Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/7d_rydIbugPGmAkBnor3Z4a5kwc.roa
File:                     7d_rydIbugPGmAkBnor3Z4a5kwc.roa (raw, json)
Hash identifier:          obj/gIaJDFbGl3EDxZoY+lgVMmEy6lqbFKzPvSuGQsY=
Subject key identifier:   ED:DF:EB:C9:D2:1B:BA:03:C6:98:09:01:9E:8A:F7:67:86:B9:93:07
Certificate issuer:       /CN=450f9ed05fe03f38cfa53d6a85db3b79bffe8c91
Certificate serial:       04FF2721
Authority key identifier: 45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/7d_rydIbugPGmAkBnor3Z4a5kwc.roa
Signing time:             Sat 01 Jan 2022 05:57:41 +0000
ROA not before:           Sat 01 Jan 2022 05:57:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3257
IP address blocks:        45.132.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83830561 (0x4ff2721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450f9ed05fe03f38cfa53d6a85db3b79bffe8c91
        Validity
            Not Before: Jan  1 05:57:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eddfebc9d21bba03c69809019e8af76786b99307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:f2:9d:23:5b:64:1b:d3:00:3d:a1:8d:61:
                    a3:2f:27:78:9c:b3:bc:13:d9:72:2f:5c:00:c8:eb:
                    02:40:70:01:7b:18:cd:bf:61:1e:d4:a1:84:2d:95:
                    e8:21:70:36:bd:9c:18:51:79:64:55:dd:b5:58:91:
                    3c:57:ff:23:9d:bd:a9:3a:6a:07:da:55:95:14:22:
                    02:08:3e:d2:9d:8c:5d:07:03:40:32:6c:32:34:14:
                    d9:52:8a:6a:05:e8:e3:71:f9:92:3b:97:1e:03:41:
                    71:50:44:0a:77:fa:a3:a2:14:61:32:36:59:4c:48:
                    eb:d8:be:34:43:5a:88:a9:42:54:fc:7e:1b:fc:f9:
                    dc:8a:62:f6:8e:8c:2b:f2:d5:d6:ee:86:95:b4:23:
                    4f:fb:f6:2e:c5:0e:41:68:a6:0f:ab:0e:32:a5:73:
                    5d:eb:b1:02:fd:b9:64:dd:b0:37:ad:e0:d7:44:8b:
                    9d:93:54:74:f6:54:82:c9:75:5d:54:1c:80:f8:30:
                    07:61:eb:ec:b2:ab:c4:37:1f:d4:95:9c:13:86:f1:
                    e6:b3:5c:35:94:59:ea:1b:99:a7:68:a2:d6:15:48:
                    9e:e9:53:2a:f6:fc:a9:18:be:e0:e2:1a:2c:99:8b:
                    68:1d:a1:1f:12:4c:e0:f1:f7:5a:db:01:83:e4:12:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DF:EB:C9:D2:1B:BA:03:C6:98:09:01:9E:8A:F7:67:86:B9:93:07
            X509v3 Authority Key Identifier:
                keyid:45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/7d_rydIbugPGmAkBnor3Z4a5kwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/RQ-e0F_gPzjPpT1qhds7eb_-jJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:b4:46:65:b5:dd:d7:9c:79:8d:2d:d2:ac:df:ed:af:c6:5b:
         65:1b:52:df:29:3b:be:c6:d1:ad:fb:2e:19:fe:ef:c9:58:7b:
         11:49:1b:1e:00:cf:cc:fa:bd:74:55:ec:57:5b:59:2e:48:de:
         ca:53:a5:92:d5:0c:e2:8a:80:b3:e1:13:5d:e5:92:4a:fc:d2:
         2a:c8:3c:f3:1b:1c:d5:27:a2:10:de:d5:b5:78:64:37:c5:ad:
         44:14:52:8b:e7:69:cf:03:e5:94:3b:07:a1:37:8e:82:04:72:
         fb:2d:ef:94:ed:bc:79:74:2d:52:a1:6b:b2:1e:18:bf:b7:22:
         67:b5:53:32:0a:42:db:c3:96:b7:98:e4:77:2f:d6:ea:6a:6c:
         5f:b1:7c:4f:98:58:8b:b6:74:ff:d5:cc:3c:13:9e:d7:18:6d:
         e3:52:e4:d1:1b:9f:22:ad:c8:07:46:3b:24:23:e8:de:60:63:
         99:4a:b9:c0:0b:cf:72:3f:81:c6:d2:32:ce:88:d9:e8:7b:1d:
         69:3d:6c:8b:43:72:4a:d2:4f:e1:de:5b:e4:7c:8b:7a:85:f8:
         c8:c0:f7:8d:a4:c3:04:58:99:91:51:ba:b8:3c:e3:c3:1f:bb:
         e3:d3:e9:43:ad:2e:3c:fd:17:08:9f:03:24:28:ae:a4:2e:3c:
         0c:09:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----