Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z-PwaHMxPHBDvNxXB98zXdPL6Uk.roa
File:                     z-PwaHMxPHBDvNxXB98zXdPL6Uk.roa (raw, json)
Hash identifier:          vbs6pISGD5T3VyPQiVYkgcFhqZRKMfHM3L/2GxDgT5s=
Subject key identifier:   CF:E3:F0:68:73:31:3C:70:43:BC:DC:57:07:DF:33:5D:D3:CB:E9:49
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       03DAE9F9
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z-PwaHMxPHBDvNxXB98zXdPL6Uk.roa
Signing time:             Thu 10 Mar 2022 19:47:32 +0000
ROA not before:           Thu 10 Mar 2022 19:47:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        45.152.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64678393 (0x3dae9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Mar 10 19:47:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cfe3f06873313c7043bcdc5707df335dd3cbe949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:ad:74:70:78:89:4a:0a:44:a1:36:f0:91:
                    12:49:6f:8b:1d:c2:5b:e4:30:3a:59:88:ae:32:42:
                    0d:3f:1d:4d:cb:d0:38:7e:73:55:20:71:bc:58:6b:
                    0b:35:e1:89:6b:49:6a:4e:27:74:b1:7b:0b:32:8c:
                    b1:a7:39:59:8e:45:d1:57:ce:9d:9e:7b:f1:3d:d2:
                    a4:2b:50:bc:d2:a4:48:6c:ba:0e:88:7e:b1:e7:01:
                    93:60:b7:16:fa:00:c3:e6:dd:04:28:a4:81:64:3c:
                    cc:74:7e:f3:e4:88:78:04:9d:17:de:75:4e:c0:37:
                    9d:a0:9d:99:30:83:85:fb:95:d2:86:1c:35:81:90:
                    ed:c9:1c:76:7f:ab:20:29:c6:7a:e3:9c:24:3a:14:
                    be:26:b3:c0:a1:01:30:ca:f9:e3:89:12:8d:60:c8:
                    c7:8f:c8:3f:d4:94:8a:1d:14:8a:b4:88:92:cc:02:
                    42:b7:68:d4:14:54:45:e2:49:02:28:b8:e8:fd:24:
                    db:3a:3d:d2:fa:5f:ce:a5:72:29:4d:52:2f:d4:0e:
                    37:c1:f1:10:cf:79:93:ca:00:7d:70:d5:3e:1a:b2:
                    5d:52:1d:45:ce:9a:c9:f5:2e:19:c7:46:5e:10:e0:
                    16:cc:ed:71:08:c7:9f:b0:48:08:ef:0e:e6:1c:8d:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E3:F0:68:73:31:3C:70:43:BC:DC:57:07:DF:33:5D:D3:CB:E9:49
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z-PwaHMxPHBDvNxXB98zXdPL6Uk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:8b:f0:31:78:d2:19:34:79:d6:73:14:66:74:9c:9e:12:cc:
         92:e9:ee:79:5f:7f:77:92:4c:13:88:ec:8e:73:8d:ac:7d:12:
         51:bd:3b:37:9b:e9:29:ff:80:13:d9:99:dd:33:08:b7:81:06:
         7d:84:63:3d:f5:9d:ef:d5:1c:61:13:59:fb:d8:23:83:d3:84:
         fa:40:0a:4c:74:3e:4c:15:19:0a:b0:f9:86:b6:a9:f6:d8:8f:
         cc:58:84:f1:61:36:7f:f7:f6:25:cf:69:1e:92:97:f4:05:04:
         12:66:82:b5:49:c5:5f:9f:98:c9:ce:cf:17:83:e1:c8:b4:a0:
         e7:28:30:d3:22:0d:c8:a4:52:9d:a4:39:40:9f:f6:d4:2e:94:
         21:35:1d:f1:66:62:94:66:89:87:83:e1:c9:2e:8e:48:65:78:
         6e:a5:6e:80:d2:26:d5:78:d5:32:cf:c9:b2:01:6b:5d:08:c6:
         47:95:3a:4f:f5:01:bc:9d:df:29:41:76:05:96:7f:79:8d:db:
         75:77:30:da:72:89:d5:f8:a9:44:38:4e:8d:43:b9:0f:b6:88:
         aa:1f:87:d3:d6:e8:f4:75:98:a5:32:7f:d4:81:18:aa:64:28:
         ef:d3:35:7c:41:38:75:1d:99:81:63:38:90:09:7e:1e:86:e5:
         ae:2b:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----