Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/xE_YLf5t7GIfhkGXRyRaUN4UMMU.roa
File:                     xE_YLf5t7GIfhkGXRyRaUN4UMMU.roa (raw, json)
Hash identifier:          fm3MQFPXoMfQ+guFg14qqD+JpUjHAPmi14ViHza35mQ=
Subject key identifier:   C4:4F:D8:2D:FE:6D:EC:62:1F:86:41:97:47:24:5A:50:DE:14:30:C5
Certificate issuer:       /CN=2686d7e106b130ba85788dac3734cb628b139c49
Certificate serial:       01856E266AEF789C8FB609CD638141DE39F1
Authority key identifier: 26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/xE_YLf5t7GIfhkGXRyRaUN4UMMU.roa
Signing time:             Sun 01 Jan 2023 16:24:49 +0000
ROA not before:           Sun 01 Jan 2023 16:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     23031
IP address blocks:        45.13.8.0/22 maxlen: 22
                          2a0e:cd00::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:6a:ef:78:9c:8f:b6:09:cd:63:81:41:de:39:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2686d7e106b130ba85788dac3734cb628b139c49
        Validity
            Not Before: Jan  1 16:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c44fd82dfe6dec621f86419747245a50de1430c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:97:76:10:80:c6:32:c0:07:a9:3e:0a:08:fb:
                    07:18:15:23:20:7a:60:74:45:de:41:2a:2f:b7:98:
                    52:2f:3c:bf:2d:72:50:40:70:c8:b4:70:ef:ec:3d:
                    5f:61:c0:3b:bf:aa:88:e3:68:61:e3:87:f2:8a:20:
                    13:2b:21:a6:ac:37:f3:3f:8d:4b:c5:b2:f4:70:8a:
                    55:4f:75:5f:a1:ca:6c:c1:3b:db:13:2d:35:48:87:
                    b7:fd:c6:49:0e:2a:08:6b:3c:ef:d2:a0:c8:bc:38:
                    6a:ec:0c:f8:fa:16:04:bf:5c:61:bf:51:c7:e0:e7:
                    97:79:76:ac:cd:64:fa:f8:9a:d2:49:9b:2b:42:ce:
                    04:0b:08:bd:c8:f4:25:bb:8b:b0:3d:a7:99:c5:b6:
                    e4:2a:d5:f7:67:24:ab:72:ab:34:8f:4e:05:27:35:
                    2b:cf:b2:d6:70:b8:87:39:ae:ae:e9:be:75:6e:e3:
                    61:d4:4f:1b:b4:68:65:04:0a:68:41:6b:3d:76:f0:
                    f8:d1:bb:3d:88:31:44:c5:06:17:48:b1:57:1d:f6:
                    4d:6b:3c:9d:fa:c6:b5:a6:af:33:57:b8:54:92:63:
                    01:87:9d:3d:8f:b1:b9:cf:12:34:75:7b:51:f4:18:
                    85:f1:41:67:65:62:ef:f7:b4:2b:0f:d4:b9:43:a4:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4F:D8:2D:FE:6D:EC:62:1F:86:41:97:47:24:5A:50:DE:14:30:C5
            X509v3 Authority Key Identifier:
                keyid:26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/xE_YLf5t7GIfhkGXRyRaUN4UMMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.8.0/22
                IPv6:
                  2a0e:cd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:71:b5:ab:dc:cf:c5:ff:31:12:6d:0b:f8:ab:1b:09:02:
         4e:f4:8a:4e:59:4d:66:28:06:89:b6:34:19:3e:90:6e:97:9a:
         94:27:58:ce:53:f2:b5:84:fe:64:d5:da:22:aa:ab:cb:22:71:
         fc:f5:2a:16:73:76:e9:ac:e9:a2:86:d0:a2:28:aa:ed:ec:8e:
         cc:cc:e5:ed:2c:75:db:d9:29:a3:c7:f2:2c:97:53:30:14:40:
         82:d1:b3:69:a1:90:ad:6f:94:e3:33:c4:07:99:ea:4b:d6:27:
         97:49:7f:1e:4a:e9:94:85:43:43:a5:d5:39:bc:ed:d9:09:f0:
         c7:6e:db:2f:5b:41:c3:79:86:91:51:de:aa:76:e8:fb:a1:d6:
         00:64:e5:42:a9:fd:d6:c3:18:de:59:2f:96:2e:6b:67:d3:4c:
         c3:61:88:03:54:a4:2b:2a:bf:37:43:01:ab:2d:25:c0:6e:78:
         33:27:81:52:1e:47:e1:67:b7:f5:52:ac:75:0a:c3:01:e2:8f:
         0d:8d:b8:0b:57:ef:f0:be:9c:01:e3:23:44:a6:14:49:b2:1b:
         0e:57:68:5c:1b:7c:53:85:0d:22:21:36:7c:d4:25:54:f9:38:
         f5:12:36:9b:df:fc:15:c2:a4:72:18:f1:b3:37:ea:cb:78:91:
         87:90:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----