Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/wn4zlSIsIvYLnHFGqCguCUM1y0Y.roa
File:                     wn4zlSIsIvYLnHFGqCguCUM1y0Y.roa (raw, json)
Hash identifier:          1TAXLE7MfmBlB7ul6qx9OoSeWPpLroa1FC648n9NYmQ=
Subject key identifier:   C2:7E:33:95:22:2C:22:F6:0B:9C:71:46:A8:28:2E:09:43:35:CB:46
Certificate issuer:       /CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
Certificate serial:       01856CE6238D06C85BEF47FF9A026BFA39AD
Authority key identifier: A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/wn4zlSIsIvYLnHFGqCguCUM1y0Y.roa
Signing time:             Sun 01 Jan 2023 10:34:59 +0000
ROA not before:           Sun 01 Jan 2023 10:34:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208882
IP address blocks:        45.81.40.0/23 maxlen: 23
                          2a0e:4d80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:23:8d:06:c8:5b:ef:47:ff:9a:02:6b:fa:39:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ce6d39099e3d16a603992ac21f58554aaecf7f
        Validity
            Not Before: Jan  1 10:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c27e3395222c22f60b9c7146a8282e094335cb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:62:e7:1c:b2:40:1e:9f:ba:a7:db:74:02:
                    11:85:18:d4:c4:1a:4c:5a:6f:ce:15:48:86:1c:f4:
                    83:4e:08:02:24:d0:dd:75:49:16:69:a6:d3:1d:9d:
                    05:eb:db:03:bb:b6:c3:56:1d:2e:8c:de:97:4f:7f:
                    9d:8d:b9:52:da:67:f5:2a:68:fd:3a:db:28:e4:9f:
                    5c:73:7e:61:b6:8f:ba:a2:28:8a:6f:8d:de:c9:68:
                    62:3e:b8:a6:34:d2:9a:70:be:48:5c:6c:72:5d:04:
                    e9:18:dc:54:9a:11:07:95:ea:f0:1d:33:cb:af:eb:
                    97:c1:63:9d:53:7c:3a:e5:ab:3c:f6:71:d4:ec:6e:
                    49:65:f3:35:bb:d4:06:0d:bc:3e:4d:c2:06:49:8d:
                    b1:42:3e:8a:81:db:c9:0d:27:14:03:70:4d:73:e8:
                    ce:34:4b:49:19:18:02:93:cd:c0:2f:40:76:52:71:
                    0a:19:d6:3e:fb:ba:fb:e6:e4:27:43:3a:22:e7:38:
                    fd:b2:d5:fe:e3:b7:69:d5:ed:61:69:32:f0:6d:e4:
                    3e:65:55:f4:26:1d:69:70:50:61:64:6b:7c:df:6b:
                    a2:e5:c2:16:28:21:da:97:03:b4:e8:97:2a:0b:a4:
                    56:3c:98:0d:10:49:34:8d:00:c3:24:c5:98:ca:75:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:33:95:22:2C:22:F6:0B:9C:71:46:A8:28:2E:09:43:35:CB:46
            X509v3 Authority Key Identifier:
                keyid:A1:CE:6D:39:09:9E:3D:16:A6:03:99:2A:C2:1F:58:55:4A:AE:CF:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oc5tOQmePRamA5kqwh9YVUquz38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/wn4zlSIsIvYLnHFGqCguCUM1y0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fe36a-f58e-44e1-b415-3bf0dfbc748e/1/oc5tOQmePRamA5kqwh9YVUquz38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.40.0/23
                IPv6:
                  2a0e:4d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:c8:a2:bd:fc:33:cc:23:35:ed:d1:82:ed:38:a1:58:b5:
         bd:c6:54:9e:4e:cf:ef:99:f2:0e:e9:10:5f:46:50:34:00:f1:
         bd:ef:61:5d:3e:6d:15:74:1d:6b:db:f7:f8:15:ea:72:e5:6b:
         f4:00:b2:63:58:33:aa:75:e9:6f:4a:0f:f2:ee:ab:51:1a:87:
         21:4d:ff:8a:93:e8:af:46:6e:fc:a3:b9:93:84:6f:4d:58:cc:
         31:67:09:95:42:f1:b7:97:c6:3a:91:f4:6f:96:51:35:d0:72:
         bd:3f:45:dd:a4:0d:e0:98:89:a8:4c:13:96:89:15:cf:b5:91:
         75:ef:50:6f:27:3d:bd:33:9b:f7:81:47:6b:2b:3f:a9:92:11:
         ae:3c:a5:41:19:45:6d:72:04:39:0e:f0:7b:b7:3f:7d:c7:ef:
         19:72:7a:53:76:ff:e1:ed:bf:10:e5:0e:8b:7f:48:ca:08:c0:
         db:38:dd:be:cb:70:52:c1:cd:89:cb:d2:51:40:41:08:82:9b:
         2a:57:06:45:fa:dd:2a:1e:5d:04:2e:1d:39:4f:91:7d:c9:1e:
         e8:41:e3:af:9b:a1:04:54:d5:bf:a5:db:b6:47:33:d4:39:a9:
         94:72:27:b3:3c:04:09:b7:2b:95:72:7b:d3:d4:9d:f0:a7:c8:
         e4:84:52:86
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVs5iONBshb70f/mgJr+jmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExY2U2ZDM5MDk5ZTNkMTZhNjAzOTkyYWMyMWY1ODU1NGFh
ZWNmN2YwHhcNMjMwMTAxMTAzNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjdlMzM5NTIyMmMyMmY2MGI5YzcxNDZhODI4MmUwOTQzMzVjYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs95i5xyyQB6fuqfbdAIRhRjUxBpM
Wm/OFUiGHPSDTggCJNDddUkWaabTHZ0F69sDu7bDVh0ujN6XT3+djblS2mf1Kmj9
Otso5J9cc35hto+6oiiKb43eyWhiPrimNNKacL5IXGxyXQTpGNxUmhEHlerwHTPL
r+uXwWOdU3w65as89nHU7G5JZfM1u9QGDbw+TcIGSY2xQj6KgdvJDScUA3BNc+jO
NEtJGRgCk83AL0B2UnEKGdY++7r75uQnQzoi5zj9stX+47dp1e1haTLwbeQ+ZVX0
Jh1pcFBhZGt832ui5cIWKCHalwO06JcqC6RWPJgNEEk0jQDDJMWYynXYgwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMJ+M5UiLCL2C5xxRqgoLglDNctGMB8GA1UdIwQY
MBaAFKHObTkJnj0WpgOZKsIfWFVKrs9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2M1dE9RbWVQUmFtQTVrcXdoOVlWVXF1ejM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmUzNmEtZjU4ZS00NGUxLWI0MTUt
M2JmMGRmYmM3NDhlLzEvd240emxTSXNJdllMbkhGR3FDZ3VDVU0xeTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xZmUzNmEtZjU4ZS00NGUxLWI0MTUtM2JmMGRmYmM3NDhl
LzEvb2M1dE9RbWVQUmFtQTVrcXdoOVlWVXF1ejM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLVEoMA0E
AgACMAcDBQMqDk2AMA0GCSqGSIb3DQEBCwUAA4IBAQBbwMiivfwzzCM17dGC7Tih
WLW9xlSeTs/vmfIO6RBfRlA0APG972FdPm0VdB1r2/f4Fepy5Wv0ALJjWDOqdelv
Sg/y7qtRGochTf+Kk+ivRm78o7mThG9NWMwxZwmVQvG3l8Y6kfRvllE10HK9P0Xd
pA3gmImoTBOWiRXPtZF171BvJz29M5v3gUdrKz+pkhGuPKVBGUVtcgQ5DvB7tz99
x+8ZcnpTdv/h7b8Q5Q6Lf0jKCMDbON2+y3BSwc2Jy9JRQEEIgpsqVwZF+t0qHl0E
Lh05T5F9yR7oQeOvm6EEVNW/pdu2RzPUOamUciezPAQJtyuVcnvT1J3wp8jkhFKG
-----END CERTIFICATE-----