Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/C75Vjo8_LiZXB4n7-dAfHtNByC0.roa
File:                     C75Vjo8_LiZXB4n7-dAfHtNByC0.roa (raw, json)
Hash identifier:          xAC5lE/FynOxI9gJEvX7tyeF5yGJCa3aEIx9ErG+61Q=
Subject key identifier:   0B:BE:55:8E:8F:3F:2E:26:57:07:89:FB:F9:D0:1F:1E:D3:41:C8:2D
Certificate issuer:       /CN=d6794cff35dcbd427fbe7ba2a94333aa8df0a467
Certificate serial:       A58307
Authority key identifier: D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/C75Vjo8_LiZXB4n7-dAfHtNByC0.roa
Signing time:             Sat 01 Jan 2022 05:54:49 +0000
ROA not before:           Sat 01 Jan 2022 05:54:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        45.144.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10846983 (0xa58307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6794cff35dcbd427fbe7ba2a94333aa8df0a467
        Validity
            Not Before: Jan  1 05:54:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0bbe558e8f3f2e26570789fbf9d01f1ed341c82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9b:f4:cf:b2:52:41:c3:82:a7:d4:5f:bb:7c:
                    55:76:e1:e9:b2:79:9c:83:ef:e9:13:92:71:e7:17:
                    03:95:5f:e5:38:c6:6f:77:6e:74:bf:6a:4e:e1:2e:
                    d9:88:37:8f:73:b5:2a:e9:60:cd:4a:29:0e:b1:97:
                    2d:c6:5a:35:1a:ed:96:fc:82:3c:30:47:04:8d:9f:
                    87:a8:92:e3:64:16:cb:6a:e1:c0:45:b4:93:1e:4d:
                    59:f4:3e:b9:7b:35:19:25:6c:44:13:eb:88:1f:4c:
                    da:d9:3c:76:02:77:68:85:17:3c:ae:c4:a8:33:f4:
                    5b:6b:a1:86:cc:be:ad:ee:61:1c:93:01:70:f4:3e:
                    cb:a6:75:f7:df:42:cf:67:ba:4d:da:b8:38:80:bc:
                    0f:38:7b:68:08:6f:d5:ea:44:9a:ab:56:9f:88:f0:
                    ae:1f:60:cb:bd:26:77:61:9e:4b:96:84:54:0f:7c:
                    cd:fc:22:4a:be:e7:4c:81:df:6e:03:a8:3f:f2:f9:
                    bd:31:6e:8e:ed:9f:90:7e:f1:c6:d4:22:7c:19:df:
                    25:74:99:2e:47:f0:cf:fe:23:b7:70:bc:74:30:1d:
                    53:08:7c:66:cf:8e:e8:7f:7d:a0:d0:56:ef:70:d8:
                    28:c9:2e:fc:4e:b2:36:38:5a:8b:67:17:53:60:ef:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:55:8E:8F:3F:2E:26:57:07:89:FB:F9:D0:1F:1E:D3:41:C8:2D
            X509v3 Authority Key Identifier:
                keyid:D6:79:4C:FF:35:DC:BD:42:7F:BE:7B:A2:A9:43:33:AA:8D:F0:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/C75Vjo8_LiZXB4n7-dAfHtNByC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcf886-01e9-4bc8-9688-a0ef6c9dc33a/1/1nlM_zXcvUJ_vnuiqUMzqo3wpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:3e:c7:9b:d3:c2:08:aa:76:f0:62:d5:83:15:84:ce:50:b6:
         6e:8a:20:11:35:60:ad:74:81:d3:08:26:a3:25:c0:91:63:ac:
         80:f7:d9:a7:57:93:e4:0a:15:f0:5f:95:5c:c9:52:b3:8c:5c:
         a2:6e:a4:84:c3:d7:ae:1a:53:c0:7d:d1:0d:0c:d7:fa:06:c8:
         b9:af:74:03:a2:ba:4e:f2:db:dd:4a:53:37:a7:59:a1:2c:a1:
         e2:75:82:06:72:6c:6d:83:8c:25:c9:2a:84:ca:47:86:6f:e1:
         67:ec:2a:5c:4f:53:1b:1d:9b:04:ac:64:4e:31:6a:5a:f9:43:
         30:07:4d:0d:18:01:ee:49:0d:b2:af:4e:3a:00:8c:be:23:e3:
         03:dc:e1:7b:3d:4a:f1:57:49:11:b5:63:94:c1:ae:ce:e4:6c:
         00:e1:a0:d9:78:89:36:9d:f0:8d:2c:f1:fc:ab:9b:39:47:97:
         79:68:e1:e9:b2:9c:a6:e0:f4:85:75:c7:b3:30:58:c6:1d:21:
         e8:92:d2:95:40:c4:bf:84:71:f9:61:5a:c6:50:48:f6:2d:4b:
         42:dc:68:92:d7:af:f0:2e:d4:d5:b9:77:12:55:23:d5:b8:45:
         5c:0d:21:87:cc:81:99:f8:85:34:dd:a3:f3:2e:cb:c7:06:01:
         b5:53:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----