Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/EeKPX1Ijio4hWnEcVrFyKYisCas.roa
File:                     EeKPX1Ijio4hWnEcVrFyKYisCas.roa (raw, json)
Hash identifier:          aPTYRBizq01ZTgt/jw+00Oxeb033GS5ZLHHP5/Rp9Eg=
Subject key identifier:   11:E2:8F:5F:52:23:8A:8E:21:5A:71:1C:56:B1:72:29:88:AC:09:AB
Certificate issuer:       /CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
Certificate serial:       01856CE62067F39E56FBC3465CABF27D7302
Authority key identifier: A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/EeKPX1Ijio4hWnEcVrFyKYisCas.roa
Signing time:             Sun 01 Jan 2023 10:34:58 +0000
ROA not before:           Sun 01 Jan 2023 10:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56817
IP address blocks:        45.81.40.0/23 maxlen: 23
                          2a0e:4d80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:20:67:f3:9e:56:fb:c3:46:5c:ab:f2:7d:73:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
        Validity
            Not Before: Jan  1 10:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11e28f5f52238a8e215a711c56b1722988ac09ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:0f:44:e6:aa:26:50:ea:3d:1a:cd:0a:66:
                    25:94:56:c2:e8:da:43:6a:05:8b:3a:83:6a:f8:be:
                    6f:87:85:2d:22:af:fb:39:97:49:0e:2a:13:f9:cb:
                    c9:89:e3:b1:67:6a:03:f2:d1:01:ba:9f:07:a8:50:
                    fa:c9:13:ff:bd:bd:35:b6:0c:c1:f5:2b:9f:47:c5:
                    c7:9e:30:cb:7b:65:d3:80:5f:51:16:7b:e7:a9:e6:
                    4e:d9:1f:96:ae:69:f5:e4:2d:cf:76:3b:53:2d:1d:
                    3b:c7:fb:c6:28:35:b4:2d:7e:9a:a3:56:a3:14:03:
                    bd:2b:3c:d4:a3:a0:29:67:e4:59:96:4c:25:bb:8b:
                    5b:aa:cb:b0:3c:92:53:37:18:f6:bf:bf:ee:5b:5c:
                    5d:39:90:7e:52:dd:0c:76:d1:9f:73:9e:e2:a4:8f:
                    39:99:f9:a7:94:04:a6:61:74:27:4d:89:c6:5d:32:
                    ba:8f:db:f6:f5:90:29:89:e4:c9:da:80:97:da:ea:
                    0a:7c:19:65:5e:d2:84:88:d4:10:42:74:07:5f:0c:
                    b3:44:5a:4c:1c:47:8e:f3:30:34:5a:64:72:49:bb:
                    88:48:04:e9:42:d2:7a:6f:91:13:53:70:07:ac:9b:
                    60:fc:44:f3:2f:1c:7c:3f:96:6f:ae:bf:cb:02:93:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:8F:5F:52:23:8A:8E:21:5A:71:1C:56:B1:72:29:88:AC:09:AB
            X509v3 Authority Key Identifier:
                keyid:A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/EeKPX1Ijio4hWnEcVrFyKYisCas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/oc5tOQmePRamA5kqwh9YVUquz38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.40.0/23
                IPv6:
                  2a0e:4d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         88:57:6e:48:36:39:e1:94:7d:5e:95:80:7d:78:fd:cf:55:07:
         26:43:66:3f:be:2e:3e:2d:10:b4:7e:1e:5b:b0:4a:07:7a:60:
         d6:53:51:db:b8:c7:df:df:c3:47:07:a3:3d:2c:64:8e:a9:8b:
         63:79:9d:fc:4d:e8:f0:67:c5:dc:d7:93:c3:dc:9e:ea:3a:b8:
         ab:12:15:19:b5:21:eb:cd:c9:71:74:ff:13:9c:41:0a:34:17:
         44:be:3e:33:b3:7d:51:3e:d7:1f:d5:96:11:55:a7:4b:14:dd:
         82:33:d0:ec:dc:06:55:79:05:02:be:39:dd:8e:b0:66:4a:1c:
         fe:3e:6a:38:66:43:7a:e9:79:49:38:c3:0c:c0:9e:09:a3:4b:
         11:3b:e4:cd:b0:c2:88:6e:ed:d7:96:7a:fb:63:28:df:e4:aa:
         b2:fc:3a:c7:03:7e:4a:88:06:78:4f:67:63:46:21:b8:7b:9a:
         fb:f6:d5:fa:cb:49:fe:da:40:08:ba:80:48:d3:67:9b:a0:43:
         6a:74:bc:2b:00:29:35:bb:45:b3:19:de:99:8c:8a:35:5a:9d:
         d4:06:29:11:cc:3d:e9:04:1a:03:c2:fc:59:c7:73:65:64:1f:
         20:a5:9e:58:e7:fd:0c:e9:5e:46:ae:d1:d2:fe:16:72:83:d0:
         20:1a:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----