Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/WtaRMpH5w4w9goPEwVetApXtzoU.roa
File:                     WtaRMpH5w4w9goPEwVetApXtzoU.roa (raw, json)
Hash identifier:          BlPADUTypLGU2UiGCxiBGjI3cicdPtHOxBRK08An/p8=
Subject key identifier:   5A:D6:91:32:91:F9:C3:8C:3D:82:83:C4:C1:57:AD:02:95:ED:CE:85
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       043731FC
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/WtaRMpH5w4w9goPEwVetApXtzoU.roa
Signing time:             Tue 08 Feb 2022 12:53:26 +0000
ROA not before:           Tue 08 Feb 2022 12:53:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211936
IP address blocks:        45.65.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70726140 (0x43731fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Feb  8 12:53:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ad6913291f9c38c3d8283c4c157ad0295edce85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:ee:e7:7c:ac:d4:51:81:21:fb:56:b9:b2:
                    ed:03:e8:cd:fb:f0:b5:b9:56:34:d3:6d:51:32:cf:
                    f3:3c:77:83:d3:07:48:10:64:5a:da:bd:ee:64:42:
                    6e:ab:73:80:9a:8f:54:0c:37:4b:05:f4:f0:09:9d:
                    e1:62:cd:33:76:cf:ff:9c:6f:0b:0b:b3:15:d3:1e:
                    12:2f:94:fe:b1:3c:e9:e2:78:98:de:18:0c:3a:8b:
                    c8:52:2c:1e:77:f6:a7:41:39:64:fd:d0:4a:43:06:
                    0c:02:b7:79:3f:84:c0:a0:70:48:8e:3d:ee:5a:28:
                    92:8b:61:40:55:8e:9e:43:48:ac:ba:3d:ca:82:50:
                    92:34:50:d5:96:97:4f:d6:c4:e6:47:e4:45:b6:56:
                    09:a6:e8:b5:23:90:f1:0a:d3:a2:73:7e:0e:c9:69:
                    fa:69:4a:48:c5:1e:38:77:bb:61:26:2f:4d:37:19:
                    87:15:a6:83:db:aa:5a:e4:f4:30:f3:97:70:9d:88:
                    cc:e6:cf:e0:4b:c5:24:7f:6a:53:a7:1c:be:c7:30:
                    f6:e0:66:d8:34:6d:7f:eb:8f:80:b4:9b:26:02:4a:
                    48:6c:b3:c2:13:19:bf:e6:44:ec:9a:08:ef:46:23:
                    29:5e:c4:c2:2a:da:26:ae:41:ab:a4:84:8e:37:bb:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D6:91:32:91:F9:C3:8C:3D:82:83:C4:C1:57:AD:02:95:ED:CE:85
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/WtaRMpH5w4w9goPEwVetApXtzoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:15:92:6e:a3:ec:2d:b7:fc:a0:b2:6b:f9:7b:87:a5:84:
         5a:58:5f:9e:e1:b7:5d:18:ba:cf:99:32:89:cd:10:a8:4c:6a:
         d3:35:f6:34:2d:54:0b:0d:14:5c:9f:50:41:64:ab:33:46:4f:
         09:7c:f2:44:96:f4:11:89:28:f4:d3:0f:1d:7a:ba:a0:b4:10:
         4c:d4:4a:0c:6e:39:0c:d7:4a:61:4c:a3:74:fe:ea:8c:b4:76:
         52:c1:e8:f4:5a:e2:57:23:06:d0:d8:37:c1:b0:1a:d7:69:97:
         9d:87:00:a8:81:35:d9:0f:bf:f3:ab:b7:83:3e:a5:41:ae:e3:
         d4:43:b0:35:3c:6c:15:4e:34:c4:51:29:d1:2a:f5:c4:4d:be:
         57:1b:80:2a:e8:17:f5:91:83:0f:cd:b8:db:68:9e:64:7d:d6:
         16:96:1e:1c:91:61:b0:bd:cc:5b:f9:31:ff:01:0e:38:84:47:
         c7:bd:ae:37:f9:a5:35:e0:76:05:c7:63:a3:33:e0:37:73:af:
         96:d7:7c:d9:10:4d:55:67:c3:5b:43:68:30:e6:ee:38:1e:cd:
         f6:8d:f0:0e:5d:e4:fd:54:6d:0b:17:a8:23:35:79:77:08:98:
         72:b1:9c:fe:96:57:e7:2f:12:57:d3:12:b1:bd:36:05:ca:49:
         47:a6:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----