Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/BN05NJN15KdMvnSJhq1ExOjDmIA.roa
File:                     BN05NJN15KdMvnSJhq1ExOjDmIA.roa (raw, json)
Hash identifier:          KgV3EqPn4idKkN7WWEhe4MOLB9N6XLFfG94eefIIrV0=
Subject key identifier:   04:DD:39:34:93:75:E4:A7:4C:BE:74:89:86:AD:44:C4:E8:C3:98:80
Certificate issuer:       /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial:       02D8EA95
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/BN05NJN15KdMvnSJhq1ExOjDmIA.roa
Signing time:             Sat 01 Jan 2022 12:54:29 +0000
ROA not before:           Sat 01 Jan 2022 12:54:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        45.84.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47770261 (0x2d8ea95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
        Validity
            Not Before: Jan  1 12:54:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=04dd39349375e4a74cbe748986ad44c4e8c39880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:cb:ad:c0:2f:6f:4c:25:84:f4:6a:a7:6f:
                    3e:0e:e0:3c:bd:53:e7:46:14:1e:c9:a2:88:f2:75:
                    ec:ad:8c:c7:90:57:67:07:57:37:b1:e3:64:ad:9e:
                    19:7f:ad:d8:f1:74:0f:73:02:21:6d:71:84:99:40:
                    a4:a4:50:2a:a1:af:1b:b3:70:69:b7:d6:60:00:11:
                    ab:cc:33:b9:62:59:74:60:5c:a5:e7:67:e1:9c:22:
                    7c:4d:f4:19:a5:ff:e1:57:95:67:9e:61:74:43:95:
                    58:4e:48:fe:23:09:a7:26:e0:4e:d9:1e:f7:89:23:
                    fa:a9:1a:c2:52:bd:06:52:36:86:27:25:77:fa:12:
                    0a:d6:33:03:41:dd:b5:c0:57:c0:fd:19:6d:b7:a3:
                    0b:d3:a6:8e:cb:90:45:b5:0d:69:47:12:ee:28:1d:
                    8f:d2:dc:eb:20:b1:1c:54:b8:10:c1:cb:f8:33:be:
                    bb:17:e7:23:11:12:2d:5e:47:b7:11:ef:a8:a5:55:
                    4d:24:13:ae:63:76:42:48:db:1f:6d:81:74:23:17:
                    38:f0:35:d7:2f:96:84:b2:c1:60:88:4c:df:38:04:
                    57:86:47:a6:4b:92:d7:33:96:65:68:17:f7:5d:8e:
                    e2:8f:a7:52:67:7a:6d:b6:00:e3:52:9a:f7:5e:03:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DD:39:34:93:75:E4:A7:4C:BE:74:89:86:AD:44:C4:E8:C3:98:80
            X509v3 Authority Key Identifier:
                keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/BN05NJN15KdMvnSJhq1ExOjDmIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:8a:83:6d:f8:3c:d6:4b:bd:8d:fd:fe:bf:6a:43:cf:e8:
         ba:9a:ab:16:52:43:55:e4:49:3d:8a:54:02:a2:cb:4d:f9:8b:
         e9:6b:91:b4:ab:59:33:b0:48:a6:c8:1e:90:72:0a:95:b2:e3:
         f6:d7:81:a1:42:4a:e7:8c:e3:a2:c3:19:24:0d:1c:ff:d3:9a:
         8e:82:11:49:97:00:39:8b:cf:ff:9b:d5:eb:60:2a:a7:38:ba:
         4d:f7:13:43:35:6a:2c:3a:43:b5:60:ad:e3:56:d9:2c:2b:38:
         2c:0f:7d:45:e9:dc:59:03:f3:aa:b2:7d:c2:75:81:85:a0:25:
         11:3b:52:4b:57:e7:28:b4:37:b9:2e:f4:14:98:7e:bc:36:2c:
         6f:27:03:5a:ca:25:bb:94:3d:f0:c3:bc:72:c8:7a:6d:d4:35:
         1a:cd:e2:80:57:0f:fa:0c:d8:f7:7b:0b:ca:c0:57:1d:f0:8d:
         c1:ae:f6:c9:4c:95:6e:9f:dc:d0:c7:89:e9:ae:e2:92:88:34:
         bb:ac:0a:85:8a:64:14:fe:c5:7f:df:c4:14:61:46:8c:36:cd:
         40:66:e5:74:0b:b0:08:54:58:7e:08:db:51:e6:bf:b1:ec:c6:
         60:4c:13:b7:8b:da:29:a3:da:47:f6:fb:52:93:78:f1:4d:fa:
         59:83:72:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAtjqlTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MjU2OWJiZDBhOWVhNWI3MDVmYWJiOTAyMDNhZWUzMTU4ZDgwNTUzMB4XDTIyMDEw
MTEyNTQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRkZDM5MzQ5Mzc1
ZTRhNzRjYmU3NDg5ODZhZDQ0YzRlOGMzOTg4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANT/y63AL29MJYT0aqdvPg7gPL1T50YUHsmiiPJ17K2Mx5BX
ZwdXN7HjZK2eGX+t2PF0D3MCIW1xhJlApKRQKqGvG7NwabfWYAARq8wzuWJZdGBc
pedn4ZwifE30GaX/4VeVZ55hdEOVWE5I/iMJpybgTtke94kj+qkawlK9BlI2hicl
d/oSCtYzA0HdtcBXwP0ZbbejC9OmjsuQRbUNaUcS7igdj9Lc6yCxHFS4EMHL+DO+
uxfnIxESLV5HtxHvqKVVTSQTrmN2QkjbH22BdCMXOPA11y+WhLLBYIhM3zgEV4ZH
pkuS1zOWZWgX912O4o+nUmd6bbYA41Ka914DDBMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQE3Tk0k3Xkp0y+dImGrUTE6MOYgDAfBgNVHSMEGDAWgBSyVpu9Cp6ltwX6
u5AgOu4xWNgFUzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NsYWJ2UXFlcGJjRi1ydVFJRHJ1TVZqWUJWTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvYTQ4YTkxLWNhMzAtNDRmZC1hMjAwLWJhNzc1MDUzN2FjMC8x
L0JOMDVOSk4xNUtkTXZuU0pocTFFeE9qRG1JQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
YTQ4YTkxLWNhMzAtNDRmZC1hMjAwLWJhNzc1MDUzN2FjMC8xL3NsYWJ2UXFlcGJj
Ri1ydVFJRHJ1TVZqWUJWTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1UWDANBgkqhkiG9w0BAQsFAAOC
AQEAARyKg234PNZLvY39/r9qQ8/oupqrFlJDVeRJPYpUAqLLTfmL6WuRtKtZM7BI
psgekHIKlbLj9teBoUJK54zjosMZJA0c/9OajoIRSZcAOYvP/5vV62Aqpzi6TfcT
QzVqLDpDtWCt41bZLCs4LA99RencWQPzqrJ9wnWBhaAlETtSS1fnKLQ3uS70FJh+
vDYsbycDWsolu5Q98MO8csh6bdQ1Gs3igFcP+gzY93sLysBXHfCNwa72yUyVbp/c
0MeJ6a7ikog0u6wKhYpkFP7Ff9/EFGFGjDbNQGbldAuwCFRYfgjbUea/sezGYEwT
t4vaKaPaR/b7UpN48U36WYNyKQ==
-----END CERTIFICATE-----