Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ah7CxRIDwlvy5lCjZC7_zgvvoPs.roa
File:                     ah7CxRIDwlvy5lCjZC7_zgvvoPs.roa (raw, json)
Hash identifier:          B2wFVWaNP32jlwrV7+zAlSmfC8vw6sOzs6aQlyoAg9U=
Subject key identifier:   6A:1E:C2:C5:12:03:C2:5B:F2:E6:50:A3:64:2E:FF:CE:0B:EF:A0:FB
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       04F8748E
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ah7CxRIDwlvy5lCjZC7_zgvvoPs.roa
Signing time:             Sat 07 May 2022 21:27:50 +0000
ROA not before:           Sat 07 May 2022 21:27:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3320
IP address blocks:        45.65.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83391630 (0x4f8748e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: May  7 21:27:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a1ec2c51203c25bf2e650a3642effce0befa0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:59:c3:7c:2e:e3:c1:95:57:fb:c7:f9:a9:
                    e2:ad:9e:40:a4:9d:12:6e:f8:13:9b:f7:38:e7:cc:
                    2e:60:80:41:e4:09:b5:85:2b:6a:96:9e:0f:da:68:
                    36:e1:91:16:a6:26:28:19:91:9e:9c:b5:0e:c5:bd:
                    39:53:ba:5d:b9:d8:ae:3d:44:8b:d0:d4:69:eb:84:
                    34:4c:fc:aa:22:48:4d:8d:e5:77:51:c8:ed:95:8e:
                    16:69:05:8b:7c:27:d1:11:5a:07:e5:f3:e8:24:81:
                    c3:90:2d:a3:f3:95:29:01:49:02:f0:5e:38:fc:36:
                    99:b0:a3:c9:c7:21:bf:6c:56:ac:fb:d7:aa:05:21:
                    bc:09:43:9e:b4:71:2f:92:b3:5a:b5:2d:e0:25:7a:
                    41:d6:0e:56:a4:a1:4e:25:95:7f:9a:80:a1:dc:7c:
                    fb:de:d3:5a:c0:d7:80:92:29:1d:58:29:cd:dd:2b:
                    c7:80:c5:67:42:ed:ae:16:47:57:3b:a7:bb:d0:7d:
                    88:78:55:23:ea:74:c5:1a:4d:43:88:1d:ab:75:e5:
                    36:67:97:f9:31:f5:af:e2:d7:9c:70:71:16:4f:d2:
                    f3:73:8c:ea:cd:66:d7:63:b0:43:89:53:81:d7:78:
                    fe:5f:2c:37:59:01:4e:4c:eb:69:f8:08:c9:a8:4c:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1E:C2:C5:12:03:C2:5B:F2:E6:50:A3:64:2E:FF:CE:0B:EF:A0:FB
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ah7CxRIDwlvy5lCjZC7_zgvvoPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:f6:2d:6e:85:af:26:97:d4:cb:b6:c4:81:2e:95:3b:a2:
         fc:b8:d7:a8:7a:52:a0:9b:59:4b:21:5d:fd:5b:4d:27:04:20:
         a6:07:f3:9b:cb:6a:0d:df:99:27:de:c4:3b:a5:35:93:fa:3d:
         81:36:a3:18:22:e8:09:d3:f5:53:49:66:4b:1d:75:9a:61:22:
         86:bd:7b:1a:ab:91:ff:61:9f:41:10:e2:4e:93:ca:f3:f7:aa:
         35:4a:00:de:70:39:63:5f:32:08:aa:7b:7e:10:af:9e:3a:1e:
         55:68:0e:26:4e:54:26:27:a7:23:8f:3f:40:fa:88:85:2e:c1:
         30:04:c0:fa:93:ac:d5:de:ca:7b:ab:b7:27:b0:62:68:b6:bd:
         e7:be:66:e6:ec:fb:2e:62:9f:d5:80:3b:45:28:05:5e:3e:bb:
         33:f3:42:6f:92:e6:bf:3f:b8:67:27:f0:6c:2c:cd:a0:9d:d0:
         c2:a8:e7:07:47:b5:94:11:e7:ab:23:65:a4:c3:29:8a:e4:60:
         3d:7d:a8:63:91:7d:34:72:25:90:81:9e:ea:98:cf:9b:23:6a:
         d8:eb:bf:1d:1a:ae:d6:20:15:9e:15:a7:7d:76:63:d3:70:06:
         44:21:29:9f:33:83:dd:b0:42:c2:72:54:f8:5f:1f:f1:da:24:
         b2:ce:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----