Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/frKBBQh9BE8vsEs4TnRAd8pcYFA.roa
File:                     frKBBQh9BE8vsEs4TnRAd8pcYFA.roa (raw, json)
Hash identifier:          3frJ5ASLZ4WLcKP7aIGyz7YEpUvKCCc4m/7UYM8SCVI=
Subject key identifier:   7E:B2:81:05:08:7D:04:4F:2F:B0:4B:38:4E:74:40:77:CA:5C:60:50
Certificate issuer:       /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial:       02DA6EF5
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/frKBBQh9BE8vsEs4TnRAd8pcYFA.roa
Signing time:             Sat 01 Jan 2022 12:54:30 +0000
ROA not before:           Sat 01 Jan 2022 12:54:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        45.84.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47869685 (0x2da6ef5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
        Validity
            Not Before: Jan  1 12:54:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7eb28105087d044f2fb04b384e744077ca5c6050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:c8:d8:f4:5b:83:78:90:45:4b:0d:4b:9c:
                    1c:93:9e:ea:4c:db:75:35:91:15:2b:2c:04:23:19:
                    91:da:49:fc:f5:28:51:39:cc:b9:58:12:2a:72:18:
                    97:fa:1c:25:d1:fc:74:c1:70:c4:4f:b6:27:e1:6a:
                    c1:63:dd:74:0f:27:69:4d:83:b5:94:4b:d8:c6:67:
                    52:a2:85:f1:1b:53:77:78:2c:55:2b:63:f1:6b:4f:
                    a2:ee:8f:b6:88:a3:a4:44:53:26:e6:9a:09:52:be:
                    bb:9d:fe:26:ac:2a:60:5d:04:95:1e:f4:50:77:1e:
                    68:1b:51:f6:1b:c5:32:bc:6e:97:8a:12:af:c8:f1:
                    b2:55:6d:80:d5:11:67:ac:14:08:80:b6:18:ca:70:
                    d2:e7:39:d8:c1:63:0c:36:33:fe:76:c8:4d:36:cd:
                    24:4e:61:2a:a9:4a:c3:87:8d:09:fb:d2:a3:e0:6c:
                    11:d7:db:69:9f:da:c8:60:3e:50:87:30:5f:21:0d:
                    d0:24:c8:e3:8f:d2:d8:f3:0d:b5:8b:79:db:31:e4:
                    1f:3e:04:e2:0a:71:51:d6:ac:2a:90:3f:8b:86:8d:
                    3e:e4:64:3d:b6:43:6b:44:9b:d4:57:02:29:e9:ca:
                    47:6c:64:3a:22:49:ec:04:e4:e1:d2:98:18:9d:a2:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:81:05:08:7D:04:4F:2F:B0:4B:38:4E:74:40:77:CA:5C:60:50
            X509v3 Authority Key Identifier:
                keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/frKBBQh9BE8vsEs4TnRAd8pcYFA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:43:29:d0:cd:fa:9c:ef:2d:ac:36:81:1f:e8:30:a7:d9:
         66:1b:b7:cc:48:83:c7:e0:96:ec:46:e9:77:a6:3d:03:1d:29:
         e3:17:2a:56:3c:0c:e9:41:02:8c:ba:11:f4:1b:71:ff:34:3c:
         63:2d:53:3e:bd:13:70:13:eb:e1:32:92:66:d3:e1:30:61:ea:
         6e:98:ff:e1:ca:6e:5c:eb:da:c8:43:c5:14:8c:cf:e9:34:ce:
         d4:3d:1d:6e:20:7a:a7:56:bc:d5:14:24:92:96:e8:75:e0:92:
         26:97:38:b2:13:54:cd:b0:71:22:c6:5e:15:a3:b1:aa:e1:5f:
         3b:2b:07:93:aa:86:dd:f6:27:68:e5:21:2f:65:17:84:d8:29:
         41:d9:0a:7e:94:bb:58:e6:99:9a:96:52:6a:b6:9f:a9:40:8f:
         77:cb:42:56:0d:bc:8e:64:12:ff:f5:01:b9:3f:12:ee:dc:ac:
         06:23:1f:4b:c7:e3:a3:8d:42:ef:a1:fb:8c:ca:4d:2a:44:a1:
         9f:95:73:2d:3b:bd:74:c7:35:fc:bd:05:2e:9c:c7:1b:0b:66:
         b4:92:41:15:ba:45:5c:92:21:eb:b3:ae:91:b1:7b:28:8b:df:
         a5:45:5f:c3:c2:bb:33:5a:1a:f4:0e:df:9c:8f:2b:a2:31:7d:
         fd:2c:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----