Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/lEhYc16YbS6jIRgW8_eGIm-PMSY.roa
File:                     lEhYc16YbS6jIRgW8_eGIm-PMSY.roa (raw, json)
Hash identifier:          HTQVYsK2TSokSheHwPbshcWYdKcZm7bb0TU0IrK0pFE=
Subject key identifier:   94:48:58:73:5E:98:6D:2E:A3:21:18:16:F3:F7:86:22:6F:8F:31:26
Certificate issuer:       /CN=2ac861a1ea4d23c9ff643f830f585f717d010991
Certificate serial:       07497CEF
Authority key identifier: 2A:C8:61:A1:EA:4D:23:C9:FF:64:3F:83:0F:58:5F:71:7D:01:09:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KshhoepNI8n_ZD-DD1hfcX0BCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/lEhYc16YbS6jIRgW8_eGIm-PMSY.roa
Signing time:             Sat 01 Jan 2022 03:01:37 +0000
ROA not before:           Sat 01 Jan 2022 03:01:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61323
IP address blocks:        45.84.20.0/22 maxlen: 24
                          2a0e:9380::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122256623 (0x7497cef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac861a1ea4d23c9ff643f830f585f717d010991
        Validity
            Not Before: Jan  1 03:01:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=944858735e986d2ea3211816f3f786226f8f3126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:98:6b:06:7c:2e:18:60:3e:e6:0a:d2:72:
                    18:71:14:1a:e9:2b:35:8e:0f:55:5e:19:b4:16:d5:
                    d8:3e:03:ff:6b:39:b8:d2:43:27:20:94:25:48:55:
                    81:ea:d6:3e:56:11:44:d3:69:bd:8d:76:b2:d8:fb:
                    69:c1:42:20:5e:f7:62:da:a3:72:52:ac:c5:c3:b5:
                    39:62:7a:24:29:76:41:b8:0f:b9:91:d7:e1:c5:01:
                    f0:26:b6:8e:82:4c:d7:08:ec:9d:4e:ca:57:6c:32:
                    e3:e9:32:e9:d1:cb:76:41:29:70:4b:29:ab:f7:45:
                    0f:00:3e:9c:d8:e8:2e:d0:46:b7:8a:c7:19:a8:9d:
                    ae:bf:e2:7a:9e:18:76:f1:6a:3c:fe:87:03:e2:e1:
                    df:48:a2:9b:f3:3e:9a:70:1e:ad:bf:01:79:94:81:
                    e2:d0:92:2e:d6:ad:82:86:25:77:cc:dc:74:d7:d9:
                    da:14:9b:cb:76:c9:db:ee:d6:a2:21:5b:cc:33:87:
                    44:f6:6d:64:13:63:04:9f:1f:5e:d6:57:5d:59:98:
                    43:f7:f6:22:b9:59:49:7b:73:2e:bc:bf:d0:36:c1:
                    3b:fc:5e:4f:d2:71:12:4e:5b:20:4f:ae:43:bf:50:
                    cd:df:a0:1b:ea:d3:78:b5:87:58:2e:24:a6:57:18:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:58:73:5E:98:6D:2E:A3:21:18:16:F3:F7:86:22:6F:8F:31:26
            X509v3 Authority Key Identifier:
                keyid:2A:C8:61:A1:EA:4D:23:C9:FF:64:3F:83:0F:58:5F:71:7D:01:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KshhoepNI8n_ZD-DD1hfcX0BCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/lEhYc16YbS6jIRgW8_eGIm-PMSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/KshhoepNI8n_ZD-DD1hfcX0BCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.20.0/22
                IPv6:
                  2a0e:9380::/29

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:1d:b9:24:10:7c:b2:52:3b:cf:c5:c0:54:c7:8c:5a:84:
         a8:c2:b8:70:28:33:6a:dc:31:0d:8e:f4:82:62:e6:e7:2c:52:
         05:0e:be:a9:bd:02:f9:20:60:79:87:3c:ba:94:c5:f5:46:11:
         53:38:b2:91:0e:6c:62:85:bc:00:2f:01:37:dd:08:fc:1d:dc:
         eb:98:ad:53:d8:35:1a:cc:e3:61:24:20:2c:ce:ec:39:32:6b:
         4b:cf:b1:00:28:b3:ff:5a:83:ba:db:b7:7a:bd:a1:a2:5d:0c:
         c8:e7:39:c2:15:dc:51:8f:2b:b1:69:01:87:1d:4b:1d:b2:56:
         e6:4f:86:37:21:0f:7e:9d:73:2e:c6:ac:15:0c:f8:dc:1c:b0:
         bd:dc:d5:15:8c:03:4d:99:16:55:d6:94:78:07:2e:41:47:73:
         68:51:f9:14:e1:0a:e9:10:0b:87:34:d2:92:41:90:ad:62:f8:
         60:f1:0c:b2:5f:2c:60:a2:30:7c:20:9d:12:73:1e:e5:f7:19:
         4a:59:b3:07:9b:d9:b4:4d:8b:99:25:99:c9:a3:35:4c:bb:3b:
         af:9e:3e:c9:a4:02:3b:9f:6d:09:9b:13:3c:bc:3b:a4:d2:0d:
         88:20:94:3f:2d:2d:56:83:ab:de:bc:c6:76:34:cf:08:64:e1:
         f3:59:4c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----