Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1ur-ufEPo5yQwWH8f2RqvRPH_ss.roa
File:                     1ur-ufEPo5yQwWH8f2RqvRPH_ss.roa (raw, json)
Hash identifier:          LgFjoJ8mloY7/4+AnTyhbz13PbDHx6SV18wfQ1nuU9Q=
Subject key identifier:   D6:EA:FE:B9:F1:0F:A3:9C:90:C1:61:FC:7F:64:6A:BD:13:C7:FE:CB
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0543AB11
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1ur-ufEPo5yQwWH8f2RqvRPH_ss.roa
Signing time:             Wed 01 Jun 2022 04:09:13 +0000
ROA not before:           Wed 01 Jun 2022 04:09:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43043
IP address blocks:        45.148.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88320785 (0x543ab11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun  1 04:09:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6eafeb9f10fa39c90c161fc7f646abd13c7fecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:80:c4:ba:4d:8c:c0:cd:e6:8d:b4:6a:50:
                    0c:73:00:cc:30:73:65:4d:b8:1b:d7:15:91:6f:f4:
                    36:73:c0:d1:c4:74:84:d8:f7:fc:30:25:05:2d:44:
                    ae:40:46:57:27:5b:8b:8c:3b:52:8d:b1:f7:02:2b:
                    ac:a4:3c:a9:bd:df:9d:7f:04:11:4c:57:eb:8f:d3:
                    4a:be:41:82:8c:7a:7a:b9:4b:ec:07:93:77:1c:38:
                    b0:b8:09:7e:20:2a:0d:93:ed:77:4d:10:9d:dc:99:
                    ab:91:64:a0:11:f5:62:d5:24:26:90:c3:ac:e7:7c:
                    9a:44:33:64:2b:1b:a8:53:70:a5:a8:77:77:eb:f3:
                    ab:49:45:8d:e3:85:1b:09:f5:f5:c5:8c:81:20:49:
                    01:b6:1c:7e:1b:07:fc:80:7b:db:e4:45:70:62:e8:
                    9c:2d:71:83:de:dd:75:23:c8:f8:fc:78:d7:d0:30:
                    f8:35:ee:85:e8:48:3d:01:02:11:9a:b8:62:6a:a2:
                    36:af:a0:85:0c:1d:c0:84:2b:3a:07:5b:b3:66:8c:
                    93:7d:0f:67:07:cf:1a:d0:c3:43:f0:e9:b0:d5:c3:
                    f1:95:28:08:13:57:d7:0f:aa:1d:8c:ef:57:59:e4:
                    1f:20:05:38:e2:d7:74:e5:84:a5:dc:0e:9b:d5:3c:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EA:FE:B9:F1:0F:A3:9C:90:C1:61:FC:7F:64:6A:BD:13:C7:FE:CB
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1ur-ufEPo5yQwWH8f2RqvRPH_ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:dc:d9:79:26:53:69:f9:f9:1c:52:02:f3:54:5b:e4:f9:1f:
         91:59:8a:1c:a4:2a:94:46:60:80:78:66:b4:5b:bd:3a:38:44:
         b4:28:7b:ce:44:3b:75:fa:5b:23:51:f3:96:a9:8e:74:ca:d7:
         68:dd:f8:19:f0:52:b2:51:8a:15:90:ca:74:96:ae:41:48:e3:
         52:e6:0a:d3:f1:b2:e9:be:91:88:02:10:78:c3:cc:be:e8:e8:
         9e:79:35:5b:c2:ee:10:2c:91:fb:80:b6:76:0d:f8:c2:a0:dc:
         f0:11:3e:bc:4f:0c:8a:f9:fb:4e:82:99:20:7d:be:cf:4b:18:
         20:1a:88:3b:da:d0:a5:28:73:73:c3:95:03:3a:a1:b1:51:ea:
         65:56:ec:d8:61:ff:12:af:22:31:3b:33:80:b2:69:3b:22:2d:
         a1:57:93:e4:be:29:88:c2:9c:39:72:43:2c:2d:7d:a0:88:6e:
         75:e9:28:a3:34:3a:f0:f9:8a:37:2a:04:e0:e3:3f:78:f6:a0:
         a7:d0:84:ab:38:7c:35:74:57:5b:87:46:a0:9e:09:6e:e3:d9:
         08:74:be:1d:c3:34:c8:04:8b:85:90:d9:21:37:0c:bc:a9:40:
         04:3e:87:9f:5a:d5:1e:18:62:07:0e:fa:3a:9b:f4:cb:79:53:
         db:00:0f:31
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBUOrETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
M2VjZjEwYjg4N2YwODU4ODdkZThiMmRiNjQ5MTdlZTJlNDI0NTQ1MB4XDTIyMDYw
MTA0MDkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDZlYWZlYjlmMTBm
YTM5YzkwYzE2MWZjN2Y2NDZhYmQxM2M3ZmVjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIzugMS6TYzAzeaNtGpQDHMAzDBzZU24G9cVkW/0NnPA0cR0
hNj3/DAlBS1ErkBGVydbi4w7Uo2x9wIrrKQ8qb3fnX8EEUxX64/TSr5Bgox6erlL
7AeTdxw4sLgJfiAqDZPtd00QndyZq5FkoBH1YtUkJpDDrOd8mkQzZCsbqFNwpah3
d+vzq0lFjeOFGwn19cWMgSBJAbYcfhsH/IB72+RFcGLonC1xg97ddSPI+Px419Aw
+DXuhehIPQECEZq4YmqiNq+ghQwdwIQrOgdbs2aMk30PZwfPGtDDQ/DpsNXD8ZUo
CBNX1w+qHYzvV1nkHyAFOOLXdOWEpdwOm9U8XhsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTW6v658Q+jnJDBYfx/ZGq9E8f+yzAfBgNVHSMEGDAWgBQT7PELiH8IWIfe
iy22SRfuLkJFRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0UtenhDNGhfQ0ZpSDNvc3R0a2tYN2k1Q1JVVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8x
LzF1ci11ZkVQbzV5UXdXSDhmMlJxdlJQSF9zcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YzQ1YTliLTUwOTYtNGU3NS05Mzg5LWJkOWI0MmY0OGRkZS8xL0UtenhDNGhfQ0Zp
SDNvc3R0a2tYN2k1Q1JVVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2UjjANBgkqhkiG9w0BAQsFAAOC
AQEAwNzZeSZTafn5HFIC81Rb5PkfkVmKHKQqlEZggHhmtFu9OjhEtCh7zkQ7dfpb
I1HzlqmOdMrXaN34GfBSslGKFZDKdJauQUjjUuYK0/Gy6b6RiAIQeMPMvujonnk1
W8LuECyR+4C2dg34wqDc8BE+vE8Mivn7ToKZIH2+z0sYIBqIO9rQpShzc8OVAzqh
sVHqZVbs2GH/Eq8iMTszgLJpOyItoVeT5L4piMKcOXJDLC19oIhudekoozQ68PmK
NyoE4OM/ePagp9CEqzh8NXRXW4dGoJ4JbuPZCHS+HcM0yASLhZDZITcMvKlABD6H
n1rVHhhiBw76Opv0y3lT2wAPMQ==
-----END CERTIFICATE-----