:fd:92:b4:0a:0a:
         42:ac:ff:f7:df:b2:c8:7e:68:03:43:da:29:36:51:e5:84:24:
         c3:c0:fd:71:5c:66:54:b1:fe:84:97:15:26:a5:1e:28:b6:da:
         39:dd:c2:88:73:ff:95:6a:99:fe:92:67:67:a9:b4:59:51:c4:
         1e:e1:ed:13:55:62:ff:15:7c:ea:83:65:f4:7b:96:1b:56:a7:
         3a:43:4d:8f:60:04:c2:2e:0f:93:fe:60:60:5f:25:56:15:f1:
         34:6b:7d:2b:48:5f:b1:59:63:3a:d2:2d:a6:63:f3:bd:21:44:
         1e:a3:77:ab:89:ff:51:0f:6d:a9:13:a0:23:8d:52:73:72:18:
         f1:5b:09:72:fd:e9:4f:7f:67:9c:07:93:32:22:65:3b:d1:e8:
         53:91:81:5e:19:01:72:8e:ef:b1:24:ce:13:c9:6b:92:e7:1a:
         f0:e4:0e:85:76:5c:74:79:ce:f7:4b:ea:ed:50:95:04:13:18:
         fb:bc:70:c8:3b:f8:79:19:80:63:ec:90:ac:81:8a:45:01:f7:
         d9:3a:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----