Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/WBzNPj1iGkTRcwRY_Zknlgz_-c4.roa
File:                     WBzNPj1iGkTRcwRY_Zknlgz_-c4.roa (raw, json)
Hash identifier:          xAgY1jM7/fxJmvsQidOzbGnt+O5p7odVD7WkmtjWzOQ=
Subject key identifier:   58:1C:CD:3E:3D:62:1A:44:D1:73:04:58:FD:99:27:96:0C:FF:F9:CE
Certificate issuer:       /CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
Certificate serial:       01864A4D9DE8D6B009D8B7D53F5C7CB7C05B
Authority key identifier: A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/WBzNPj1iGkTRcwRY_Zknlgz_-c4.roa
Signing time:             Mon 13 Feb 2023 10:24:06 +0000
ROA not before:           Mon 13 Feb 2023 10:24:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208882
IP address blocks:        45.81.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:4d:9d:e8:d6:b0:09:d8:b7:d5:3f:5c:7c:b7:c0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
        Validity
            Not Before: Feb 13 10:24:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=581ccd3e3d621a44d1730458fd9927960cfff9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:e1:3c:40:0e:e7:c1:ba:92:99:b5:a4:2f:
                    0a:10:dc:69:a3:39:7c:f1:91:af:90:b5:30:fc:89:
                    c9:60:04:80:b4:d0:e9:66:fb:55:62:b4:5d:d2:1e:
                    cd:24:53:7b:48:3e:73:24:34:f8:3c:d5:35:12:63:
                    aa:30:4c:34:a6:e6:5a:af:d3:8e:2e:f2:ef:10:b6:
                    b7:5a:89:e3:e5:9c:a4:86:2c:cf:6c:da:7c:fa:19:
                    05:8d:cb:e9:1d:96:ae:45:37:a3:72:c1:1a:3a:94:
                    07:b7:15:88:fe:54:b2:1a:aa:0b:9a:25:1e:62:17:
                    76:82:f1:9b:79:31:92:db:fa:2b:47:81:95:64:02:
                    80:67:89:ac:9e:85:41:8e:2e:2f:1b:e1:2e:78:b3:
                    5e:ce:5d:76:e7:8d:74:c7:5d:16:bc:63:ce:83:6d:
                    cb:db:9c:09:2f:0f:0d:cf:ed:fa:f1:61:e6:f7:68:
                    5e:44:9d:6d:50:07:97:c1:2d:34:e3:f8:a1:1c:44:
                    78:4a:76:b4:5f:86:c6:44:33:f6:30:bd:58:2a:09:
                    67:69:2d:6c:de:94:c5:1b:30:76:de:c8:2f:0d:b6:
                    be:95:a1:69:0d:47:1f:af:f5:34:a3:4b:d6:e3:8b:
                    f6:7a:f7:a7:d3:12:22:5c:29:39:ba:b9:d0:c6:bc:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1C:CD:3E:3D:62:1A:44:D1:73:04:58:FD:99:27:96:0C:FF:F9:CE
            X509v3 Authority Key Identifier:
                keyid:A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/WBzNPj1iGkTRcwRY_Zknlgz_-c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/oc5tOQmePRamA5kqwh9YVUquz38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:93:6a:8d:5a:8c:73:b9:83:32:4c:3c:39:05:05:11:22:39:
         23:57:92:4c:cc:5c:09:80:91:5f:57:e7:72:44:bb:ec:64:14:
         f7:6e:d2:00:ec:9d:9f:7f:61:cb:76:93:59:a4:e2:2c:66:06:
         e8:c9:23:b7:61:28:b8:dd:3b:b8:b4:34:7c:21:a9:77:64:64:
         d1:1d:0c:99:10:cf:4c:fb:6b:87:e3:49:3c:dd:ff:0b:86:9b:
         ef:95:44:4c:6b:72:1e:77:1b:d9:ff:d2:ff:8c:23:ff:64:0a:
         d4:40:f7:aa:29:d5:1b:a3:4e:d7:7a:c4:28:36:b6:62:59:f0:
         d3:fc:7c:29:4f:90:d1:eb:c1:03:3e:a4:a1:ec:7b:01:37:18:
         9a:b5:fe:fc:60:f4:74:3d:a6:fb:ae:f1:87:b0:10:db:b3:c5:
         9a:f1:84:62:d6:a6:20:cc:c6:fd:9a:0d:a8:9a:62:6b:fa:14:
         05:f7:ff:22:b0:6c:eb:90:b3:88:79:ce:8f:ac:4b:7a:5f:0f:
         1f:fc:a2:ad:5b:60:4c:11:5f:2a:cf:7b:12:41:46:f5:4f:90:
         4e:8f:ab:32:bb:78:1b:14:1f:3a:cd:c0:25:fc:75:68:b1:b1:
         0b:f8:92:ce:2b:ea:48:09:d9:5d:7e:22:c7:46:6a:f1:26:ab:
         d2:ef:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----