Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SjWdVvYXINmbcTOG1bEKYOGak7s.roa
File:                     SjWdVvYXINmbcTOG1bEKYOGak7s.roa (raw, json)
Hash identifier:          jZQnxuJkGnVyRUXqjfz8Tb0ZsQn5vh9i4x4Gz+lKVFc=
Subject key identifier:   4A:35:9D:56:F6:17:20:D9:9B:71:33:86:D5:B1:0A:60:E1:9A:93:BB
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       046E357E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SjWdVvYXINmbcTOG1bEKYOGak7s.roa
Signing time:             Thu 19 May 2022 20:40:29 +0000
ROA not before:           Thu 19 May 2022 20:40:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        45.146.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74331518 (0x46e357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: May 19 20:40:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a359d56f61720d99b713386d5b10a60e19a93bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:40:82:27:d3:49:fb:e9:77:91:58:9c:ec:
                    16:43:04:31:7b:f3:05:1a:20:91:2b:e7:0e:29:b8:
                    c1:7f:73:e3:8a:0b:ff:be:8f:0a:5f:80:f6:be:75:
                    f4:2f:77:da:98:57:de:9f:7a:a6:76:24:66:68:dc:
                    ab:68:a8:7c:56:ef:61:33:db:a8:26:f0:c1:bb:72:
                    48:1f:e8:f8:93:12:a2:5a:3a:66:45:d4:86:c4:80:
                    0b:d2:64:d4:d8:29:ca:d9:42:36:70:6d:94:78:aa:
                    55:c9:58:e6:fa:92:69:46:2f:70:94:d2:1d:9c:84:
                    9a:25:02:91:55:44:3d:2f:45:73:c3:4c:26:fb:8d:
                    c5:38:0b:56:b1:31:22:55:7b:3c:8a:31:75:fb:27:
                    c0:5c:59:5c:b4:62:ff:69:a6:b4:23:7f:34:e8:ad:
                    62:1c:2d:db:04:9c:10:36:8b:bf:d3:c8:d8:63:a7:
                    8c:a9:a4:7c:16:d2:22:a4:27:f7:e9:56:67:fb:9f:
                    44:de:2f:2c:44:0b:e7:15:13:7f:d1:dd:06:78:bf:
                    52:de:be:7e:5b:9f:97:9a:19:3e:f7:d3:b0:59:45:
                    1c:7b:bb:d8:5e:50:54:c2:22:90:6c:e0:a5:1c:8b:
                    b7:25:63:83:dd:d3:91:05:05:22:d9:9b:3e:07:a3:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:35:9D:56:F6:17:20:D9:9B:71:33:86:D5:B1:0A:60:E1:9A:93:BB
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SjWdVvYXINmbcTOG1bEKYOGak7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:01:be:d1:85:6d:a7:ac:1f:d5:c1:8c:ab:10:98:b0:12:f6:
         52:80:46:c3:23:37:15:d7:89:0a:7f:c5:3e:a7:0d:fb:a8:ca:
         c0:9f:52:d3:04:f9:b4:f9:04:97:6b:b1:1e:01:f7:82:fa:54:
         e8:89:67:28:28:90:5d:aa:c3:0d:4e:83:8a:b0:0e:b1:18:4f:
         bf:99:65:8f:54:56:da:b6:ee:ee:3c:7f:69:76:45:4d:cc:9f:
         0c:e2:28:63:89:65:76:31:81:90:3f:ce:80:0c:85:fa:d5:59:
         0f:ab:e3:f8:82:b5:59:55:70:1b:37:70:21:40:c6:9f:f1:f3:
         f4:72:74:47:ee:58:c1:55:a1:3b:03:52:75:64:b4:34:e6:cc:
         be:8f:44:d8:67:63:75:1a:ba:5d:fb:19:b8:51:7b:6e:8d:ab:
         4f:a1:47:03:2c:2f:10:c4:e3:00:fc:70:82:44:b7:4b:c9:0e:
         7f:d1:c2:19:88:75:7b:8f:1d:30:ff:87:37:dd:be:43:c2:d4:
         49:b2:b4:da:e5:21:16:1c:f9:fd:ba:37:32:e7:82:ad:bd:26:
         68:6b:55:f6:a0:c2:45:7e:5f:77:a2:a3:e2:1b:c6:f9:25:5c:
         87:02:bf:40:ec:ca:73:fd:b3:fe:ec:8d:82:1c:9f:88:89:f5:
         24:19:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----