Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Jpp1GeaYBmuCLLUBn4DjYDo7ojU.roa
File:                     Jpp1GeaYBmuCLLUBn4DjYDo7ojU.roa (raw, json)
Hash identifier:          zdDzBc5MjjbapFz/Dc3ql/u7kGE+AJilpOIIP7IR5io=
Subject key identifier:   26:9A:75:19:E6:98:06:6B:82:2C:B5:01:9F:80:E3:60:3A:3B:A2:35
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       05860D85
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Jpp1GeaYBmuCLLUBn4DjYDo7ojU.roa
Signing time:             Fri 24 Jun 2022 14:15:53 +0000
ROA not before:           Fri 24 Jun 2022 14:15:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42093
IP address blocks:        45.148.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92671365 (0x5860d85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun 24 14:15:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=269a7519e698066b822cb5019f80e3603a3ba235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:ab:81:07:10:bf:08:b7:d3:e7:6a:ff:d8:
                    61:2d:22:0d:e8:63:81:0b:b6:96:c3:a5:da:97:27:
                    d0:d1:ca:6d:14:de:56:1d:bd:92:43:74:14:95:00:
                    58:22:19:6b:3b:33:75:dd:a2:b1:a7:46:79:69:49:
                    53:f0:74:5b:7a:6a:85:6b:90:ab:6a:5e:21:cc:bb:
                    53:a8:0a:4e:16:e2:e5:ba:dc:b8:c4:7a:0a:24:04:
                    e6:5a:3e:4a:56:60:13:69:56:c7:e7:a4:67:aa:ff:
                    af:49:e8:ee:9a:52:86:b7:70:c1:94:9d:5a:43:a0:
                    da:b1:dc:21:2e:c3:50:6b:92:1a:6d:22:06:f5:93:
                    e8:1d:d6:16:61:0d:eb:47:ab:e7:6c:8e:19:cd:f9:
                    bb:e2:17:a0:88:19:d4:96:0b:52:e5:c3:99:b9:24:
                    bb:56:ea:15:34:8c:bd:23:e7:2a:a7:53:b6:9a:3d:
                    80:62:95:78:33:1d:7e:08:04:c5:64:81:6c:22:94:
                    39:44:5f:7e:97:05:1f:54:ee:cc:80:43:d3:57:4e:
                    5f:68:ce:4b:9d:14:80:c6:cc:af:2d:ae:5b:66:03:
                    75:76:a8:d7:82:ad:a8:21:36:2f:b0:c0:42:bb:df:
                    d1:45:e7:f1:9e:38:f4:68:3f:34:85:8a:55:91:99:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:75:19:E6:98:06:6B:82:2C:B5:01:9F:80:E3:60:3A:3B:A2:35
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Jpp1GeaYBmuCLLUBn4DjYDo7ojU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:01:a4:89:ba:b1:63:79:4d:03:e9:4a:f7:f3:49:37:25:36:
         8a:d7:2c:a7:ba:24:9a:e0:25:80:d8:5b:33:58:d9:7a:99:ed:
         62:5f:69:5b:e0:a4:da:1d:18:fc:1a:01:f4:e1:83:16:65:c0:
         f0:51:1c:85:df:f5:69:4f:05:c0:a8:f8:32:1d:80:ed:31:c5:
         01:b3:fb:0b:e7:ac:1c:e3:c8:7c:22:31:9a:0f:dc:e0:21:da:
         f6:c4:e1:8e:e1:f1:be:50:65:31:7d:da:6a:b7:06:f9:ca:b0:
         0d:31:9d:99:b0:ff:b4:20:05:20:99:6c:c6:9f:8d:f8:40:d4:
         b4:11:97:36:35:6f:f6:0d:ba:21:3c:86:ad:f0:97:65:1a:9a:
         fb:c6:d9:b8:f8:5c:61:e9:b8:2d:5f:58:63:0f:af:c3:ab:9f:
         1a:65:95:04:ee:dc:1b:ec:5c:cb:b6:b8:ac:d1:44:c0:dc:5a:
         97:db:4c:13:6d:96:51:bd:1f:ba:48:a6:28:3b:e1:01:36:9d:
         e5:a2:2f:9e:54:9d:83:ad:ee:b2:6e:30:93:81:1f:bf:e2:a0:
         2a:fb:48:30:a2:7a:78:1d:74:dd:ab:2c:24:42:4c:a0:c5:b8:
         76:50:e4:5b:73:47:53:5d:8e:f0:76:41:03:f3:8c:14:5b:ca:
         bb:43:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----